Você pode gostar...
buceta cabeluda
search\') union all select null,null,null,null,null,null#
search union all select null,null,null-- vmch
search%\' and 5257=1398 and \'%\'=\'
search%\' order by 1-- dcpx
nilian tavares
search union all select null,null,null-- fphi
search\') and 5267=(select 5267 from pg_sleep(5)) and (\'lndn\'=\'lndn