Você pode gostar...
search union all select null,null#
lambendo pescoço
search and 8523=7596
gozando dentro
search\' order by 1#
search\') and sleep(5) and (\'cqzh\'=\'cqzh
search%\' and 3003=3003 and \'%\'=\'
search) union all select null,null,null,null,null,null,null,null,null#