Ask a YES or NO question... and I´ll decide for you!
-
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('z',0)
Yes
2306
09:28
.. 210.075
-
${962753206+806982807}
No
2305
09:28
.. 210.075
-
123456|expr 879399950 + 817125305
No
2304
09:28
.. 210.075
-
'-var_dump(md5(841284419))-'
Yes
2303
09:28
.. 210.075
-
123456&set /A 860854850+941376130
No
2302
09:28
.. 210.075
-
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1413917189')))
Yes
2301
09:28
.. 210.075
-
${902111108+826347737}
No
2300
09:28
.. 210.075
-
<%- 916013680+886217924 %>
No
2299
09:28
.. 210.075
-
123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('y',2)
No
2298
09:28
.. 210.075
-
123456'and(select'1'from/**/cast(md5(1896920596)as/**/int))>'0
Yes
2297
09:28
.. 210.075