These are all SQL Inection vulnerabilities. You replace the (usually numeric) url parameter with crafted SQL.

More info: https://www.owasp.org/index.php/SQL_Injection

My thoughts exactly.. though I didn't have the guts to paste these into my curl.