20141209

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

3

3

 

20141209

3

3

3

 

20141209

javascript:netsparker(0x0124FC)

3

3

 

20141209

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

3

3

 

20141209

3

3

3

 

20141209

3

3

 

20141209

3

3

3

 

20141209

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

3

3

 

20141209

3

3

3

 

20141209

 

3

3

 

20141209

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

3

3

 

20141209

3

3

3

 

20141209

;ns:expression(netsparker(0x012507));

3

3

 

20141209

3

3

3

 

20141209

NSFTW

3

3

 

20141209

3

3

3

 

20141209

body{x:expression(netsparker(0x01250A))}

3

3

 

20141209

3

3

3

 

20141209

'+NSFTW+'

3

3

 

20141209

*/netsparker(0x01250E);/*

3

3