• 1 "'><!--
• 1 "'><%= 1234567890*27 %> @x varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 "'><?php print(1234567890*27);?> @x varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 "'><cfoutput>
• 1 "Xx<XaXaXXaXaX>xX "Xx<XaXaXXaXaX>xX varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 "Xx<XaXaXXaXaX>xX @x varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 ASPTEST<%=Date%> @x varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 DeClARe "'><!--
• 1 DeClARe "'><%= 1234567890*27 %> varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 DeClARe "'><?php print(1234567890*27);?> varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 DeClARe "'><cfoutput>
• 1 DeClARe "Xx<XaXaXXaXaX>xX "Xx<XaXaXXaXaX>xX set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 DeClARe "Xx<XaXaXXaXaX>xX varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 DeClARe @x "Xx<XaXaXXaXaX>xX set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 DeClARe @x varchar(99) set @x=0x77616974666f722064656c61792027303a303a323027 exec(@x)--
• 1 x
• 1 x;ls -l;dir;
• 1 x;ls -l;dir; "'><!--
• 1 x;ls -l;dir;--
• 1 x;ls -l;dir; -l;dir;--
• quickscope mxbox 360 controllers
• Search "'><!--
• Search "'><%= 1234567890*27 %> "'><!--
• Search "'><%= 1234567890*27 %> "'><cfoutput>
• Search "'><%= 1234567890*27 %> store here...x
• Search "'><?php print(1234567890*27);?> "'><!--
• Search "'><?php print(1234567890*27);?> store here...x
• Search "'><cfoutput>
• Search "Xx<XaXaXXaXaX>xX "'><!--
• Search "Xx<XaXaXXaXaX>xX store here...x
• Search ASPTEST<%=Date%> "'><!--
• Search ASPTEST<%=Date%> store here...x
• Search entire "'><!--
• Search entire "'><!--"'><!--
• Search entire "'><!--"'><%= 1234567890*27 %>
• Search entire "'><!--"'><?php print(1234567890*27);?>
• Search entire "'><!--"'><cfoutput>
• Search entire "'><!--"Xx<XaXaXXaXaX>xX
• Search entire "'><!--x
• Search entire "'><!--x';",)`
• Search entire "'><!--x;ls -l;dir;
• Search entire "'><!--XxX1319722174131XxX
• Search entire "'><!--XxX1319866721756XxX
• Search entire "'><%= 1234567890*27 %>--
• Search entire "'><%= 1234567890*27 %> here...x
• Search entire "'><?php print(1234567890*27);?>--
• Search entire "'><?php print(1234567890*27);?> here...x
• Search entire "'><cfoutput>
• Search entire "Xx<XaXaXXaXaX>xX--
• Search entire "Xx<XaXaXXaXaX>xX here...x
• Search entire ASPTEST<%=Date%>--
• Search entire ASPTEST<%=Date%> here...x
• Search entire store "'><%= 1234567890*27 %>...x
• Search entire store "'><cfoutput>
• Search entire store "Xx<XaXaXXaXaX>xX...x
• Search entire store ASPTEST<%=Date%>...x
• Search entire store here...
• Search entire store here..."'><!--
• Search entire store here..."'><%= 1234567890*27 %>
• Search entire store here..."'><?php print(1234567890*27);?>
• Search entire store here..."'><cfoutput>
• Search entire store here..."Xx<XaXaXXaXaX>xX
• Search entire store here...ASPTEST<%=Date%>
• Search entire store here...x
• Search entire store here...x "'><!--
• Search entire store here...x "'><%= 1234567890*27 %>
• Search entire store here...x "'><?php print(1234567890*27);?>
• Search entire store here...x "'><cfoutput>
• Search entire store here...x "Xx<XaXaXXaXaX>xX
• Search entire store here...x;ls -l;dir;
• Search entire store here...x ASPTEST<%=Date%>
• Search entire store here...x x';",)`
• Search entire store here...XxX1319493933224XxX
• Search entire store here...x XxX1319493933224XxX
• Search entire store x';",)`...x
• Search entire store XxX1319493933224XxX...x
• Search entire x
• Search entire x';",)`--
• Search entire x';",)` here...x
• Search entire x;ls -l;dir;--
• Search entire x;ls -l;dir; here...x
• Search entire XxX1319493933224XxX here...x
• Search entire XxX1319722174131XxX--
• Search entire XxX1319866721756XxX--
• Search x
• Search x';",)` "'><!--
• Search x';",)` store here...x
• Search x;ls -l;dir; "'><!--
• Search XxX1319493933224XxX store here...x
• Search XxX1319722174131XxX "'><!--
• Search XxX1319866721756XxX "'><!--
• x
• x "'><%= 1234567890*27 %>
• x "'><cfoutput>
• x "Xx<XaXaXXaXaX>xX
• x ASPTEST<%=Date%>
• x x
• x x';",)`
• x x;ls -l;dir;
• x XxX1319944238231XxX