About nopCommerce

This is a sample comment...

123456

123456

123456

123456

123456

123456

123456

123456

${@var_dump(md5(780023656))};

123456

123456

123456

'-var_dump(md5(607419172))-'

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

${841501923+891783490}

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456
expr 972079507 + 886355709

123456

123456

123456

123456'and/**/extractvalue(1,concat(char(126),md5(1337165617)))and'

123456|expr 970946071 + 908055662

123456

123456

123456"and/**/extractvalue(1,concat(char(126),md5(1780411180)))and"

123456$(expr 980678281 + 807255191)

123456

123456

extractvalue(1,concat(char(126),md5(1344428867)))

123456&set /A 862119476+861095253

123456

/*1*/{{992447437+848886439}}

123456'and(select'1'from/**/cast(md5(1839061406)as/**/int))>'0

expr 975398088 + 815281918

123456

${834533134+913204894}

123456/**/and/**/cast(md5('1467537976')as/**/int)>0

123456

123456

123456

${(858073139+951655292)?c}

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1672306985')))

123456

123456

123456

#set($c=833934327+933922685)${c}$c

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1791233686')))>'0

123456

123456

123456

<%- 913691819+938868899 %>

123456鎈'"\(

123456

123456

123456

123456'"\(

123456

123456

123456

123456

123456

123456

123456/**/and+1=1

123456

123456

123456

123456/**/and+4=7

123456

123456

123456

123456'and'w'='w

123456

123456

123456

123456'and't'='m

123456

123456

123456"and"p"="p

123456

123456

123456"and"a"="x

123456

123456

(select*from(select+sleep(0)union/**/select+1)a)

123456

123456

(select*from(select+sleep(2)union/**/select+1)a)

123456

123456

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

123456

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

123456

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456

123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('y',0)

123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('p',2)

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',0)='g

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',2)='g

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456