1
     |
1
|
1
     |
1
|
1
     |
1
|
1
     |
1
|
1
     |
1
|
98766
     |
1
|
1
     |
1
|
1xhq6b86b2zzt
     |
1
|
1
     |
1
|
1' UNION SELECT NULL
     |
1
|
1
     |
1
|
1
     |
1
|
1')
     |
1
|
1
     |
1
|
1
     |
1
|
1)
     |
1
|
1
     |
1
|
1
     |
1
|
1"
     |
1
|
1
     |
1
|
1
     |
1
|
1'
     |
1
|
1
     |
1
|
1
     |
1
|
1.),"'(abcd
     |
1
|
1
     |
1
|
98766
     |
1
|
1"
     |
1
|
1)
     |
1
|
1'
     |
1
|
1')
     |
1
|
1('.,)"abcd
     |
1
|
1
     |
1
|
XMGPQZQvGU8
     |
I don’t even know how I ended up here, but I thought this post was great. I do2#78n1&;tknow who you are but certainly you’re going to a famous blogger if you aren’t already Cheers!
|
-1'
     |
1
|
mehgujae
     |
1
|
mehgujae
     |
1
|
"+response.write(956
     |
1
|
'+response.write(956
     |
1
|
response.write(95628
     |
1
|
"+response.write(913
     |
1
|
'+response.write(913
     |
1
|
response.write(91389
     |
1
|
"+response.write(905
     |
1
|
'+response.write(905
     |
1
|
response.write(90549
     |
1
|
dkhcsrns
     |
1
|
dkhcsrns
     |
1
|
bjfbytbe
     |
"|dir
|
dkhcsrns
     |
1
|
blcrccts
     |
..\..\..\..\..\..\..\..\windows\win.ini
|
bjfbytbe
     |
'|dir
|
dkhcsrns
     |
1
|
blcrccts
     |
................windowswin.ini
|
dkhcsrns
     |
1
|
bjfbytbe
     |
|dir
|
blcrccts
     |
À®À®À¯À®À®À¯À®À®À¯À®À®À¯À®À®À¯À®À®À¯À®À®À¯À®À®À¯windowsÀ¯win.ini
|
dkhcsrns
     |
1
|
bjfbytbe
     |
"&dir&"
|
dkhcsrns
     |
1
|
bjfbytbe
     |
'&dir&'
|
dkhcsrns
     |
1
|
bjfbytbe
     |
&dir
|
dkhcsrns
     |
1
|
bjfbytbe
     |
"|"ld
|
bjfbytbe
     |
'|'ld
|
SomeCustomInjected
     |
1
|
dkhcsrns
     |
1
|
SomeCustomInjected
     |
1
|
dkhcsrns
     |
1
|
SomeCustomInjecte
     |
1
|
dkhcsrns
     |
1
|
blcrccts
     |
WEB-INF\web.xml
|
SomeCustomInjected
     |
1
|
dkhcsrns
     |
1
|
SomeCustomInjected
     |
1
|
dkhcsrns
     |
1
|
bjfbytbe
     |
"|dir
|
dkhcsrns
     |
1
|
bjfbytbe
     |
'|dir
|
dkhcsrns
     |
1
|
bjfbytbe
     |
|dir
|
bjfbytbe
     |
"&dir&"
|
dkhcsrns
     |
1
|
dkhcsrns
     |
1
|
bjfbytbe
     |
'&dir&'
|
bjfbytbe
     |
&dir
|
SomeCustomInjecte
     |
1
|
blcrccts
     |
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
|
SomeCustomInjected
     |
1
|
blcrccts
     |
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n
|
SomeCustomInjected
     |
1
|
SomeCustomInjecte
     |
1
|
blcrccts
     |
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
bjfbytbe
     |
"|"ld
|
wbjvyagr
     |
1
|
bjfbytbe
     |
'|'ld
|
wbjvyagr
     |
1
|
mehgujae
     |
1"; waitfor delay '0:0:4' --
|
mehgujae
     |
1'; waitfor delay '0:0:4' --
|
mehgujae
     |
1; waitfor delay '0:0:4' --
|
mehgujae
     |
1';select pg_sleep(4); --
|
mehgujae
     |
1;select pg_sleep(4); --
|
mehgujae
     |
1"=sleep(4)="
|
mehgujae
     |
1'=sleep(4)='
|
mehgujae
     |
1" or (sleep(4)+1) limit 1 --
|
mehgujae
     |
1' or (sleep(4)+1) limit 1 --
|
mehgujae
     |
1" and sleep(4)="
|
mehgujae
     |
1' and (sleep(4)+1) limit 1 --
|
mehgujae
     |
1' and sleep(4)='
|
mehgujae
     |
1 or (sleep(4)+1) limit 1 --
|
dkhcsrns
     |
"+response.write(9060445*9366206)+"
|
bjfbytbe
     |
"|dir
|
mehgujae
     |
1 and sleep(4)
|
bjfbytbe
     |
'|dir
|
dkhcsrns
     |
'+response.write(9060445*9366206)+'
|
mehgujae
     |
1
|
mehgujae
     |
1
|
mehgujae
     |
1"; waitfor delay '0:0:4' --
|
mehgujae
     |
1'; waitfor delay '0:0:4' --
|
mehgujae
     |
1; waitfor delay '0:0:4' --
|
mehgujae
     |
1';select pg_sleep(4); --
|
mehgujae
     |
1;select pg_sleep(4); --
|
mehgujae
     |
1"=sleep(4)="
|
mehgujae
     |
1'=sleep(4)='
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
wbjvyagr
     |
1
|
mehgujae
     |
1" or (sleep(4)+1) limit 1 --
|
dkhcsrns
     |
response.write(9060445*9366206)
|
bjfbytbe
     |
|dir
|
mehgujae
     |
1' or (sleep(4)+1) limit 1 --
|
bjfbytbe
     |
"&dir&"
|
dkhcsrns
     |
"+response.write(9268983*9831957)+"
|
mehgujae
     |
1" and sleep(4)="
|
bjfbytbe
     |
'&dir&'
|
dkhcsrns
     |
'+response.write(9268983*9831957)+'
|
mehgujae
     |
1' and (sleep(4)+1) limit 1 --
|
bjfbytbe
     |
&dir
|
dkhcsrns
     |
response.write(9268983*9831957)
|
mehgujae
     |
1' and sleep(4)='
|
mehgujae
     |
1 or (sleep(4)+1) limit 1 --
|
mehgujae
     |
1 and sleep(4)
|
mehgujae
     |
1
|
mehgujae
     |
1
|
mehgujae
     |
1"; waitfor delay '0:0:4' --
|
mehgujae
     |
1'; waitfor delay '0:0:4' --
|
mehgujae
     |
1; waitfor delay '0:0:4' --
|
mehgujae
     |
1';select pg_sleep(4); --
|
mehgujae
     |
1;select pg_sleep(4); --
|
dkhcsrns
     |
"+response.write(9722304*9855114)+"
|
dkhcsrns
     |
'+response.write(9722304*9855114)+'
|
mehgujae
     |
1"=sleep(4)="
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
dkhcsrns
     |
response.write(9722304*9855114)
|
mehgujae
     |
1'=sleep(4)='
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1" or (sleep(4)+1) limit 1 --
|
mehgujae
     |
1' or (sleep(4)+1) limit 1 --
|
bjfbytbe
     |
"|"ld
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1" and sleep(4)="
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
bjfbytbe
     |
'|'ld
|
mehgujae
     |
1' and (sleep(4)+1) limit 1 --
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1' and sleep(4)='
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1 or (sleep(4)+1) limit 1 --
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1 and sleep(4)
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1
|
wbjvyagr
     |
SomeCustomInjectedHeader:injected_by_wvs
|
mehgujae
     |
1
|
cnlsqtfu
     |
1
|
hnsylaoe
     |
1
|
jglvhuoo
     |
1
|
lunch
     |
Mais non c'est pas "space" les concerts de Ukulélé, j'en ai même vu un de Thomas Fersen que j'ai adoré !
|
Baya
     |
Oh tu exagères tu sors pas 2,3 notes, t'arrives à jouer des trucs et même qu'on reconnait :)
Ptète pas en haut de l'affiche mais moi je dit vive les ukulélistes !!!
|
Jo
     |
Tu ne te prendrais pas pour Julien Doré, par hasard? Et tu sais les concerts de ukulélé... euh... comment te dire... je crois que c'est un peu space? Non? Bon c'est juste moi qui suis plus dans l'ère du temps!!
|
Apo
     |
Good Work on it !
Tu es ma star Vincent, quoiqu'il arrive !
Je confirme les propos de Snak, tu m'as fait hier une belle reprise des copains d'abord !
Et dans la deuxième image on dirait même que t'es musclé ! Tu es définitivement mon idole !
|
Mary
     |
J'adore comment est dessiné ton pantalon de rockstar! D'ailleurs j'aime bien toute la tenue. Par contre je t'imagine pas, mais pas du tout habillé comme ça. Laissons les rêves où ils sont :-D
|
Snak
     |
Je sais pas qui c'est ce Nimp qui arrive à jouer du Uku, mais sinon je connais une Xena qui joue presque "les copains d'abord".
|
Nitnit
     |
Héhé Vincent superstar du Uku!!!
Je vous fais Bambino quand vous voulez (Enfin juste le "Bambino Bambino" avec la dernière corde parce que le reste c'est trop dur )!!! :)
|
mary
     |
C'est trop ça! Lol . Mary lanceuse de ukulélistes!!!!
|