kokx

<PUBLIC:COMPONENT TAGNAME="xss">
   <PUBLIC:ATTACH EVENT="ondocumentready" ONEVENT="main()" LITERALCONTENT="false"/>
</PUBLIC:COMPONENT>
<SCRIPT>
   function main()
   {
     alert("XSS");
   }
</SCRIPT>

kokx

+------------------+------+-------+--------------------+-------------------------------------+
| Volume/Partition | FS   | Size  | Purpose/Mountpoint | Notes                               |
+------------------+------+-------+--------------------+-------------------------------------+
| /dev/sda         | -    | 320GB |                    |                                     |
|   /dev/sda1      | NTFS | 130GB | Windows C:\ :(     |                                     |
|   /dev/sda2      | ext2 | 300MB | /boot              |                                     |
|   /dev/sda3      | swap | 2GB   | swap               |                                     |
|   /dev/sda4      | -    |       | extended           | Includes /dev/sda5 and /dev/sda6    |
|   /dev/sda5      | ext4 | 7GB   | /                  |                                     |
|   /dev/sda6      | LVM2 | 180GB | LVM2 Volume        |                                     |

kokx

    protected static $_colors = array(
        'aliceblue', 'antiquewhite', 'aqua', 'aquamarine', 'azure', 'beige',
        'bisque', 'black', 'blanchedalmond', 'blue', 'blueviolet', 'brown',
        'burlywood', 'cadetblue', 'chartreuse', 'chocolate', 'coral',
        'cornflowerblue', 'cornsilk', 'crimson', 'cyan', 'darkblue', 'darkcyan',
        'darkgoldenrod', 'darkgray', 'darkgrey', 'darkgreen', 'darkkhaki',
        'darkmagenta', 'darkolivegreen', 'darkorange', 'darkorchid', 'darkred',
        'darksalmon', 'darkseagreen', 'darkslateblue', 'darkslategray',
        'darkslategrey', 'darkturquoise', 'darkviolet', 'deeppink', 'deepskyblue',
        'dimgray', 'dimgrey', 'dodgerblue', 'firebrick', 'floralwhite',

kokx

/*
 * @date 2010/10/04
 * @author Pieter Kokx <p.a.kokx@student.tue.nl> (0747517)
 * @author Mitchel Brunings <m.d.brunings@student.tue.nl> (0746097)
 */

import java.util.*;
import java.io.*;

public class Sudoku {

kokx

/*
 * @date 2010/10/04
 * @author Pieter Kokx <p.a.kokx@student.tue.nl> (0747517)
 * @author Mitchel Brunings <m.d.brunings@student.tue.nl> (0746097)
 */

import java.util.*;
import java.io.*;

public class Sudoku

kokx

RewriteEngine On

RewriteCond %{REQUEST_FILENAME} -s [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d

RewriteRule ^.*$ - [NC,L]
RewriteRule ^.*$ index.php [NC,L]

SetEnv APPLICATION_ENV development

kokx

<?php
/**
 * Firal
 *
 * LICENSE
 *
 * This source file is subject to the new BSD license that is bundled
 * with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:

kokx

pieter@pieter-desktop:~$ echo "<?php
\`ls /asdfasdfasdfasdf\`;" | php
ls: kan geen toegang krijgen tot /asdfasdfasdfasdf: Bestand of map bestaat niet
pieter@pieter-desktop:~$ php --interactive
Interactive shell

php > `ls /asdadfagsdasdf`

kokx

Index: zend/library/Zend/Db/Adapter/Pdo/Abstract.php
===================================================================
--- zend/library/Zend/Db/Adapter/Pdo/Abstract.php	(revision 21071)
+++ zend/library/Zend/Db/Adapter/Pdo/Abstract.php	(working copy)
@@ -187,6 +187,26 @@
     }
 
     /**
+     * Excecute an SQL statement and return a PDOStatement-like object
+     *

kokx

<?php
/**
 * Firal
 *
 * LICENSE
 *
 * This source file is subject to the new BSD license that is bundled
 * with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:
 * http://firal.org/licenses/new-bsd