I have a site that is vulnerable to alert(1); but not vulnerable to alert('Alert'); Is it vulnerable? For some reason it is not possible to pass text, only numbers. Is it possible to invade or do something ?!
closed as unclear what you're asking by techraf, SilverlightFox, schroeder♦ Apr 9 '17 at 12:19
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
It seems that the server is protected by a Web Application Firewall (WAF) or something similar which filters certain characters out of the request ... To bypass such filters there are many resources online:
Use Google to find more ;)
Be also aware that Browsers like Chrome have a built-in XSS protection which can also block such attacks.