UTF-7

It appears that the values were UTF-8 but interpreted as UTF-7 for some reason.

languagehat.com: KAMIKAZE. 2004

Many text editors claim they support Unicode (UTF-7, UTF-8 and UTF-16), however, they only convert Unicode to the system encoding (or ANSI) internally when they open files, so they cannot actually edit characters that are not supported by the system encoding.

2BakSa.Net 2010

UTF-7, which is a lot like UTF-8 but guarantees that the high bit will always be zero, so that if you have to pass Unicode through some kind of draconian police-state email system that thinks 7 bits are quite enough, thank you it can still squeeze through unscathed.

Public marks 2010

* MFSA 2010-61: UTF-7 XSS by overriding document charset using type attribute

Ubuntu Forums BSG Fan 2010

It is also possible that certain browsers using the UTF-7 encoding are vulnerable to a different cross-site scripting vulnerability. dsa-1807-1. txt

Hack In The Box 2009

It is also possible that certain browsers using the UTF-7 encoding are vulnerable to a different cross-site scripting vulnerability. dsa-1807-1. txt

Hack In The Box 2009

(CVE-2008-1678) It was discovered that in certain conditions, Apache did not specify a default character set when returning certain error messages containing UTF-7 encoded data, which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output.

SecuObs.com 2009

It is also possible that certain browsers using the UTF-7 encoding are vulnerable to a different cross-site scripting vulnerability. dsa-1807-1. txt

Hack In The Box 2009

The Consortium also defines how conversion occurs between character sets such as UTF-7 and UTF-8.

The Code Project Latest Articles 2009

It is also possible that certain browsers using the UTF-7 encoding are vulnerable to a different cross-site scripting vulnerability. dsa-1807-1. txt

Hack In The Box 2009