CVE-2007-0306: Undefined Security Weakness

SQL injection vulnerability in visuuser.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0306

CVE-2007-0306 describes a SQL injection in Digiappz DigiAffiliate 1.4 and earlier, via the parameter id in visu_user.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and availability (partial). Exploitation deta...

DigiAppz DigiAffiliate Visu_User.ASP SQL注入漏洞

DigiAppz DigiAffiliate是一款基于ASP的WEB应用程序。 DigiAppz DigiAffiliate不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'VisuUser.asp'脚本对用户提交的'cat'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Digiappz DigiAffiliate 1.4 目前没有解决方案提供： http://www.digiappz.com !/usr/bin/perl Script Name: DigiAffiliate = V1.4 Remote Blind SQL...

DigiAffiliate <= 1.4 (visu_user.asp id) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: DigiAffiliate = V1.4 Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.digiappz.com $$ : .299 .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

digi-sql.txt

!/usr/bin/perl Script Name: DigiAffiliate : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

DigiAffiliate <= 1.4 (visu_user.asp id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== DigiAffiliate : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...

DigiAffiliate 1.4 - id SQL Injection

DigiAffiliate 1.4 - id SQL Injection !/usr/bin/perl Script Name: DigiAffiliate : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

DigiAffiliate 1.4 - 'id' SQL Injection

!/usr/bin/perl Script Name: DigiAffiliate : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...