CVE-2007-0306

CVE-2007-0306 describes a SQL injection in Digiappz DigiAffiliate 1.4 and earlier, via the parameter id in visu_user.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and availability (partial). Exploitation deta...