DigiAppz DigiRez Info_Book.ASP SQL注入漏洞

DigiAppz DigiRez是一款基于ASP的WEB应用程序。 DigiAppz DigiRez不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'InfoBook.ASP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息 Digiappz Digirez 3.4 Digiappz Digirez 3.3 Digiappz Digirez 3.2 Digiappz Digirez 3.1 Digiappz Digirez 3.0 目前没有解决方案提供： http://www.digiappz.com/...

Digiappz Freekot ASP SQL注入漏洞

Digiappz Freekot是一款基于ASP的WEB应用程序。 Digiappz Freekot不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是由于登录脚本对用户提交的"login"和"password"参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Digiappz Freekot 1.01 Digiappz Freekot http://www.digiappz.com/freekot2.asp?id=6...

CVE-2006-4524

Multiple SQL injection vulnerabilities in loginverif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the 1 login or 2 password parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-4524

Multiple SQL injection vulnerabilities in loginverif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the 1 login or 2 password parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-4524

CVE-2006-4524 affects Digiappz Freekot 1.01, where multiple SQL injection flaws exist in login_verif.asp. The vulnerability enables remote attackers to inject SQL commands through the login or password parameters, potentially compromising data and the application. The issue is documented with a h...

Digiappz Freekot 1.01 - ASP SQL Injection

source: https://www.securityfocus.com/bid/19768/info Digiappz Freekot is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit could allow an attacker to compromise the application, retrieve sensitive information, or modify data...

Digiappz Freekot 1.01 - ASP SQL Injection

Digiappz Freekot 1.01 - ASP SQL Injection source: https://www.securityfocus.com/bid/19768/info Digiappz Freekot is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit could allow an attacker to compromise the application,...