CVE-2008-3309

CVE-2008-3309 is a SQL injection vulnerability in DigiLeave 1.2 and earlier, exposed via info_book.asp where the book_id parameter is used. The issue allows remote attackers to execute arbitrary SQL commands. The affected component is info_book.asp within DigiLeave, with the root cause being unsa...

CVE-2008-3309: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in infobook.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

DigiLeave 1.2 (info_book.asp book_id) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " DigiLeave V1.2Blind SQL Injection Exploit \n"; print " infobook.asp bookid \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n...

digileave-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " DigiLeave V1.2Blind SQL Injection Exploit \n"; print " infobook.asp bookid \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

DigiLeave 1.2 (info_book.asp book_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= DigiLeave 1.2 infobook.asp bookid Blind SQL Injection Exploit ================================================================= !/usr/bin/perl use LWP::UserAgent; use...

CVE-2007-2880: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...

Sql injection

SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2007-0128

SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2007-0128

CVE-2007-0128 describes an SQL injection vulnerability in info_book.asp for Digirez 3.4 and earlier, where the book_id parameter can be manipulated to execute arbitrary SQL commands remotely. Affected software is Digirez (versions up to 3.4 and earlier); the underlying root cause is improper hand...

CVE-2007-0128

SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2007-0128: Undefined Security Weakness

SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...