DiveBook <= 1.1.4 - Unauthenticated SQL Injection

The filterdiver GET parameter, in pages where the DiveBook is embed, does not properly sanitise and validate user data, leading to an Unauthenticated SQL injection vulnerability. The PoC will be displayed once the issue has been remediated...

Exploit for CVE-2018-1002105

CVE-2018-1002105 PoC Authenticated PoCauthenticated-poc...