CVE-2007-0306

CVE-2007-0306 describes a SQL injection in Digiappz DigiAffiliate 1.4 and earlier, via the parameter id in visu_user.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and availability (partial). Exploitation deta...

DigiAppz DigiAffiliate Visu_User.ASP SQL注入漏洞

DigiAppz DigiAffiliate是一款基于ASP的WEB应用程序。 DigiAppz DigiAffiliate不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'VisuUser.asp'脚本对用户提交的'cat'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Digiappz DigiAffiliate 1.4 目前没有解决方案提供： http://www.digiappz.com !/usr/bin/perl Script Name: DigiAffiliate = V1.4 Remote Blind SQL...