CVE:CVE-2007-0128
CNNVD:CNNVD-200701-116
Digirez 3.4及之前版本的info_book.asp中存在SQL注入漏洞。远程攻击者可以借助book_id参数，执行任意的SQL指令。
solution:Upgrade digiappz digirez to a higher version than 3.4,and avoid the version (,3.4]