CVE-2006-5907

The CVE describes an SQL injection in the bannieres.php module of SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) by Jean-Christophe Ramos. The vulnerability arises from unsafely handling the id parameter, enabling remote attackers to inject SQL via user-controlled input. This exposes the p...