63 matches found
CVE-2007-6080: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected...
Sql injection
Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...
CVE-2007-0520: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...