CVE-2007-0520

The CVE-2007-0520 entry describes a SQL injection in banner.php of Unique Ads (UDS) 1.x, exploitable via the bid parameter to execute arbitrary SQL commands remotely. This vulnerability is confirmed by multiple sources (NVD entry and related references) and is categorized with network attack vect...

CVE-2007-0520: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...