CVE-2006-3964

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...

CVE-2006-3964

The CVE-2006-3964 issue affects Banex PHP MySQL Banner Exchange 2.21, where a PHP remote file inclusion vulnerability in members.php allows an attacker to execute arbitrary PHP code via a URL supplied to the cfg_root parameter. The underlying flaw is improper handling of remote file input, enabli...

CVE-2006-3963

Banex PHP MySQL Banner Exchange 2.21 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via user-controlled parameters. Specifically, the site_name parameter to signup.php and the id, deleteuserbanner, viewmem, viewmemunb, viewunmem, and deleteuse...