Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/03/05 7:30 p.m.3 views

CVE-2019-25503

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...

7.1CVSS6.2AI score0.00101EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/04 6:31 p.m.2 views

EUVD-2019-19729

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...

7.1CVSS6.2AI score0.00101EPSS
Exploits1References3
OSV
OSV
added 2026/03/04 6:16 p.m.2 views

CVE-2019-25503

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...

7.1CVSS6.1AI score
Exploits0References2
NVD
NVD
added 2026/03/04 6:16 p.m.2 views

CVE-2019-25503

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...

7.1CVSS0.00101EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:15 p.m.1 views

CVE-2019-25503

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...

7.1CVSS6.2AI score0.00101EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-2860

Malware in sbrugna...

7.5CVSS6.4AI score0.00569EPSS
Exploits1References6
Prion
Prion
added 2009/02/20 6:46 a.m.10 views

Sql injection

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...

7.5CVSS8.8AI score0.00297EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2009/02/18 5:0 p.m.18 views

CVE-2008-6163

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...

8.3AI score0.00297EPSS
Exploits1References5
CVE
CVE
added 2009/02/18 5:0 p.m.38 views

CVE-2008-6163

OpenX (v2.6.1) OpenX ac.php bannerid Parameter SQL Injection: the bannerid input is used directly in SQL queries without validation, enabling remote attackers to manipulate queries and potentially access sensitive data or execute arbitrary PHP code. Affected component: www/delivery/ac.php. Root c...

7.5CVSS8.6AI score0.00297EPSS
Exploits1References5Affected Software1
FreeBSD
FreeBSD
added 2008/10/03 12:0 a.m.20 views

openx -- sql injection vulnerability

Secunia reports: OpenX can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "bannerid" parameter in www/delivery/ac.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...

3.2AI score
Exploits0References2
NVD
NVD
added 2008/06/26 5:41 p.m.12 views

CVE-2008-2867

SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...

7.5CVSS8.3AI score0.00569EPSS
Exploits1References5
Cvelist
Cvelist
added 2008/06/26 5:0 p.m.18 views

CVE-2008-2867

SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...

8.3AI score0.00569EPSS
Exploits1References5
Rows per page
Query Builder