Sql injection

SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected...

CVE-2007-6080

CVE-2007-6080 : SQL injection in the banners module of bcoos, via bid parameter in modules/banners/click.php. Affected versions include 1.0.10 and 1.0.13; remote attackers could execute arbitrary SQL commands. Root cause identified as improper handling of input in the banners/click.php script. No...

CVE-2007-5061

SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php in a banners action...