CVE-2006-3012: Undefined Security Weakness

SQL injection vulnerability in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via the 1 login parameter in a client/stats.php and b admin/stats.php, or the 2 pass parameter in client/stats.php...