Sql injection

SQL injection vulnerability in modbanners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mbtracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected...

CVE-2007-3250: Undefined Security Weakness

SQL injection vulnerability in modbanners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mbtracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected...