Sql injection

SQL injection vulnerability in modbanners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mbtracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected...

CVE-2007-3250

The CVE-2007-3250 issue affects Elxis CMS (mod_banners.php) where an SQL injection is possible via the mb_tracker cookie. It targets installations running before 2006.4 (20070613); the product was patched without updating the version number, and later downloads of 2006.4 are not affected. Remedia...