CVE-2017-15976

CVE-2017-15976 affects ZeeBuddy 2x and is a SQL injection vulnerability accessible via the GET parameter groupid in admin/editadgroup.php. The issue arises from unsanitized user input in this parameter, enabling an attacker to inject SQL commands, potentially altering or extracting data. Public r...

CVE-2008-3604

The vulnerability is CVE-2008-3604: an SQL injection in ZeeBuddy 2.1’s bannerclick.php, exploitable via the adid parameter. This is a parameter-based injection that could allow remote attackers to execute arbitrary SQL commands. Public metrics indicate a high/critical impact profile (CVSS v2 base...