high7.5Public exploit code
CVE-2006-3963
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the (1) site_name p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Banex PHP MySQL Banner Exchange 2.21 - 'admin.php' Multiple SQL Injections2006-07-31 · webapps · php · Verified
- Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection2006-07-31 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the (1) site_name parameter to (a) signup.php, and the (2) id, (3) deleteuserbanner, (4) viewmem, (5) viewmemunb, (6) viewunmem,or (7) deleteuser parameters to (b) admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Banex | Banex | Version 2.21 |