CVE-2007-0520 SQL injection vulnerability in banner.php in Unique Ads (UDS) 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in banner.php in Unique Ads (UDS) 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unique ads | = 1.0 | No fix listed |
References
- 2181 third-party-advisory
- 20070121 SQL Injection in Unique Ads ( UDS ) mailing-list
- uniqueads-banner-sql-injection(31660) vdb-entry