CVE-2007-5997 SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
MediumCVSS 6.5
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softbizscripts banner exchange network script | = 1.0 | No fix listed |
References
- 26401 exploit vdb-entry
- softbiz-banner-campaign-sql-injection(38401) vdb-entry
- 4619 exploit