CVE-2006-3963

Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the (1) site_name parameter to (a) signup.php, and the (2) id, (3) deleteuserbanner, (4) viewmem, (5) viewmemunb, (6) viewunmem,or (7) deleteuser parameters to (b) admin.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.09% chance of exploitation in the next 30 days, 63th percentile

Published

2006-08-01

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/28307
• https://www.exploit-db.com/exploits/28306

References

• CVE Record
• NVD entry

Related

• CVE-2006-3962
• CVE-2006-3964
• CVE-2006-3961
• CVE-2006-3966
• CVE-2006-3960
• CVE-2006-3967