Unscored CVE-2006-5907 EUVD-2006-5890GHSA-vmv2-9v9r-hc5f

SQL injection vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.2…

Published Nov 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

20061028 Re: Ban v0.1 (bannieres.php) File Include mailing-list
20779 vdb-entry
20061114 source verify of "Ban v0.1" SQL injection mailing-list