Description
SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the size_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- ads-image-sql-injection(51277) vdb-entry
- 35453 vdb-entry
- 35549 third-party-advisory