Back to search
CVE-2007-3250
Published: Jun 18, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
SQL injection vulnerability in mod_banners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mb_tracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
25684
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2218
vdb-entry
x_refsource_VUPEN
elxis-modbanners-sql-injection(34873)
vdb-entry
x_refsource_XF
36305
vdb-entry
x_refsource_OSVDB
2806
third-party-advisory
x_refsource_SREASON
20070614 Elxis CMS <= 2006.4 - banner module - sql injection
mailing-list
x_refsource_BUGTRAQ
24478
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now