SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected.
References
Configurations
Information
Published : 2007-11-21 14:46
Updated : 2017-09-28 18:29
NVD link : CVE-2007-6080
Mitre link : CVE-2007-6080
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
bcoos
- bcoos