CVE-2006-3963
Banex PHP MySQL Banner Exchange 2.21 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-3963. PoCs published by SirDarckCat.
AI-analyzed exploit summary The provided text describes SQL injection and remote file inclusion vulnerabilities in PHP MySQL Banner Exchange 2.1, but does not include functional exploit code. It outlines attack vectors without executable payloads.
Description
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the (1) site_name parameter to (a) signup.php, and the (2) id, (3) deleteuserbanner, (4) viewmem, (5) viewmemunb, (6) viewunmem,or (7) deleteuser parameters to (b) admin.php.
Exploits (2)
The provided text describes SQL injection and remote file inclusion vulnerabilities in PHP MySQL Banner Exchange 2.1, but does not include functional exploit code. It outlines attack vectors without executable payloads.
This is a writeup describing SQL injection and remote file inclusion vulnerabilities in PHP MySQL Banner Exchange 2.1. It provides example URLs demonstrating SQLi vectors but does not include executable exploit code.