CVE-2007-5997

Softbiz Banner Exchange Network Script 1.0 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Khashayar Fereidani · textwebappsphp
https://www.exploit-db.com/exploits/4619

Scores

EPSS 0.0039
EPSS Percentile 59.8%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

softbizscripts/banner_exchange_network_script

Timeline

Published Nov 15, 2007
Tracked Since Feb 18, 2026