CVE-2007-5997
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0...
CVE-2007-5997 is a medium vulnerability (CVSS 6.5) in Softbizscripts Banner Exchange Network Script, published November 15, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 59th percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 0.87%EPSS, 59th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Softbiz Banner Exchange Network Script 1.0 - SQL Injection | 2007-11-11 |
What each source reports
NVD Score used
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2007-5997- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2007-5997- Updated
- 2026-11-02
EUVDEUVD-2007-5967No score
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
- Record
EUVD-2007-5967- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rq77-jwg8-cmgxNo score
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0...
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
- Record
GHSA-rq77-jwg8-cmgx- Weakness
- CWE-89
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.