Description
A SQL injection vulnerability exists in Softbiz Banner Exchange Network Script version 1.0. Input parameters are directly used in database queries without sanitization.
Impact
Attackers can inject SQL commands to extract all database contents including user accounts, banner statistics, and administrative credentials.
Solution
Apply parameterized queries. Contact Softbiz for a security patch.