A Blind SQL Injection vulnerability exists in Advanced Ads – Tracking by Advanced Ads GmbH, allowing an attacker with low privileges to execute unauthorized SQL commands. This flaw affects versions prior to 4.0.0. The vulnerability can lead to high confidentiality impact and low availability impact but does not affect integrity.