Vulnerabilities

TI-2007-03891 CVE-2007-4020 · GHSA-ccw9-4m3j-6grw

Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-07-26 No fix listed

TI-2006-01329 CVE-2006-1375 · GHSA-2qff-fp25-r737

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a…

LOW 26

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01528 Published 2006-03-24 No fix listed

TI-2006-01328 CVE-2006-1374 · GHSA-f4fv-j28h-3vxr

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows…

LOW 35

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0128 Published 2006-03-24 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF…

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a…

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows…