Vulnerabilities

TI-2019-15556 CVE-2019-25503 · GHSA-g3vq-33mh-9r2p

PHPads 2.0 SQL Injection via click.php3 bannerID

MEDIUM 64

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00383 Published 2026-03-04 No fix listed CWE-89

TI-2011-03326 CVE-2011-3769 · GHSA-9h3h-j7rm-p6pr

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request…

LOW 25

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01242 Published 2011-09-24 No fix listed CWE-200

Vulnerabilities

Filters

PHPads 2.0 SQL Injection via click.php3 bannerID

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request…