Vulnerabilities

TI-2008-00605 CVE-2008-0635 · GHSA-g44r-fq78-q8px

Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows…

MEDIUM 47

Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.12448 Published 2008-02-06 No fix listed CWE-94

TI-2007-01969 CVE-2007-2047 · GHSA-9m52-47xr-v5f7

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media…

LOW 35

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01187 Published 2007-04-16 No fix listed

TI-2007-01968 CVE-2007-2046 · GHSA-7xcf-qfj5-5mpp

Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11…

LOW 36

Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01402 Published 2007-04-16 No fix listed

TI-2007-00464 CVE-2007-0477 · GHSA-f2xq-crc6-8r5p

Cross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before…

LOW 33

Cross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 (aka Max Media Manager before 0.3.31-alpha-pr2), and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitr…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01491 Published 2007-01-25 No fix listed

TI-2007-00353 CVE-2007-0363 · GHSA-qpcc-4hp3-6mw8

Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for…