Vulnerabilities

TI-2006-05326 CVE-2006-5515 · GHSA-chmv-58mx-fcwj

Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds…

LOW 23

Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01644 Published 2006-10-26 No fix listed

TI-2006-01351 CVE-2006-1397 · GHSA-g65g-rqg8-85xr

Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery modul…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01905 Published 2006-03-28 No fix listed

TI-2005-03585 CVE-2005-3791 · GHSA-f2j9-9pqc-53qf

HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows…

LOW 25

HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01041 Published 2005-11-24 No fix listed

TI-2005-03441 CVE-2005-3646 · GHSA-5wvg-5fxw-mw47

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds…

LOW 37

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) log…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02235 Published 2005-11-17 No fix listed CWE-89

TI-2005-03440 CVE-2005-3645 · GHSA-v46c-cm44-3gvq

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to…

LOW 27

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02257 Published 2005-11-17 No fix listed CWE-200

TI-2005-02500 CVE-2005-2636 · GHSA-rpqr-x3mc-8f22

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before…

LOW 35

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-08-20 No fix listed

TI-2005-02499 CVE-2005-2635 · GHSA-5fwq-4v99-8fx9

Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow…

LOW 26

Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01818 Published 2005-08-20 No fix listed