Lucene search
+L

31 matches found

NVD
NVD
•added 2011/09/24 12:55 a.m.•23 views

CVE-2011-3769

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php...

5CVSS6.1AI score0.01242EPSS
SaveExploits0References4
Prion
Prion
•added 2011/09/24 12:55 a.m.•16 views

Information disclosure

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php...

5CVSS6.6AI score0.01242EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2011/09/24 12:00 a.m.•32 views

CVE-2011-3769

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php...

6.1AI score0.01242EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/09/24 12:00 a.m.•3 views

CVE-2011-3769: Exposure of Sensitive Information to an Unauthorized Actor

PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php...

5CVSS5.9AI score0.01242EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2009/01/21 12:00 a.m.•24 views

PHPAds 2.0 XSS / Administrative Bypass

Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser at...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/01/19 12:00 a.m.•20 views

phpads 2.0 - Multiple Vulnerabilities

phpads 2.0 - Multiple Vulnerabilities Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/01/19 12:00 a.m.•40 views

phpads 2.0 - Multiple Vulnerabilities

Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser at...

5.8AI score
SaveExploits0
zdt
zdt
•added 2009/01/19 12:00 a.m.•25 views

PHPAds 2.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================== PHPAds 2.0 Multiple Remote Vulnerabilities ========================================== Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critica...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/01/19 12:00 a.m.•23 views

PHPAds 2.0 Multiple Remote Vulnerabilities

No description provided by source. Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser at...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2006/12/10 12:00 a.m.•11 views

PT-2006-7024 · Phpadsnew · Phpadsnew

Name of the Vulnerable Software and Affected Versions: phpAdsNew version 2.0.4-pr2 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the phpAds path parameter. This issue is disputed, as phpAds path is used as a constant...

7.5CVSS7.6AI score0.01426EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/17 12:00 a.m.•4 views

CVE-2005-3646: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in 1 logout.php and 2 index.php...

7.5CVSS6.3AI score0.02235EPSS
SaveExploits1References2
Rows per page
Query Builder