[PHPADSNEW-SA-2005-001] phpAdsNew and phpPgAds 2.0.6 fix multiple vulnerabilities

======================================================================== phpAdsNew / phpPgAds security advisory PHPADSNEW-SA-2005-001 ------------------------------------------------------------------------ Advisory ID: PHPADSNEW-SA-2005-001 Date: 2005-Aug-17 Security risk: highly critical...

phpAdsNew205.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpAdsNew/phpPgAds 2.0.5 Local file inclusion cXIb8O3.16 Author: Maksymilian Arciemowicz cXIb8O3 from SECURITYREASON.COM TEAM Date: 14.07.2005 01:54 GMT+01.00 - --- 0.Description --- phpAdsNew is an open-source ad server, with an integrated banner...

CVE-2005-2498

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier PEAR XML-RPC for PHP, as used in multiple products including 1 Drupal, 2 phpAdsNew, 3 phpPgAds, and 4 phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be...

CVE-2005-2498

PHPXMLRPC

CVE-2005-2498: Improper Control of Generation of Code

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier PEAR XML-RPC for PHP, as used in multiple products including 1 Drupal, 2 phpAdsNew, 3 phpPgAds, and 4 phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be...

[SA15883] phpAdsNew XML-RPC PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-0791

CVE-2005-0791 describes an XSS vulnerability in the adframe.php component of phpAdsNew 2.0.4-pr1. The issue occurs when PHP’s register_globals is enabled, allowing remote attackers to inject arbitrary web script or HTML via the refresh parameter. The vulnerability is confirmed by multiple sources...

CVE-2005-0791

Cross-site scripting XSS vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter...

CVE-2005-0790

phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to 1 lib-xmlrpcs.inc.php, 2 maintenance-activation.php, 3 maintenance-cleantables.php, 4 maintenance-autotargeting.php, 5 maintenance-reports.php, 6 phpads.php, 7 remotehtmlview.php, 8 click.php, 9...

CVE-2005-0790

CVE-2005-0790 affects phpAdsNew 2.0.4. The vulnerability allows remote attackers to obtain sensitive information by directly requesting specific PHP scripts (lib-xmlrpcs.inc.php, maintenance-activation.php, maintenance-cleantables.php, maintenance-autotargeting.php, maintenance-reports.php, phpad...

CVE-2005-0791: Undefined Security Weakness

Cross-site scripting XSS vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter...

CVE-2005-0790: Undefined Security Weakness

phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to 1 lib-xmlrpcs.inc.php, 2 maintenance-activation.php, 3 maintenance-cleantables.php, 4 maintenance-autotargeting.php, 5 maintenance-reports.php, 6 phpads.php, 7 remotehtmlview.php, 8 click.php, 9...

[SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 Author: Maksymilian Arciemowicz cXIb8O3 Date: 13.3.2005 from securityreason.com TEAM - --- 0.Description --- phpAdsNew is an open-source ad server, with an integrated banner management interface a...

CVE-2005-0791

Cross-site scripting XSS vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter...

CVE-2005-0790

phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to 1 lib-xmlrpcs.inc.php, 2 maintenance-activation.php, 3 maintenance-cleantables.php, 4 maintenance-autotargeting.php, 5 maintenance-reports.php, 6 phpads.php, 7 remotehtmlview.php, 8 click.php, 9...

PHPAdsNew 2.0.4 - AdFrame.php Cross-Site Scripting

PHPAdsNew 2.0.4 - AdFrame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/12803/info phpAdsNew is reportedly affected by a remote cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

PHPAdsNew 2.0.4 - 'AdFrame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12803/info phpAdsNew is reportedly affected by a remote cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

SQL-инъекция в phpAdsNew

--------------------------------------------------------- SQL-инъекция в phpAdsNew --------------------------------------------------------- Автор: Григоров Роман Дата: Январь 13, 2005 e-mail: roman at mosk dot ru Icq: 157535663 --------------------------------------------------------- Уязвимый...

phpAdsNew helperfunction.php Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using PHPAdsNew. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2001-1054

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...