CVE-2006-3984

PHPAuction/Albasoftware Phpauction is affected by CVE-2006-3984. The PHP remote file inclusion vulnerability exists in phpAdsNew/view.inc.php (and phpAdsNew 2.0.5) that allows remote attackers to execute arbitrary PHP code via a URL provided to the phpAds_path parameter. The affected software ver...

PHPAuction 2.1 (maybe higher) with phpAdsNew 2.0.5 RFI

+-------------------------------------------------------------------- + + PHPAuction 2.1 with phpAdsNew 2.0.5 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher with phpAdsNew, + phpAdsNew 2.0.5 maybe...

CVE-2006-1397

Multiple cross-site scripting XSS vulnerabilities in a phpAdsNew and b phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or 2 certain...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in a phpAdsNew and b phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or 2 certain...

CVE-2006-1397

CVE-2006-1397 affects phpAdsNew and phpPgAds prior to 2.0.8. The vulnerability is cross-site scripting (XSS) via parameters passed to the banner delivery module (not properly sanitized in the admin interface) or via parameters to the login form. The issue allows remote attackers to inject arbitra...

CVE-2006-1397

Multiple cross-site scripting XSS vulnerabilities in a phpAdsNew and b phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or 2 certain...

[Full-disclosure] [PHPADSNEW-SA-2006-001] phpAdsNew and phpPgAds 2.0.8 fix multiple vulnerabilities

======================================================================== phpAdsNew / phpPgAds security advisory PHPADSNEW-SA-2006-001 ------------------------------------------------------------------------ Advisory ID: PHPADSNEW-SA-2006-001 Date: 2006-Mar-27 Security risk: medium risk Applicatio...

CVE-2005-3791

The vulnerability CVE-2005-3791 affects PHPAdsNew and phpPgAds up to version 2.0.6. The root cause is an HTTP response splitting flaw in adclick.php (and possibly other vectors), allowing remote attackers to inject arbitrary HTML headers. Reported impact: confidentiality unaffected, integrity par...

CVE-2005-3791

HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors...

CVE-2005-3646

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in 1 logout.php and 2 index.php...

CVE-2005-3645

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to 1 create.php, and if displayerrors is enabled, 2 lib-updates.inc.php, 3 lib-targetstats.inc.php, 4 lib-size.inc.php...

CVE-2005-3645

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to 1 create.php, and if displayerrors is enabled, 2 lib-updates.inc.php, 3 lib-targetstats.inc.php, 4 lib-size.inc.php...

CVE-2005-3646

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in 1 logout.php and 2 index.php...

CVE-2005-3645

CVE-2005-3645 affects phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions. The issue allows remote disclosure of the application installation path and other sensitive information via direct requests to create.php, and (if display_errors is enabled) to lib-updates.inc.php, lib-targetstats.i...

CVE-2005-3646

CVE-2005-3646 concerns multiple SQL injection flaws in lib-sessions.inc.php of phpAdsNew and phpPgAds 2.0.6 (and earlier) . The vulnerabilities allow remoto attackers to inject SQL via the sessionID parameter in both logout.php and index.php . The issue is documented with a high impact (CVSS base...

ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities

ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities Zone-H Research Center Security Advisory 200502 http://www.zone-h.fr Date of release: 11/11/2005 Software: phpAdsNew www.phpadsnew.com Affected versions: = 2.0.6 2.0.7rc1 latest CVS snapshot Risk: Medium Discovered by: Kevin Fernandez...

ZH200502.txt

Zone-H Research Center Security Advisory 200502 http://www.zone-h.fr Date of release: 11/11/2005 Software: phpAdsNew www.phpadsnew.com Affected versions: = 2.0.6 2.0.7rc1 latest CVS snapshot Risk: Medium Discovered by: Kevin Fernandez "Siegfried" from the Zone-H Research Team Background from thei...

phpAdsNew XML-RPC Library Remote Code Injection

The remote host appears to be running phpAdsNew, an open source ad server written in PHP. The version of phpAdsNew installed on the remote host allows attackers to execute arbitrary PHP code subject to the privileges of the web server user id due to a flaw in its bundled XML-RPC library...

[FS-05-01] Multiple vulnerabilities in phpAdsNew

Security Advisory http://www.fitsec.com/advisories Severity: Low/Medium Title: Multiple vulnerabilities in phpAdsNew Date: 10.11.2005 ID: FS-05-01 Author: Toni Koivunen toni.koivunen at fitsec.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis: phpAdsNew has a pa...

phpAdsNew Multiple Vulnerabilities (Mar 2005) - Active Check

phpAdsNew is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...