Approved changes feed: RSS · Atom

cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpadsnew (8c5abf30-3696-5245-933f-f5a0d34282b6)
ProductPhpadsnew (c9a7e205-9cef-5f92-82fb-3c7f6f0abdb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/yabba/phpadsnew purl2cpe 2026-06-01 10:12:59.302273
pkg:sourceforge/phppgads purl2cpe 2026-06-01 10:12:59.302275

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5515 vulnerable 2026-06-08 04:49:20.681809 Details available
Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface.
Published: 2006-10-26T16:00:00.000Z
Updated: 2024-08-07T19:55:52.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3791 vulnerable 2026-06-08 04:48:42.179523 Details available
HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2636 vulnerable 2026-06-08 04:48:29.911939 Details available
SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.
Published: 2005-08-20T04:00:00.000Z
Updated: 2024-08-07T22:45:00.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2635 vulnerable 2026-06-08 04:48:29.910993 Details available
Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.
Published: 2005-08-20T04:00:00.000Z
Updated: 2024-08-07T22:45:00.979Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.