GCVE - cpe:2.3:a:phpadsnew:phpadsnew:2.0.4

Approved changes feed: RSS · Atom

cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*

part: a version: 2.0.4_pr1 update: *

Vendor	Phpadsnew (`8c5abf30-3696-5245-933f-f5a0d34282b6`)
Product	Phpadsnew (`c9a7e205-9cef-5f92-82fb-3c7f6f0abdb5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/yabba/phpadsnew`	purl2cpe	2026-06-01 10:12:59.308623
`pkg:sourceforge/phppgads`	purl2cpe	2026-06-01 10:12:59.308625

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3646`	vulnerable	2026-06-08 04:48:41.539051	Details available Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php. Published: 2005-11-17T11:00:00.000Z Updated: 2024-08-07T23:17:23.297Z Open on db.gcve.eu Reference links http://www.fitsec.com/advisories/FS-05-01.txt http://securityreason.com/securityalert/172 http://marc.info/?l=bugtraq&m=113165036315035&w=2 http://secunia.com/advisories/17464/ http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3645`	vulnerable	2026-06-08 04:48:41.534672	Details available phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php. Published: 2005-11-17T11:00:00.000Z Updated: 2024-08-07T23:17:23.403Z Open on db.gcve.eu Reference links http://www.fitsec.com/advisories/FS-05-01.txt http://www.osvdb.org/20740 http://www.osvdb.org/20743 http://marc.info/?l=bugtraq&m=113165036315035&w=2 http://www.osvdb.org/20737	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0791`	not_vulnerable	2026-06-08 04:48:13.675755	Details available Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter. Published: 2005-03-20T05:00:00.000Z Updated: 2024-08-07T21:28:28.198Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14592 https://exchange.xforce.ibmcloud.com/vulnerabilities/19692 http://marc.info/?l=bugtraq&m=111083286926490&w=2 http://www.osvdb.org/14787 http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0790`	vulnerable	2026-06-08 04:48:13.675348	Details available phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables.php, (4) maintenance-autotargeting.php, (5) maintenance-reports.php, (6) phpads.php, (7) remotehtmlview.php, (8) click.php, (9) adcontent.php, which reveal the path in a PHP error message. Published: 2005-03-20T05:00:00.000Z Updated: 2024-08-07T21:28:28.438Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=111083286926490&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19689 http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc http://securitytracker.com/id?1013429	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phpadsnew

Notes

PURL mappings

Vulnerability references

Contribute