GCVE - cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*

part: a version: 2.0.5 update: *

Vendor	Phpadsnew (`8c5abf30-3696-5245-933f-f5a0d34282b6`)
Product	Phpadsnew (`c9a7e205-9cef-5f92-82fb-3c7f6f0abdb5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/yabba/phpadsnew`	purl2cpe	2026-06-01 10:12:59.309878
`pkg:sourceforge/phppgads`	purl2cpe	2026-06-01 10:12:59.309880

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3984`	vulnerable	2026-06-08 04:49:10.646437	Details available PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter. Published: 2006-08-05T00:00:00.000Z Updated: 2024-08-07T18:48:39.405Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1320 http://www.bb-pcsecurity.de/sicherheit_264.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/28110 http://www.securityfocus.com/archive/1/441716/100/0/threaded http://www.securityfocus.com/bid/19254	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1397`	vulnerable	2026-06-08 04:48:57.103796	Details available Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form. Published: 2006-03-28T11:00:00.000Z Updated: 2024-08-07T17:12:21.235Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/25458 http://sourceforge.net/project/shownotes.php?release_id=404964 http://secunia.com/advisories/19384 http://www.osvdb.org/24206 http://securityreason.com/securityalert/633	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3646`	vulnerable	2026-06-08 04:48:41.539075	Details available Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php. Published: 2005-11-17T11:00:00.000Z Updated: 2024-08-07T23:17:23.297Z Open on db.gcve.eu Reference links http://www.fitsec.com/advisories/FS-05-01.txt http://securityreason.com/securityalert/172 http://marc.info/?l=bugtraq&m=113165036315035&w=2 http://secunia.com/advisories/17464/ http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3645`	vulnerable	2026-06-08 04:48:41.535204	Details available phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php. Published: 2005-11-17T11:00:00.000Z Updated: 2024-08-07T23:17:23.403Z Open on db.gcve.eu Reference links http://www.fitsec.com/advisories/FS-05-01.txt http://www.osvdb.org/20740 http://www.osvdb.org/20743 http://marc.info/?l=bugtraq&m=113165036315035&w=2 http://www.osvdb.org/20737	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phpadsnew

Notes

PURL mappings

Vulnerability references

Contribute