Approved changes feed: RSS · Atom

cpe:2.3:a:phpadsnew:phpadsnew:2.0.7:*:*:*:*:*:*:*

part: a version: 2.0.7 update: *

VendorPhpadsnew (8c5abf30-3696-5245-933f-f5a0d34282b6)
ProductPhpadsnew (c9a7e205-9cef-5f92-82fb-3c7f6f0abdb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/yabba/phpadsnew purl2cpe 2026-06-01 10:12:59.312314
pkg:sourceforge/phppgads purl2cpe 2026-06-01 10:12:59.312316

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0486 vulnerable 2026-06-08 04:49:32.571782 Details available
Multiple PHP remote file inclusion vulnerabilities in Openads (aka phpAdsNew) 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) phpAds_geoPlugin parameter to libraries/lib-remotehost.inc, the (2) filename parameter to admin/report-index, or the (3) phpAds_config[my_footer] parameter to admin/lib-gui.inc. NOTE: the vendor has disputed this issue, stating that the relevant variables are used within function definitions
Published: 2007-01-25T00:00:00.000Z
Updated: 2024-08-07T12:19:30.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1397 vulnerable 2026-06-08 04:48:57.104445 Details available
Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form.
Published: 2006-03-28T11:00:00.000Z
Updated: 2024-08-07T17:12:21.235Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.