Approved changes feed: RSS · Atom

cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta6:*:*:*:*:*:*:*

part: a version: 2.0_beta6 update: *

VendorPhpadsnew (8c5abf30-3696-5245-933f-f5a0d34282b6)
ProductPhpadsnew (c9a7e205-9cef-5f92-82fb-3c7f6f0abdb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/yabba/phpadsnew purl2cpe 2026-06-01 10:12:59.316953
pkg:sourceforge/phppgads purl2cpe 2026-06-01 10:12:59.316955

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3646 vulnerable 2026-06-08 04:48:41.540379 Details available
Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.
Published: 2005-11-17T11:00:00.000Z
Updated: 2024-08-07T23:17:23.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3645 vulnerable 2026-06-08 04:48:41.536792 Details available
phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.
Published: 2005-11-17T11:00:00.000Z
Updated: 2024-08-07T23:17:23.403Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.