GCVE - cpe:2.3:a:phpadsnew:phpadsnew:2_dev

Approved changes feed: RSS · Atom

cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-10-09:*:*:*:*:*:*:*

part: a version: 2_dev_2001-10-09 update: *

Vendor	Phpadsnew (`8c5abf30-3696-5245-933f-f5a0d34282b6`)
Product	Phpadsnew (`c9a7e205-9cef-5f92-82fb-3c7f6f0abdb5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/yabba/phpadsnew`	purl2cpe	2026-06-01 10:12:59.319504
`pkg:sourceforge/phppgads`	purl2cpe	2026-06-01 10:12:59.319506

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6415`	vulnerable	2026-06-08 04:49:28.797352	Details available PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAds_path is used as a constant Published: 2006-12-10T11:00:00.000Z Updated: 2024-08-07T20:26:46.381Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30774 http://attrition.org/pipermail/vim/2006-December/001171.html http://www.securityfocus.com/archive/1/453773/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1397`	vulnerable	2026-06-08 04:48:57.104946	Details available Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form. Published: 2006-03-28T11:00:00.000Z Updated: 2024-08-07T17:12:21.235Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/25458 http://sourceforge.net/project/shownotes.php?release_id=404964 http://secunia.com/advisories/19384 http://www.osvdb.org/24206 http://securityreason.com/securityalert/633	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3646`	vulnerable	2026-06-08 04:48:41.540417	Details available Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php. Published: 2005-11-17T11:00:00.000Z Updated: 2024-08-07T23:17:23.297Z Open on db.gcve.eu Reference links http://www.fitsec.com/advisories/FS-05-01.txt http://securityreason.com/securityalert/172 http://marc.info/?l=bugtraq&m=113165036315035&w=2 http://secunia.com/advisories/17464/ http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3645`	vulnerable	2026-06-08 04:48:41.537917	Details available phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php. Published: 2005-11-17T11:00:00.000Z Updated: 2024-08-07T23:17:23.403Z Open on db.gcve.eu Reference links http://www.fitsec.com/advisories/FS-05-01.txt http://www.osvdb.org/20740 http://www.osvdb.org/20743 http://marc.info/?l=bugtraq&m=113165036315035&w=2 http://www.osvdb.org/20737	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phpadsnew

Notes

PURL mappings

Vulnerability references

Contribute