Vulnerability Database

296,202

Total vulnerabilities in the database

CVE-2005-3645

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.

  • Published: Nov 17, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-3645
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
phpadsnew / phpadsnew 2_dev_2001-09-30 2_dev_2001-09-30.x
phpadsnew / phpadsnew 2.0.6 2.0.6.x
phpadsnew / phpadsnew 2.0.5 2.0.5.x
phpadsnew / phpadsnew 2.0.4_pr1 2.0.4_pr1.x
phpadsnew / phpadsnew 2.0_beta5 2.0_beta5.x
phppgads / phppgads 2.0.6 2.0.6.x
phpadsnew / phpadsnew 2.0_beta6 2.0_beta6.x
phpadsnew / phpadsnew 2_dev_2001-10-09 2_dev_2001-10-09.x