CVE-2005-3646

phpAdsNew and phpPgAds 2.0.6 - SQL Injection via SessionID Parameter

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.

References (15)

Core 15
Core References
Vendor Advisory x_refsource_misc
http://www.fitsec.com/advisories/FS-05-01.txt
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/172
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=113165036315035&w=2
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17464/
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/20745
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/20744
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23044
Mailing List mailing-list x_refsource_bugtraq
http://seclists.org/lists/bugtraq/2005/Nov/0189.html
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/171
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15385/
Exploit, Vendor Advisory x_refsource_misc
http://www.zone-h.org/en/advisories/read/id=8413/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015193
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17579
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2380

Scores

EPSS 0.0223
EPSS Percentile 81.0%

Details

CWE
CWE-89
Status published
Products (9)
phpadsnew/phpadsnew 2.0.4_pr1
phpadsnew/phpadsnew 2.0.5
phpadsnew/phpadsnew 2.0.6
phpadsnew/phpadsnew 2.0.7_rc1
phpadsnew/phpadsnew 2.0_beta5
phpadsnew/phpadsnew 2.0_beta6
phpadsnew/phpadsnew 2_dev_2001-09-30
phpadsnew/phpadsnew 2_dev_2001-10-09
phppgads/phppgads 2.0.6
Published Nov 17, 2005
Tracked Since Feb 18, 2026