CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-3646

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.025

EPSS Ranking 84.8%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2005-3646

Phpadsnew » Phpadsnew » Version: 2.0.4_pr1

cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1
Phpadsnew » Phpadsnew » Version: 2.0.5

cpe:2.3:a:phpadsnew:phpadsnew:2.0.5
Phpadsnew » Phpadsnew » Version: 2.0.6

cpe:2.3:a:phpadsnew:phpadsnew:2.0.6
Phpadsnew » Phpadsnew » Version: 2.0.7_rc1

cpe:2.3:a:phpadsnew:phpadsnew:2.0.7_rc1
Phpadsnew » Phpadsnew » Version: 2.0_beta5

cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta5
Phpadsnew » Phpadsnew » Version: 2.0_beta6

cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta6
Phpadsnew » Phpadsnew » Version: 2_dev_2001-09-30

cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-09-30
Phpadsnew » Phpadsnew » Version: 2_dev_2001-10-09

cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-10-09
Phppgads » Phppgads » Version: 2.0.6

cpe:2.3:a:phppgads:phppgads:2.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-3646

Products

Pricing

Contact Us