PatchTheCVEphpadsnew vulnerabilities and fixes
Recent CVEs affecting phpadsnew, with upgrade or downgrade steps. 11 tracked.
phpadsnew has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-01-25. Highest priority: CVE-2006-3984 (score 53/100).
- CVE-2007-0486 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Openads (aka phpAdsNew) 2.0.7 allow remote attackers to
- CVE-2006-6415 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote
- CVE-2006-5515 MEDIUM 4.3 UPGRADE UPGRADE Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 all
- CVE-2006-5437 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary
- CVE-2006-3984 HIGH 7.5 DOWNGRADE DOWNGRADE PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly
- CVE-2006-1397 MEDIUM 4.3 DOWNGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remot
- CVE-2005-3791 MEDIUM 5.0 UPGRADE UPGRADE HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to i
- CVE-2005-3646 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly ea
- CVE-2005-3645 MEDIUM 5.0 DOWNGRADE DOWNGRADE phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application i
- CVE-2005-0790 MEDIUM 5.0 DOWNGRADE phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpc
- CVE-2001-1054 HIGH 7.5 DOWNGRADE PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP requ
FAQ
How do I fix phpadsnew vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpadsnew being exploited right now?
None of the tracked phpadsnew CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpadsnew CVE should I patch first?
CVE-2006-3984 currently ranks highest (53/100): PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly .