CVEvulnerability
CVE-2005-3645
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.
Affected configurations
• phpadsnew phpadsnew 2.0.4 pr1
• phpadsnew phpadsnew 2.0.5
• phpadsnew phpadsnew 2.0.6
• phpadsnew phpadsnew 2.0 beta5
• phpadsnew phpadsnew 2.0 beta6
• phpadsnew phpadsnew 2 dev 2001-09-30
• phpadsnew phpadsnew 2 dev 2001-10-09
• phppgads phppgads 2.0.6
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://marc.info/?l=bugtraq&m=113165036315035&w=2 marc.info
- http://seclists.org/lists/bugtraq/2005/Nov/0189.html seclists.org
- http://secunia.com/advisories/17464/ Patch, Vendor Advisory
- http://securityreason.com/securityalert/171 securityreason.com
- http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942 sourceforge.net
- http://www.fitsec.com/advisories/FS-05-01.txt Vendor Advisory
- http://www.osvdb.org/20735 www.osvdb.org
- http://www.osvdb.org/20736 www.osvdb.org
- http://www.osvdb.org/20737 www.osvdb.org
- http://www.osvdb.org/20738 www.osvdb.org
- http://www.osvdb.org/20739 www.osvdb.org
- http://www.osvdb.org/20740 www.osvdb.org
- http://www.osvdb.org/20741 www.osvdb.org
- http://www.osvdb.org/20742 www.osvdb.org
- http://www.osvdb.org/20743 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2380 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23043 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=113165036315035&w=2 marc.info
- http://seclists.org/lists/bugtraq/2005/Nov/0189.html seclists.org
- http://secunia.com/advisories/17464/ Patch, Vendor Advisory
- http://securityreason.com/securityalert/171 securityreason.com
- http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942 sourceforge.net
- http://www.fitsec.com/advisories/FS-05-01.txt Vendor Advisory
- http://www.osvdb.org/20735 www.osvdb.org
- http://www.osvdb.org/20736 www.osvdb.org
- http://www.osvdb.org/20737 www.osvdb.org
- http://www.osvdb.org/20738 www.osvdb.org
- http://www.osvdb.org/20739 www.osvdb.org
- http://www.osvdb.org/20740 www.osvdb.org
- http://www.osvdb.org/20741 www.osvdb.org
- http://www.osvdb.org/20742 www.osvdb.org
- http://www.osvdb.org/20743 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2380 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23043 exchange.xforce.ibmcloud.com