phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote malicious users to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phpadsnew phpadsnew 2 dev 2001-09-30 |
||
phpadsnew phpadsnew 2.0.6 |
||
phpadsnew phpadsnew 2.0.5 |
||
phpadsnew phpadsnew 2.0.4 pr1 |
||
phpadsnew phpadsnew 2.0 beta5 |
||
phppgads phppgads 2.0.6 |
||
phpadsnew phpadsnew 2.0 beta6 |
||
phpadsnew phpadsnew 2 dev 2001-10-09 |
Vulmon