CVE-2005-3645: Phpadsnew

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.

Affected products

• Phpadsnew Phpadsnew: version 2.0.4_pr1 only; version 2.0.5 only; version 2.0.6 only; version 2.0_beta5 only; version 2.0_beta6 only; version 2_dev_2001-09-30 only; …
• Phppgads Phppgads: version 2.0.6 only

Published 2005-11-17. Last modified 2026-06-16.