CVE-2007-0363: Openads

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected products

• Openads Openads: version 2.0.8_pr1 only; version 2.0.9_pr1 only

Published 2007-01-19. Last modified 2026-06-16.