Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openads | Openads | 2.0.8_pr1 (including) | 2.0.8_pr1 (including) |
| Openads | Openads | 2.0.9_pr1 (including) | 2.0.9_pr1 (including) |
References
- http://secunia.com/advisories/23720
- http://sourceforge.net/project/shownotes.php?group_id=11386\u0026release_id=479424
- http://sourceforge.net/project/shownotes.php?group_id=36679\u0026release_id=479426
- http://www.securityfocus.com/bid/22124
- http://www.vupen.com/english/advisories/2007/0240
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31570
- http://secunia.com/advisories/23720
- http://sourceforge.net/project/shownotes.php?group_id=11386\u0026release_id=479424
- http://sourceforge.net/project/shownotes.php?group_id=36679\u0026release_id=479426
- http://www.securityfocus.com/bid/22124
- http://www.vupen.com/english/advisories/2007/0240
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31570