Vulnerabilities > CVE-2005-0791 - Cross-Site Scripting vulnerability in PHPAdsNew AdFrame.PHP
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | PHPAdsNew 2.0.4 AdFrame.PHP Cross-Site Scripting Vulnerability. CVE-2005-0791. Webapps exploit for php platform |
| id | EDB-ID:25225 |
| last seen | 2016-02-03 |
| modified | 2005-03-14 |
| published | 2005-03-14 |
| reporter | Maksymilian Arciemowicz |
| source | https://www.exploit-db.com/download/25225/ |
| title | PHPAdsNew 2.0.4 AdFrame.PHP Cross-Site Scripting Vulnerability |
References
- http://marc.info/?l=bugtraq&m=111083286926490&w=2
- http://secunia.com/advisories/14592
- http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc
- http://securitytracker.com/id?1013429
- http://www.osvdb.org/14787
- http://www.securityfocus.com/bid/12803
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19692