Vulnerabilities > Openads

DATE CVE VULNERABILITY TITLE RISK
2008-02-06 CVE-2008-0635 Code Injection vulnerability in Openads 2.4/2.4.2
Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.
network
low complexity
openads CWE-94
7.5
2007-04-16 CVE-2007-2047 Remote Security vulnerability in Openads 2.3.30
CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter.
network
low complexity
openads
7.5
2007-04-16 CVE-2007-2046 Remote Security vulnerability in Openads
Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in (1) the dest parameter and (2) the Referer HTTP header.
network
low complexity
openads
7.5
2007-01-25 CVE-2007-0477 Cross-Site Scripting vulnerability in Openads 2.3.30
Cross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 (aka Max Media Manager before 0.3.31-alpha-pr2), and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in admin-search.php and (2) affiliate-search.php.
network
openads
6.8
2007-01-19 CVE-2007-0363 Cross-Site Scripting vulnerability in Openads for PostgreSQL
Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
network
openads
6.8