Test ID:	1.3.6.1.4.1.25623.1.0.17335
Category:	Web application abuses
Title:	phpAdsNew Multiple Vulnerabilities
Summary:	phpAdsNew is an open-source ad server, with an integrated banner; management interface and tracking system for gathering statistics. With phpAdsNew you can easily; rotate paid banners and your own in-house advertisements. You can even integrate banners from; third party advertising companies.;; The product has been found to contain two vulnerabilities:;; * Path disclosure vulnerability;; * Cross Site Scripting
Description:	Summary: phpAdsNew is an open-source ad server, with an integrated banner management interface and tracking system for gathering statistics. With phpAdsNew you can easily rotate paid banners and your own in-house advertisements. You can even integrate banners from third party advertising companies. The product has been found to contain two vulnerabilities: * Path disclosure vulnerability * Cross Site Scripting Vulnerability Impact: An attacker may use the cross site scripting bug to perform phishing attacks. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0791 BugTraq ID: 12803 http://www.securityfocus.com/bid/12803 Bugtraq: 20050314 [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 (Google Search) http://marc.info/?l=bugtraq&m=111083286926490&w=2 http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc http://www.osvdb.org/14787 http://securitytracker.com/id?1013429 http://secunia.com/advisories/14592 XForce ISS Database: phpadsnew-phpini-xss(19692) https://exchange.xforce.ibmcloud.com/vulnerabilities/19692
Copyright	Copyright (C) 2005 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.