CVE Vulnerability

CVE-2007-0363

Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://sourceforge.net/project/shownotes.php?group_id=11386&release_id=479424 Patch
http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=479426 Patch
http://secunia.com/advisories/23720 Patch Vendor Advisory
http://www.securityfocus.com/bid/22124
http://www.vupen.com/english/advisories/2007/0240
https://exchange.xforce.ibmcloud.com/vulnerabilities/31570
Configurations

Configuration 1

cpe:2.3:a:openads:openads:2.0.9_pr1:*:*:*:*:*:*:*
cpe:2.3:a:openads:openads:2.0.9_pr1:*:postgresql:*:*:*:*:*
cpe:2.3:a:openads:openads:2.0.8_pr1:*:*:*:*:*:*:*
cpe:2.3:a:openads:openads:2.0.8_pr1:*:postgresql:*:*:*:*:*
Information

Published : 2007-01-19 01:28

Updated : 2017-07-29 01:30

NVD link : CVE-2007-0363

Mitre link : CVE-2007-0363

Products Affected
No products.
CWE
NVD-CWE-Other