CVE-2005-3645

no score yetEPSS 2.3%

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2005-11-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpadsnew:phpadsnew
phppgads:phppgads

References

http://marc.info/?l=bugtraq&m=113165036315035&w=2
http://seclists.org/lists/bugtraq/2005/Nov/0189.html
http://secunia.com/advisories/17464/
http://securityreason.com/securityalert/171
http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942

Check your stack JSON