Description
Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface.
References
- phpadsnew-libhistory-xss(29766) vdb-entry
- ADV-2006-4147 vdb-entry
- 22526 third-party-advisory
- ADV-2006-4148 vdb-entry
- 20061023 [PHPADSNEW-SA-2006-002] phpAdsNew and phpPgAds 2.0.8-pr1 fix XSS vulnerability mailing-list
- http://sourceforge.net/project/shownotes.php?release_id=457775&group_id=36679
- http://sourceforge.net/project/shownotes.php?release_id=457774&group_id=11386
- 1777 third-party-advisory
- 22529 third-party-advisory