Unrated severityNVD Advisory· Published Nov 17, 2005· Updated Jun 16, 2026
CVE-2005-3646
CVE-2005-3646
Description
Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2.0.7_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta5:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta6:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-09-30:*:*:*:*:*:*:*
- cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-10-09:*:*:*:*:*:*:*
- (no CPE)range: <=2.0.6
Patches
Vulnerability mechanics
References
15- secunia.com/advisories/17464/nvdPatchVendor Advisory
- www.securityfocus.com/bid/15385/nvdExploitPatch
- www.zone-h.org/en/advisories/read/id=8413/nvdExploitVendor Advisory
- secunia.com/advisories/17579nvdVendor Advisory
- www.fitsec.com/advisories/FS-05-01.txtnvdVendor Advisory
- www.vupen.com/english/advisories/2005/2380nvdVendor Advisory
- marc.infonvd
- seclists.org/lists/bugtraq/2005/Nov/0189.htmlnvd
- securityreason.com/securityalert/171nvd
- securityreason.com/securityalert/172nvd
- securitytracker.com/idnvd
- sourceforge.net/project/shownotes.phpnvd
- www.osvdb.org/20744nvd
- www.osvdb.org/20745nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/23044nvd
News mentions
0No linked articles in our index yet.