Unrated severityNVD Advisory· Published Oct 26, 2006· Updated Jun 16, 2026

CVE-2006-5515

Description

Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpadsnew/Phpadsnew2 versions
cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*range: <=2.0.8
- (no CPE)range: <2.0.8-pr1
Phppgads/Phppgads2 versions
cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*range: <=2.0.8
- (no CPE)range: <2.0.8-pr1

Patches

Vulnerability mechanics

References

secunia.com/advisories/22526nvdVendor Advisory
secunia.com/advisories/22529nvdVendor Advisory
securityreason.com/securityalert/1777nvd
sourceforge.net/project/shownotes.phpnvd
sourceforge.net/project/shownotes.phpnvd
www.securityfocus.com/archive/1/449484/100/0/threadednvd
www.vupen.com/english/advisories/2006/4147nvd
www.vupen.com/english/advisories/2006/4148nvd
exchange.xforce.ibmcloud.com/vulnerabilities/29766nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000