Unrated severityNVD Advisory· Published Jan 25, 2007· Updated Jun 16, 2026

CVE-2007-0477

Description

Cross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 (aka Max Media Manager before 0.3.31-alpha-pr2), and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in admin-search.php and (2) affiliate-search.php. NOTE: this issue may overlap CVE-2007-0363.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openx/Openads2 versions
cpe:2.3:a:openads:openads:2.3.30:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openads:openads:2.3.30:*:*:*:*:*:*:*
- (no CPE)range: 2.0.x < 2.0.10, 2.3 < 2.3.31
Phpadsnew/Phpadsnewllm-fuzzy
Range: before 2.0.9-pr1

Patches

Vulnerability mechanics

References

forum.openads.org/index.phpnvd
jvn.jp/jp/JVN%2307274813/index.htmlnvd
osvdb.org/32926nvd
www.securityfocus.com/archive/1/457990/100/200/threadednvd
www.securityfocus.com/archive/1/458197/100/100/threadednvd
www.securityfocus.com/archive/1/458296/100/100/threadednvd
www.vupen.com/english/advisories/2007/0315nvd
developer.openads.org/browser/branches/max/trunk/CHANGELOG.txtnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000