VYPR

PHPads

by PHPads

CVEs (1)

  • CVE-2019-25503HigMar 4, 2026
    risk 0.46cvss 7.1epss 0.00

    PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions…