CVE-2005-3646

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=113165036315035&w=2
http://seclists.org/lists/bugtraq/2005/Nov/0189.html
http://secunia.com/advisories/17464/Patch, Vendor Advisory
http://secunia.com/advisories/17579Vendor Advisory
http://securityreason.com/securityalert/171
http://securityreason.com/securityalert/172
http://securitytracker.com/id?1015193
http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942
http://www.fitsec.com/advisories/FS-05-01.txtVendor Advisory
http://www.osvdb.org/20744
http://www.osvdb.org/20745
http://www.securityfocus.com/bid/15385/Exploit, Patch
http://www.vupen.com/english/advisories/2005/2380Vendor Advisory
http://www.zone-h.org/en/advisories/read/id=8413/Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23044
http://marc.info/?l=bugtraq&m=113165036315035&w=2
http://seclists.org/lists/bugtraq/2005/Nov/0189.html
http://secunia.com/advisories/17464/Patch, Vendor Advisory
http://secunia.com/advisories/17579Vendor Advisory
http://securityreason.com/securityalert/171
http://securityreason.com/securityalert/172
http://securitytracker.com/id?1015193
http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942
http://www.fitsec.com/advisories/FS-05-01.txtVendor Advisory
http://www.osvdb.org/20744
http://www.osvdb.org/20745
http://www.securityfocus.com/bid/15385/Exploit, Patch
http://www.vupen.com/english/advisories/2005/2380Vendor Advisory
http://www.zone-h.org/en/advisories/read/id=8413/Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23044

Timeline

Published: Nov 17, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-36474.6Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory.CVE-2005-36487.5Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary CVE-2005-36492.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.CVE-2005-36509.3The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows CVE-2005-36517.5Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly CVE-2005-36527.5Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon CVE-2005-365310.0Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before CVE-2005-36547.5Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code CVE-2005-36557.5Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remo CVE-2005-365610.0Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a Post CVE-2005-36575.0The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to re CVE-2005-36587.5Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as