Nessus Plugin #17335

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

phpAdsNew Multiple Vulnerabilities

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2005 Noam Rathaus

Summary:

Checks for the presence of a XSS in phpAdsNew

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

12803

Xrefs:

-

Description:

phpAdsNew is an open-source ad server, with an integrated banner
management interface and tracking system for gathering statistics.
With phpAdsNew you can easily rotate paid banners and your own
in-house advertisements. You can even integrate banners from
third party advertising companies.

The product has been found to contain two vulnerabilities:
* Path disclosure vulnerability
* Cross Site Scripting

An attacker may use the cross site scripting bug to preform phishing
attacks.

Risk factor: Medium