← Database

CVE-2005-3646

HIGH CVSS: 7.5 Published: 2005-11-17 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.

Affected Platforms

Phpadsnew PhpadsnewPhppgads Phppgads

Weakness Type

CWE-89

References