CVE-2005-3645

phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.

• CWE-200

• http://marc.info/?l=bugtraq&m=113165036315035&w=2
• http://seclists.org/lists/bugtraq/2005/Nov/0189.html
• http://secunia.com/advisories/17464/Patch, Vendor Advisory
• http://securityreason.com/securityalert/171
• http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942
• http://www.fitsec.com/advisories/FS-05-01.txtVendor Advisory
• http://www.osvdb.org/20735
• http://www.osvdb.org/20736
• http://www.osvdb.org/20737
• http://www.osvdb.org/20738
• http://www.osvdb.org/20739
• http://www.osvdb.org/20740
• http://www.osvdb.org/20741
• http://www.osvdb.org/20742
• http://www.osvdb.org/20743
• http://www.vupen.com/english/advisories/2005/2380Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23043
• http://marc.info/?l=bugtraq&m=113165036315035&w=2
• http://seclists.org/lists/bugtraq/2005/Nov/0189.html
• http://secunia.com/advisories/17464/Patch, Vendor Advisory
• http://securityreason.com/securityalert/171
• http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942
• http://www.fitsec.com/advisories/FS-05-01.txtVendor Advisory
• http://www.osvdb.org/20735
• http://www.osvdb.org/20736
• http://www.osvdb.org/20737
• http://www.osvdb.org/20738
• http://www.osvdb.org/20739
• http://www.osvdb.org/20740
• http://www.osvdb.org/20741
• http://www.osvdb.org/20742
• http://www.osvdb.org/20743
• http://www.vupen.com/english/advisories/2005/2380Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23043

Published

Nov 17, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3639PHP file inclusion vulnerability in the osTicket module in H…
• CVE-2005-3640Multiple buffer overflows in the IMAP Groupware Mail server …
• CVE-2005-3641Oracle Databases running on Windows XP with Simple File Shar…
• CVE-2005-3642IBM Informix Dynamic Database server running on Windows XP w…
• CVE-2005-3643IBM DB2 Database server running on Windows XP with Simple Fi…
• CVE-2005-3644PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft…
• CVE-2005-3646Multiple SQL injection vulnerabilities in lib-sessions.inc.p…
• CVE-2005-3647Folder Guard allows local users to bypass protections by run…
• CVE-2005-3648Multiple SQL injection vulnerabilities in the get_record fun…
• CVE-2005-3649jumpto.php in Moodle 1.5.2 allows remote attackers to redire…
• CVE-2005-3650The CodeSupport.ocx ActiveX control, as used by Sony to unin…
• CVE-2005-3651Stack-based buffer overflow in the dissect_ospf_v3_address_p…