CVE-2007-0486

HIGH 7.5CVE-2007-0486 · Published 25/01/2007 · updated 16/06/2026

In short

CVE-2007-0486 is a HIGH (CVSS 7.5) vulnerability affecting phpadsnew (phpadsnew).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpadsnew phpadsnew	`= 2.0.7`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Openads (aka phpAdsNew) 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) phpAds_geoPlugin parameter to libraries/lib-remotehost.inc, the (2) filename parameter to admin/report-index, or the (3) phpAds_config[my_footer] parameter to admin/lib-gui.inc. NOTE: the vendor has disputed this issue, stating that the relevant variables are used within function definitions

References

More vulnerabilities in phpadsnew

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phpadsnew

= 2.0.7

No fix yet

Description

More vulnerabilities in phpadsnew

See all →