CVE-2007-0363

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-19 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected products

Openads: 2.0.8_pr1, 2.0.9_pr1

References

http://secunia.com/advisories/23720
http://sourceforge.net/project/shownotes.php?group_id=11386&release_id=479424
http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=479426
http://www.securityfocus.com/bid/22124
http://www.vupen.com/english/advisories/2007/0240
https://exchange.xforce.ibmcloud.com/vulnerabilities/31570
http://secunia.com/advisories/23720
http://sourceforge.net/project/shownotes.php?group_id=11386&release_id=479424
http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=479426
http://www.securityfocus.com/bid/22124
http://www.vupen.com/english/advisories/2007/0240
https://exchange.xforce.ibmcloud.com/vulnerabilities/31570

Get alerted when CVE-2007-0363 or the next vulnerability affects your stack