CVE:CVE-2005-3646
CNNVD:CNNVD-200511-219
phpadsnew和phppgads是一款基于web的新闻和广告管理程序。
inphpAdsNew和phpPgAds 2.0.6及可能的更早版本中lib-sessions.inc.php内的多个SQL注入漏洞，可让远程攻击者通过(1) logout.php和(2) index.php中的sessionID参数执行任意SQL命令。
solution:Upgrade phpadsnew phpadsnew to a higher version than 2.0.4_pr1,2.0.5,2.0.6,2.0.7_rc1,2.0_beta5,2.0_beta6,2_dev_2001-09-30,2_dev_2001-10-09,and avoid the version 2.0.4_pr1,2.0.5,2.0.6,2.0.7_rc1,2.0_beta5,2.0_beta6,2_dev_2001-09-30,2_dev_2001-10-09; Upgrade phppgads phppgads to a higher version than 2.0.6,and avoid the version 2.0.6