CVE:CVE-2005-2635
CNNVD:CNNVD-200508-260
phpAdsNew和phpPgAds 2.0.6之前的版本中存在多个目录遍历漏洞。这使得远程攻击者可以借助于传递到adlayer.php的(1)layerstyle参数或传递到jsform.php的(2)language参数中的..(参数中包含'..')包含任意文件。(dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.
solution:Upgrade phpadsnew phpadsnew to a higher version than 2.0.5,and avoid the version (,2.0.5]; Upgrade phppgads phppgads to a higher version than 2.0.5,and avoid the version (,2.0.5]