CVE:CVE-2005-3645
CNNVD:CNNVD-200511-227
phpadsnew和phppgads是一款基于web的新闻和广告管理程序。
phpAdsNew和phpPgAds 2.0.6以及可能的更早版本，可让远程攻击者通过直接请求(1) create.php，如果已启用display_errors，则为(2) lib-updates.inc.php，(3) lib-targetstats.inc.php，(4) lib-size.inc.php，(5) lib-misc-stats.inc.php，(6) lib-hourly-hosts.inc.php，(7) lib-hourly.inc.php，(8) lib-history.inc.php和(9) graph-daily.php，来获取应用程序安装路径和其他敏感信息。
solution:Upgrade phpadsnew phpadsnew to a higher version than 2.0.4_pr1,2.0.5,2.0.6,2.0_beta5,2.0_beta6,2_dev_2001-09-30,2_dev_2001-10-09,and avoid the version 2.0.4_pr1,2.0.5,2.0.6,2.0_beta5,2.0_beta6,2_dev_2001-09-30,2_dev_2001-10-09; Upgrade phppgads phppgads to a higher version than 2.0.6,and avoid the version 2.0.6