phpPgAds dest Parameter HTTP Response Splitting

medium Nessus Plugin ID 16276

Language:

Synopsis

The remote web application is vulnerable to HTTP response splitting.

Description

There is a flaw in the remote phpPgAds/phpAdsNew, a banner management and tracking system written in PHP.

This version of phpPgAds/phpAdsNew is affected by an HTTP response splitting vulnerability.

An attacker, exploiting this flaw, would be able to redirect users to another site to perform another attack (steal their credentials).

Solution

Upgrade to phpPGAds/phpAdsNew 2.0.2 or later.

Plugin Details

Severity: Medium

ID: 16276

File Name: phppgads_http_splitting.nasl

Version: 1.18

Type: remote

Family: CGI abuses

Published: 1/29/2005

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/a:phppgadmin:phppgadmin

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 1/27/2005

Reference Information

BID: 12398

Detections

Analytics