Brain Book Software » Adman : Security Vulnerabilities, CVEs,
Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.
Max CVSS
4.3
EPSS Score
0.27%
Published
2007-07-26
Updated
2017-07-29
AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php.
Max CVSS
5.0
EPSS Score
0.91%
Published
2006-03-24
Updated
2017-07-20
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter.
Max CVSS
7.5
EPSS Score
0.89%
Published
2006-03-24
Updated
2017-07-20
3 vulnerabilities found