https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:27:50.008982+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337621 EUVD-2026-337621 2026-10-18T21:27:50.011168+00:00 EUVD-2026-337621 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25503 fkie_cve-2019-25503 2026-10-18T21:27:50.011199+00:00

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue to extract sensitive database information such as the current database name.

 https://cve.radiocsirt.org/vuln/ghsa-g3vq-33mh-9r2p GHSA-g3vq-33mh-9r2p 2026-10-18T21:27:50.011230+00:00

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue to extract sensitive database information such as the current database name.