phpAdsNew / phpPgAds security advisory PHPADSNEW-SA-2006-002: Some scripts inside the admin interface were displaying parameters collected by the delivery scripts without proper sanitizing or escaping. The delivery scripts have public access, while the admin interface is restricted to logged in users. An attacker could inject HTML/XSS code which could be displayed/executed in a later time inside the admin interface.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51376/PHPADSNEW-SA-2006-002.txt
Source: https://packetstormsecurity.com/files/51376/PHPADSNEW-SA-2006-002.txt.html