OP
Product
Openx
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch
Add Openx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-4211 | 9.8 | Feb 14 | A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP… Affected: 2.8.10 |
| CVE-2014-2230 | – | Oct 23 | Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Affected: through 2.8.10; 2.8; 2.8.1; 2.8.2; 2.8.3; 2.8.4; +5 more |
| CVE-2013-7376 | – | May 14 | Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the authentication of administrators,… Affected: 2.8.10 |
| CVE-2013-3514 | – | May 14 | Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a Affected: through 2.8.10; 2.4; 2.4.4; 2.4.5; 2.4.6; 2.4.7; +21 more |
| CVE-2013-5954 | – | Apr 25 | Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that… Affected: through 2.8.11; 2.8; 2.8.1; 2.8.2; 2.8.3; 2.8.4; +6 more |
| CVE-2013-7149 | – | Dec 28 | SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows… Affected: through 2.8.11; 2.8.10 |
| CVE-2013-3515 | – | Jul 29 | Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter… Affected: through 2.8.10; 2.4; 2.4.4; 2.4.5; 2.4.6; 2.4.7; +17 more |
| CVE-2012-4990 | – | Oct 22 | SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids[] parameter… Affected: 2.8.10 |
| CVE-2012-4989 | – | Oct 22 | Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 2.8.10 |
| CVE-2009-4830 | – | Apr 27 | Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly… Affected: 2.8.1; 2.8.2 |
| CVE-2009-4098 | – | Nov 29 | Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute… Affected: through 2.8.1; 2.4; 2.6.1; 2.6.3; 2.8 |
| CVE-2008-6163 | – | Feb 20 | SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter Affected: 2.6.1 |
| CVE-2009-0291 | – | Jan 27 | Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a Affected: 2.6.3 |
Showing 13