OpenX -- SQL injection vulnerability

2012-09-14T00:00:00
ID DEE44BA9-08AB-11E2-A044-D0DF9ACFD7E5
Type freebsd
Reporter FreeBSD
Modified 2012-09-14T00:00:00

Description

Secunia reports:

A vulnerability has been discovered in OpenX, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "xajaxargs" parameter to www/admin/updates-history.php (when "xajax" is set to "expandOSURow") is not properly sanitised in e.g. the "queryAuditBackupTablesByUpgradeId()" function (lib/OA/Upgrade/DB_UpgradeAuditor.php) before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The vulnerability is confirmed in version 2.8.9. Prior versions may also be affected.