CVE-2014-2540

CVE-2014-2540 describes a SQL Injection in Orbit Open Ad Server (OrbitScripts) via the site_directory_sort_field parameter in guest/site_directory. Affected: Orbit Open Ad Server 1.1.0 and probably earlier. Vulnerability type: CWE-89 SQL injection that can lead to arbitrary SQL execution. Root ca...

CVE-2014-2540

SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the sitedirectorysortfield parameter to guest/sitedirectory...

Orbit Open Ad Server 1.1.0 - SQL Injection

Advisory ID: HTB23208 Product: Orbit Open Ad Server Vendor: OrbitScripts, LLC Vulnerable Versions: 1.1.0 and probably prior Tested Version: 1.1.0 Advisory Publication: March 19, 2014 without technical details Vendor Notification: March 19, 2014 Vendor Patch: March 21, 2014 Public Disclosure: Apri...

Orbit Open Ad Server 1.1.0 - SQL Injection

Orbit Open Ad Server 1.1.0 - SQL Injection Advisory ID: HTB23208 Product: Orbit Open Ad Server Vendor: OrbitScripts, LLC Vulnerable Versions: 1.1.0 and probably prior Tested Version: 1.1.0 Advisory Publication: March 19, 2014 without technical details Vendor Notification: March 19, 2014 Vendor...

Orbit Open Ad Server 1.1.0 SQL Injection Vulnerability

Orbit Open Ad Server version 1.1.0 suffers from a remote SQL injection vulnerability. Product: Orbit Open Ad Server Vendor: OrbitScripts, LLC Vulnerable Versions: 1.1.0 and probably prior Tested Version: 1.1.0 Advisory Publication: March 19, 2014 without technical details Vendor Notification: Mar...

Orbit Open Ad Server 1.1.0 SQL Injection

Advisory ID: HTB23208 Product: Orbit Open Ad Server Vendor: OrbitScripts, LLC Vulnerable Versions: 1.1.0 and probably prior Tested Version: 1.1.0 Advisory Publication: March 19, 2014 without technical details Vendor Notification: March 19, 2014 Vendor Patch: March 21, 2014 Public Disclosure: Apri...

SQL Injection in Orbit Open Ad Server

High-Tech Bridge Security Research Lab discovered vulnerability in Orbit Open Ad Server, which can be exploited to perform SQL Injection attacks, alter SQL requests to database of vulnerable application and potentially gain control over the vulnerable website. 1 SQL Injection in Orbit Open Ad...

OpenX Ad Server Backdoor PHP Code Execution (CVE-2013-4211)

A Code Execution vulnerability has been reported in OpenX Ad Server. The vulnerability is due to the existence of a backdoor within the flowplayer-3.1.1.min.js library. A remote attacker could exploit this vulnerability by sending a malicious request to the server. Successful exploitation could...

OpenX - Backdoor PHP Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'OpenX Backdoor PHP Code Execution',...

OpenX Backdoor PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'OpenX Backdoor PHP Code Execution',...

CentOS Update for samba4 CESA-2013:0506 centos6

Check for the Version of samba4 OpenVAS Vulnerability Test CentOS Update for samba4 CESA-2013:0506 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Ad Rotator AdPeeps 8.6.9 Cross Site Scripting

Advisory: Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability Version:8.6.9 Vendor URL: http://adpeeps.com/ Demo Link:http://demo.adpeeps.com/ Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn ........... Product Description ........... Ad Peeps is a banner...

OpenX Ad Server CSRF Vulnerability

OpenX Ad Server is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenX Ad Server 2.8.7 Cross Site Request Forgery

Exploit for php platform in category web applications ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage:...

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery

Secur-I Research Group Security Advisory ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage: http://www.openx.or...

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery Secur-I Research Group Security Advisory ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed...

OpenX Ad Server 2.8.7 Cross Site Request Forgery

Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage: http://www.openx.org/ Vulnerability ID: SV-01 Found: 7/7/2011 By: Narendra Shinde Secur-I Research Group http://securview.com/...

OpenX Ad Server Flaw Exploitable

A critical security flaw in current and older versions of the popular open source OpenX ad server allows attackers to remotely compromise a server. Read the full article. The H Security...

Inout Ad server Ultimate - Arbitrary File Upload

============================================================== Inout Ad server Ultimate -- Shell upload Vulnerabilty ============================================================== Name : Inout Ad server Ultimate Shell upload Vulnerabilty Date : july 9,2010 Critical Level :VERY HIGH vendor URL...

AdMan Standalone Ad Server Cross Site Scripting / SQL Injection

=========================================================== AdMan Standalone Ad Server SQLi AND XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...