3 matches found
Sql injection
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...
CVE-2012-4990: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...
PT-2012-5708
Name of the Vulnerable Software and Affected Versions OpenX version 2.8.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ids parameter in a link action in the admin/campaign-zone-link.php file. Recommendations For OpenX version 2.8.10,...