CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

Sql injection

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

CVE-2013-7149

A critical SQL injection vulnerability exists in the Revive Adserver (versions prior to 3.0.2 ) and OpenX Source (versions 2.8.11 and earlier, including potentially phpAdsNew 2.0.x ). The root cause is that the www/delivery/axmlrpc.php script (XML-RPC delivery invocation) fails to properly saniti...

CVE-2013-7149: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

OpenX -- SQL injection vulnerability

Revive reports: An SQL-injection vulnerability was recently discovered and reported to the Revive Adserver team by Florian Sander. The vulnerability is known to be already exploited to gain unauthorised access to the application using brute force mechanisms, however other kind of attacks might be...

VulnCheck KEV: CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

Zeeways Adserver Cross Site Request Forgery / SQL Injection

Exploit Title: Zeeways Adserver Multiple Vulnerabilities Date: 06.11.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Zeeways Adserver Multip...

Zeeways Adserver Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= Zeeways Adserver Multiple Vulnerabilities ========================================= Date: 06.11.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code :...

Zeeways Adserver - Multiple Vulnerabilities

Zeeways Adserver - Multiple Vulnerabilities Exploit Title: Zeeways Adserver Multiple Vulnerabilities Date: 06.11.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Zeeways Adserver - Multiple Vulnerabilities

Exploit Title: Zeeways Adserver Multiple Vulnerabilities Date: 06.11.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Zeeways Adserver Multip...

vBulletin 4.0.4 Code Execution

/======================================================================\ || || || Vurnerebility vBulletin - http://www.vbulletin.org || || Local or adserver Javascript,forumdisplay.php" Code Execution || || Version license 4.0.4 || || info set cookies, error issue & critical-information-disclosur...

vBulletin v4.0.4 adserver Javascript (forumdisplay.php) Code Execution

Exploit for php platform in category web applications ====================================================================== vBulletin v4.0.4 adserver Javascript forumdisplay.php Code Execution ======================================================================...

Inout Ad server Ultimate - Arbitrary File Upload

Inout Ad server Ultimate - Arbitrary File Upload ============================================================== Inout Ad server Ultimate -- Shell upload Vulnerabilty ============================================================== Name : Inout Ad server Ultimate Shell upload Vulnerabilty Date : jul...

Inout Ad server Ultimate Shell upload Vulnerabilty

Exploit for php platform in category web applications ================================================== Inout Ad server Ultimate Shell upload Vulnerabilty ================================================== Name : Inout Ad server Ultimate Shell upload Vulnerabilty Critical Level :VERY HIGH vendor...

CVE-2009-4098

Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...

Unrestricted file upload

Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...

CVE-2009-4098

Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...

CVE-2009-4098

OpenX OpenX banner-edit.php

CVE-2009-4098: Improper Input Validation

Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...

OpenX <= 2.8.1 执行任意PHP代码

No description provided by source. OpenX adserver version 2.8.1 and lower is vulnerable to remote code execution. To be exploited, this vulnerability requires banner / file upload permissions, such as granted to the 'advertiser' and 'administrator' roles. This vulnerability is caused by the...