Sql injection

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...

CVE-2012-4990

CVE-2012-4990 : OpenX 2.8.10 (and earlier) is vulnerable to SQL injection via the ids[] parameter in admin/campaign-zone-link.php. The vulnerability allows remote attackers to manipulate SQL queries, with PoCs showing crafted ids[] input and an exploit requiring the attacker to be registered with...

PT-2012-5708

Name of the Vulnerable Software and Affected Versions OpenX version 2.8.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ids parameter in a link action in the admin/campaign-zone-link.php file. Recommendations For OpenX version 2.8.10,...

CVE-2012-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...