CVE-2008-0635

Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...

Immunity Canvas: OPENADS_EXEC

Name| openadsexec ---|--- CVE| CVE-2008-0635 Exploit Pack| CANVAS Description| OpenAds 2.4.0 = x = 2.4.2 Remote Code Execution Notes| CVE Name: CVE-2008-0635 VENDOR: Openads.org Repeatability: Infinite References: http://packetstormsecurity.org/0802-advisories/OPENADS-SA-2008-001.txt CVE Url:...

CVE-2008-0635

OpenAds OpenAds 2.4.0–2.4.2 delivery engine has a remote code execution flaw due to unsanitized input to the OA_Delivery_Cache_store() function in www/delivery. An unauthenticated attacker can inject arbitrary PHP code via the name argument, leading to code execution under the web server user. Af...