59 matches found
New vulnerabilities in OpenX
Hello 3APA3A! I want to warn you about Denial of Service, Cross-Site Scripting and Redirector vulnerabilities in OpenX. DoS Looped DoS: http://site/adclick.php About Looped DoS I wrote in my classification of DoS vulnerabilities in web applications http://websecurity.com.ua/2663/. Vulnerable are...
Vulnerabilities in OpenX
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Cross-Site Scripting и Redirector уязвимостях в OpenX. Full path disclosure: http://site/openx/www/delivery/fc.php?MAXtype=1 XSS: http://site/openx/www/delivery/fc.php?MAXtype=3Cscript3Ealertdocument.cookie3C/script3E XSS обх...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Openads: code execution...
Code Execution vulnerability in Openads
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Code Execution уязвимости в Openads. В Openads есть возможность загружать скрипты, в частности php. Что приводит к Code Execution уязвимости в том числе возможен shell upload. При загрузке баннера не проверяется его расширение. В последних версиях...
Openads Delivery Engine OA_Delivery_Cache_store() Function name Argument Arbitrary PHP Code Execution
The remote host is running Openads, an open source ad serving application written in PHP. The installed version of Openads contains a vulnerability in its delivery engine in that it fails to properly sanitize input to the 'name' argument of the 'OADeliveryCachestore' function in various scripts...
phpAdsNew cross-site scripting vulnerability
Overview phpAdsNew, an open source web advertising management system, contains a cross-site scripting vulnerability. Note that phpAdsNew is now called "Openads." The products listed below use the same module as phpAdsNew thus they are also affected by the vulnerability. - phpPgAds 2.0.9-pr1 and...
Security feature bypass
Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...
Immunity Canvas: OPENADS_EXEC
Name| openadsexec ---|--- CVE| CVE-2008-0635 Exploit Pack| CANVAS Description| OpenAds 2.4.0 = x = 2.4.2 Remote Code Execution Notes| CVE Name: CVE-2008-0635 VENDOR: Openads.org Repeatability: Infinite References: http://packetstormsecurity.org/0802-advisories/OPENADS-SA-2008-001.txt CVE Url:...
CVE-2008-0635
Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...
CVE-2008-0635
OpenAds OpenAds 2.4.0–2.4.2 delivery engine has a remote code execution flaw due to unsanitized input to the OA_Delivery_Cache_store() function in www/delivery. An unauthenticated attacker can inject arbitrary PHP code via the name argument, leading to code execution under the web server user. Af...
CVE-2008-0635
Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...
[OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed
======================================================================== Openads security advisory OPENADS-SA-2008-001 ------------------------------------------------------------------------ Advisory ID: OPENADS-SA-2008-001 Date: 2008-Feb-04 Security risk: Critical Applications affetced: Openads...
OpenAds Lib-RemoteHost.INC.PHP远程文件包含漏洞
OpenAds是一款基于PHP的WEB应用程序。 OpenAds不正确过滤用户提交的URI输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本'Lib-RemoteHost.INC.PHP'对用户提交的'phpAdsgeoPlugin'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意命令。 phpAdsNew phpAdsNew 2.0.8 -pr1 phpAdsNew phpAdsNew 2.0.8 phpAdsNew phpAdsNew 2.0.7 rc1 phpAdsNew phpAdsNew 2.0.7 phpAdsNew...
Openads (PHPAdsNew) 2.0.8 - lib-remotehost.inc.php Remote File Inclusion
Openads PHPAdsNew 2.0.8 - lib-remotehost.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/25277/info Openads formerly known as phpAdsNew is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may...
Openads (PHPAdsNew) < 2.0.8 - 'lib-remotehost.inc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/25277/info Openads formerly known as phpAdsNew is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying syste...
CVE-2007-2046
Multiple CRLF injection vulnerabilities in adclick.php in a Openads phpAdsNew 2.0.11 and earlier and b Openads for PostgreSQL phpPgAds 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in 1 the dest parameter...
Crlf injection
Multiple CRLF injection vulnerabilities in adclick.php in a Openads phpAdsNew 2.0.11 and earlier and b Openads for PostgreSQL phpPgAds 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in 1 the dest parameter...
Crlf injection
CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...
CVE-2007-2047
CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...
CVE-2007-2047
CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...