OpenX - flowplayer Backdoor Detection (CVE-2013-4211)

Detects CVE-2013-4211 by POSTing encoded phpinfo payload to fc.php flowplayer deliveryLog endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """OpenX flowplayer backdoor phpinfo CVE-2013-4211.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

OpenX/Revive Adserver Login Panel - Detect

OpenX login panel was detected. Note that OpenX is now a Revive Adserver. !/usr/bin/env python3 -- coding: utf-8 -- """OpenX login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

CVE-2009-4830

Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/install.php, www/admin/install-plugins.php, and other www/admin/ files...

EUVD-2009-4793

Malware in sbrugna...

EUVD-2012-4914

Malware in sbrugna...

EUVD-2013-3450

Malware in sbrugna...

EUVD-2013-6932

Malware in sbrugna...

EUVD-2013-3449

Malware in sbrugna...

EUVD-2013-7146

Malware in sbrugna...

EUVD-2008-6133

Malware in sbrugna...

EUVD-2014-2270

Malware in sbrugna...

EUVD-2009-0296

Malware in sbrugna...

EUVD-2013-5786

Malware in sbrugna...

EUVD-2012-4913

Malware in sbrugna...

CVE-2013-7376

Multiple cross-site request forgery CSRF vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the authentication of administrators, as demonstrated by requests that conduct directory traversal attacks via the group parameter to 1 plugin-preferences.php...

qa.openx.com Cross Site Scripting vulnerability OBB-2364372

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2013-4211

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...

Remote code execution

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...

CVE-2013-4211

CVE-2013-4211 concerns OpenX Ad Server 2.8.10 which ships with a backdoor in flowplayer-3.1.1.min.js enabling remote code execution. The vulnerability allows a remote attacker to execute arbitrary PHP code on the server, with web server privileges, via a single crafted request (payload ROT13’d an...

CVE-2013-4211

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...