CVE-2009-4830

Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/install.php, www/admin/install-plugins.php, and other www/admin/ files...

EUVD-2013-5786

Malware in sbrugna...

EUVD-2012-4914

Malware in sbrugna...

EUVD-2008-6133

Malware in sbrugna...

EUVD-2013-7146

Malware in sbrugna...

EUVD-2013-6932

Malware in sbrugna...

EUVD-2013-3450

Malware in sbrugna...

EUVD-2009-0296

Malware in sbrugna...

EUVD-2009-4793

Malware in sbrugna...

EUVD-2013-3449

Malware in sbrugna...

EUVD-2014-2270

Malware in sbrugna...

EUVD-2012-4913

Malware in sbrugna...

CVE-2013-7376

Multiple cross-site request forgery CSRF vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the authentication of administrators, as demonstrated by requests that conduct directory traversal attacks via the group parameter to 1 plugin-preferences.php...

qa.openx.com Cross Site Scripting vulnerability OBB-2364372

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2013-4211

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...

Remote code execution

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...

CVE-2013-4211

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...

CVE-2013-4211

CVE-2013-4211 concerns OpenX Ad Server 2.8.10 which ships with a backdoor in flowplayer-3.1.1.min.js enabling remote code execution. The vulnerability allows a remote attacker to execute arbitrary PHP code on the server, with web server privileges, via a single crafted request (payload ROT13’d an...

openx.com XSS vulnerability

Open Bug Bounty ID: OBB-472058 Description| Value ---|--- Affected Website:| openx.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

openx.com XSS vulnerability

Open Bug Bounty ID: OBB-457535 Description| Value ---|--- Affected Website:| openx.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...