FreeBSD : OpenX -- SQL injection vulnerability (dee44ba9-08ab-11e2-a044-d0df9acfd7e5)

Secunia reports : A vulnerability has been discovered in OpenX, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the 'xajaxargs' parameter to www/admin/updates-history.php when 'xajax' is set to 'expandOSURow' is not properly sanitised in e.g. the...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. VID dee44ba9-08ab-11e2-a044-d0df9acfd7e5 OpenVAS Vulnerability Test $ Description: Auto generated from VID dee44ba9-08ab-11e2-a044-d0df9acfd7e5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Multiple vulnerabilities in OpenX

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in OpenX, which can be exploited to perform Cross-Site Scripting XSS and SQL Injection attacks. 1 Cross-Site Scripting XSS in OpenX: CVE-2012-4989 Input passed via the "parent" GET parameter to /www/admin/plugin-index.php ...

OpenX -- SQL injection vulnerability

Secunia reports: A vulnerability has been discovered in OpenX, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "xajaxargs" parameter to www/admin/updates-history.php when "xajax" is set to "expandOSURow" is not properly sanitised in e.g. the...

OpenX 2.8.6 File Upload

File upload vulnerability in OpenX ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

OpenX 2.6.3 LFI

Local file include vulnerability in OpenX fc.php MAXtype parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. VID 46aeba13-64a1-11e1-bc16-0023ae8e59f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 46aeba13-64a1-11e1-bc16-0023ae8e59f0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : openx -- undisclosed security issue (46aeba13-64a1-11e1-bc16-0023ae8e59f0)

OpenX does not provide information about vulnerabilities beyond their existence. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...

openx -- undisclosed security issue

OpenX does not provide information about vulnerabilities beyond their existence...

OpenX Ad Server CSRF Vulnerability

OpenX Ad Server is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenX Ad Server 2.8.7 Cross Site Request Forgery

Exploit for php platform in category web applications ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage:...

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery

Secur-I Research Group Security Advisory ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage: http://www.openx.or...

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery Secur-I Research Group Security Advisory ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed...

OpenX Ad Server 2.8.7 Cross Site Request Forgery

Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage: http://www.openx.org/ Vulnerability ID: SV-01 Found: 7/7/2011 By: Narendra Shinde Secur-I Research Group http://securview.com/...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. VID 80b6d6cc-c970-11df-bb18-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 80b6d6cc-c970-11df-bb18-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD : openx -- remote code execution vulnerability (80b6d6cc-c970-11df-bb18-0015587e2cc1)

The OpenX project reported : It has been brought to our attention that there is a vulnerability in the 2.8 downloadable version of OpenX that can result in a server running the downloaded version of OpenX being compromised. This vulnerability exists in the file upload functionality and allows...

OpenX Releases Security Update

OpenX has released a security update to address a vulnerability in the 2.8 downloadable version of OpenX. Exploitation of this vulnerability may allow an attacker to compromise the integrity of the server running OpenX. US-CERT encourages users and administrators to review the OpenX "Security...