200 matches found
(Multiple Products) - 'banner.swf' Cross-Site Scripting
source: https://www.securityfocus.com/bid/38732/info Multiple products are prone to a cross-site scripting vulnerability because the applications fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
Vulnerability in phpAdsNew, OpenAds and OpenX
Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в системах phpAdsNew, OpenAds та OpenX. В баннерных системах phpAdsNew, OpenAds и OpenX возможна XSS атака через параметр clickTAG во флеш баннерах. О подобных уязвимостях я писал в своей статье XSS уязвимости в 8 миллионах флеш...
OpenX SQL Injection Vulnerability
OpenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
OpenX SQL Injection Vulnerability
OpenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
OpenX 2.6.1 - SQL Injection
OpenX 2.6.1 - SQL Injection source: https://www.securityfocus.com/bid/37913/info OpenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
OpenX 2.6.1 SQL Injection
=Info======================================================================= Software: OpenX Sql Injection Version: v2.6.1 Vulnerability: Sql Injection Google Dork: inurl:"index.php?q=" Openx Off. site: www.openx.org/ ============================================================================...
OpenX 2.6.1 - SQL Injection
source: https://www.securityfocus.com/bid/37913/info OpenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...
OpenX install.php / install-plugin.php Admin Authentication Bypass
The version of OpenX hosted on the remote web server has an authentication bypass vulnerability. Sending a specially crafted request to install.php or install-plugin.php bypasses the normal authentication process. A remote attacker could exploit this to gain administrative access to the OpenX...
OpenX Source Detection
The remote host is running OpenX Source previously known as Openads, an open source ad server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43863; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"OpenX...
OpenX < 2.8.3 Authentication-Bypass
Binary data 5285.prm...
OpenX Ad Serving SW Attacked
Hackers have exploited flaws in a popular open-source advertising software to place malicious code on advertisements on several popular Web sites over the past week. Read the full article. Computerworld...
OpenX <= 2.8.1 execute arbitrary PHP code-exploits warning-the black bar safety net
Test method: OpenX adserver version 2.8.1 and lower is vulnerable to remote code execution. To be exploited, this vulnerability requires banner / file upload permissions, such as granted to the 'advertiser' and 'administrator' roles. This vulnerability is caused by the insecure file upload...
OpenX banner-edit.php脚本任意文件上传漏洞
BUGTRAQ ID: 37110 OpenX是用PHP编写的开源广告服务器。 OpenX的banner-edit.php脚本允许向webroot中的文件夹上传带有任意扩展名的文件，通过上传包含有GIF标记串的特制PHP脚本就可以导致执行任意PHP代码。 OpenX OpenX 2.8.1 OpenX OpenX 2.8 厂商补丁： OpenX ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.openx.org/ad-server/download...
CVE-2009-4098
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...
Unrestricted file upload
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...
CVE-2009-4098
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...
CVE-2009-4098
OpenX OpenX banner-edit.php
OpenX <= 2.8.1 执行任意PHP代码
No description provided by source. OpenX adserver version 2.8.1 and lower is vulnerable to remote code execution. To be exploited, this vulnerability requires banner / file upload permissions, such as granted to the 'advertiser' and 'administrator' roles. This vulnerability is caused by the...
OpenX Arbitrary File Upload Vulnerability
OpenX is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately validate user- supplied input. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate...