CVE-2009-0291

Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. dot dot in the MAXtype parameter...

OpenX Version Detection

Binary data 4819.prm...

OpenX 2.6.3 Local File Inclusion

I have found a local file inclusion exploit in OpenX 2.6.3, this is in the script "fc.php", located in /www/delivery/ Here is a snip of the code: snip includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME = 'MAXtype'; if!isset$GET$MAXPLUGINSADPLUGINNAME echo $MAXPLUGINSADPLUGINNAME . ' i...

OpenX 2.6.3 - 'MAX_type' Local File Inclusion

includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME = 'MAXtype'; if!isset$GET$MAXPLUGINSADPLUGINNAME echo $MAXPLUGINSADPLUGINNAME . ' is not specified'; exit1; $tagName = $GET$MAXPLUGINSADPLUGINNAME; $tagFileName = MAXPATH...

OpenX 2.6.3 (MAX_type) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= OpenX 2.6.3 MAXtype Local File Inclusion Vulnerability ========================================================= includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME =...

OpenX 2.6.2 - MAX_type Local File Inclusion

OpenX 2.6.2 - MAXtype Local File Inclusion source: https://www.securityfocus.com/bid/33458/info OpenX is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the...

OpenX 2.6.3 - MAX_type Local File Inclusion

OpenX 2.6.3 - MAXtype Local File Inclusion includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME = 'MAXtype'; if!isset$GET$MAXPLUGINSADPLUGINNAME echo $MAXPLUGINSADPLUGINNAME . ' is not specified'; exit1; $tagName = $GET$MAXPLUGINSADPLUGINNAME; $tagFileName = MAXPATH...

OpenX 2.6.3 (MAX_type) Local File Inclusion Vulnerability

No description provided by source. snip includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME = 'MAXtype'; if!isset$GET$MAXPLUGINSADPLUGINNAME echo $MAXPLUGINSADPLUGINNAME . ' is not specified'; exit1; $tagName = $GET$MAXPLUGINSADPLUGINNAME; $tagFileName = MAXPATH...

OpenX 2.6.2 - 'MAX_type' Local File Inclusion

source: https://www.securityfocus.com/bid/33458/info OpenX is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. VID 55616fda-a2d0-11dd-a9f9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 55616fda-a2d0-11dd-a9f9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : openx -- sql injection vulnerability (55616fda-a2d0-11dd-a9f9-0030843d3802)

Secunia reports : OpenX can be exploited by malicious people to conduct SQL injection attacks. Input passed to the 'bannerid' parameter in www/delivery/ac.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL cod...

[OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability

======================================================================== OpenX security advisory OPENX-SA-2008-002 ------------------------------------------------------------------------ Advisory ID: OPENX-SA-2008-002 Date: 2008-Oct-06 Security risk: Moderately critical Applications affetced:...

OpenX ac.php bannerid Parameter SQL Injection

The remote host is running OpenX formerly Openads, an open source ad serving application written in PHP. The installed version of OpenX does not validate user-supplied input to the 'bannerid' parameter of the 'www/delivery/ac.php' script before using it in database queries. Regardless of PHP's...

openx-blindsql.txt

OpenX Remote Blind SQL Injection Exploit By d00m3r4ng ",0 $i++; return $i; function getValue$length for $a=1;$a",$b $bl=$b; else $bh=$b; $v.=chr$b; return $v; $host="127.0.0.1"; $result="concatusername,0x3A,password"; $table="oxusers"; ifisset$POST'host' extract$POST; $l=0; whilesockr1,"",0 $l++;...

OpenX 2.6 (ac.php bannerid) Remote Blind SQL Injection Exploit

No description provided by source. html headtitleOpenX Remote Blind SQL Injection Exploit By d00m3r4ng/title/head bodycenter ?php //discovered by d00m3r4ng //exploit coded by d00m3r4ng //contact: d00m3r4ngatgmail.com settimelimit0; function sockr$j, $exp, $asc extract $POST; global $l; if$socket ...

openx -- sql injection vulnerability

Secunia reports: OpenX can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "bannerid" parameter in www/delivery/ac.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...

OpenX 2.6 (ac.php bannerid) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== OpenX 2.6 ac.php bannerid Remote Blind SQL Injection Exploit ============================================================== OpenX Remote Blind SQL Injection Exploit By d00m3r4n...

OpenX 2.6 - 'bannerid' Blind SQL Injection

OpenX Remote Blind SQL Injection Exploit By d00m3r4ng ",0 $i++; return $i; function getValue$length for $a=1;$a",$b $bl=$b; else $bh=$b; $v.=chr$b; return $v; $host="127.0.0.1"; $result="concatusername,0x3A,password"; $table="oxusers"; ifisset$POST'host' extract$POST; $l=0; whilesockr1,"",0 $l++;...

OpenX 2.6 - bannerid Blind SQL Injection

OpenX 2.6 - bannerid Blind SQL Injection OpenX Remote Blind SQL Injection Exploit By d00m3r4ng ",0 $i++; return $i; function getValue$length for $a=1;$a",$b $bl=$b; else $bh=$b; $v.=chr$b; return $v; $host="127.0.0.1"; $result="concatusername,0x3A,password"; $table="oxusers"; ifisset$POST'host'...