CVE-2014-2654

MobFox mAdserve 2.0 and earlier is affected by CVE-2014-2654 due to insufficient sanitization of the id parameter in PHP scripts (edit_ad_unit.php, view_adunits.php, edit_campaign.php). The vulnerability allows a remote authenticated attacker to inject and execute arbitrary SQL commands against t...