CVE-2014-2540

CVE-2014-2540 describes a SQL Injection in Orbit Open Ad Server (OrbitScripts) via the site_directory_sort_field parameter in guest/site_directory. Affected: Orbit Open Ad Server 1.1.0 and probably earlier. Vulnerability type: CWE-89 SQL injection that can lead to arbitrary SQL execution. Root ca...