Browse CVEs

CRITICAL 9.8 CVE-2013-4211EPSS 71% A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malici… Openx No fix yet Fix from $2,3002020-02-14 MEDIUM 5.8 CVE-2014-2230 Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary … Openx after 2.8.10 Fix from $1,6002014-10-23 MEDIUM 6.8 CVE-2013-7376 Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the auth… Openx No fix yet Fix from $1,6002014-05-14 HIGH 7.5 CVE-2013-7149 SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Sourc… Openx after 3.0.1 Fix from $1,9502013-12-28 HIGH 7.5 CVE-2012-4990 SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL co… Openx No fix yet Fix from $1,9502012-10-22 HIGH 7.5 CVE-2009-4830 Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via… Openx Patch available Fix from $1,9502010-04-27 MEDIUM 6.0 CVE-2009-4098EPSS 19% Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file up… Openx after 2.8.1 Fix from $1,6002009-11-29 HIGH 7.5 CVE-2008-6163 SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid paramete… Openx Patch available Fix from $1,9502009-02-20 HIGH 7.5 CVE-2009-0291EPSS 7% Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the M… Openx No fix yet Fix from $1,9502009-01-27