CVE-2013-7149

HIGH 7.5CVE-2013-7149 · Published 28/12/2013 · updated 17/06/2026

In short

CVE-2013-7149 is a HIGH (CVSS 7.5) vulnerability affecting openx (openx), revive adserver (revive-adserver).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openx openx	`= 2.8.10≤ 2.8.11`	No fix yet
revive adserver revive-adserver	`= 3.0.0≤ 3.0.1`	No fix yet

Description

SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.

References

More vulnerabilities in openx

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openx

= 2.8.10≤ 2.8.11

No fix yet

revive adserver

revive-adserver

= 3.0.0≤ 3.0.1

No fix yet

More vulnerabilities in openx

See all →