CVE-2013-7149

概要

参考情報

• kreativrauschen.com/blog/2013/12/18/zero-day-vulnerability-in-openx-source-2-8-11-and-revive-adserver-3-0-1
• revive-adserver.com/security/REVIVE-SA-2013-001 · Vendor Advisory
• securityfocus.com/archive/1/530471/30/0/threaded

openx のその他の脆弱性

• CVE-2013-4211緊急 9.8A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remo…
• CVE-2014-2230中 5.8Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to a…
• CVE-2013-7376中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack…
• CVE-2013-3514中 4.3Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a…
• CVE-2013-5954中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication o…