CVE-2013-3515

Description

References

• osvdb.org/94774
• osvdb.org/94775
• seclists.org/bugtraq/2013/Jul/27 · Exploit
• exploit-db.com/exploits/26624 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/85411
• svn.openx.org/openx/trunk/www/admin/plugin-index.php · Patch
• svn.openx.org/openx/trunk/www/admin/plugin-settings.php · Patch
• htbridge.com/advisory/HTB23155 · Exploit
• htbridge.com/advisory/HTB23155-openx-changeset-82710.diff

openx 的其他漏洞

• CVE-2013-4211严重 9.8A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remo…
• CVE-2014-2230中危 5.8Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to a…
• CVE-2013-7376中危 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack…
• CVE-2013-3514中危 4.3Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a…
• CVE-2013-5954中危 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication o…