Skip to content
Noroxi

OpenX records

13 published records for vendor openx.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 15.4%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2013-4211
    60This week

    A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remo

    CriticalCVSS 9.8WeaponizedEPSS 71%

    openx · openxFeb 14, 2020

  • CVE-2009-0291
    32Monitor

    Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a ..

    HighCVSS 7.5Proof of conceptEPSS 7%

    openx · openxJan 27, 2009

  • CVE-2008-6163
    31Monitor

    SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid

    HighCVSS 7.5Proof of conceptEPSS 2%

    openx · openxFeb 20, 2009

  • CVE-2009-4830
    31Monitor

    Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator ac

    HighCVSS 7.5No exploitEPSS 2%

    openx · openxApr 27, 2010

  • CVE-2012-4990
    31Monitor

    SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitra

    HighCVSS 7.5No exploitEPSS 2%

    openx · openxOct 22, 2012

  • CVE-2013-7149
    31Monitor

    SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and Op

    HighCVSS 7.5No exploitEPSS 2%

    openx · openxDec 28, 2013

  • CVE-2009-4098
    30Monitor

    Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner

    MediumCVSS 6.0WeaponizedEPSS 19%

    openx · openxNov 29, 2009

  • CVE-2013-5954
    28Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication o

    MediumCVSS 6.8Proof of conceptEPSS 3%

    openx · openxApr 25, 2014

  • CVE-2013-7376
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack

    MediumCVSS 6.8Proof of conceptEPSS 1%

    openx · openxMay 14, 2014

  • CVE-2014-2230
    24Monitor

    Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to a

    MediumCVSS 5.8No exploitEPSS 2%

    openx · openxOct 23, 2014

  • CVE-2012-4989
    18Monitor

    Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote attackers to inject a

    MediumCVSS 4.3Proof of conceptEPSS 4%

    openx · openxOct 22, 2012

  • CVE-2013-3515
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script

    MediumCVSS 4.3Proof of conceptEPSS 4%

    openx · openxJul 29, 2013

  • CVE-2013-3514
    18Monitor

    Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a

    MediumCVSS 4.3Proof of conceptEPSS 3%

    openx · openxMay 14, 2014