EDB-26624
PoCOpenX 2.8.10 - Multiple Vulnerabilities
view exploit source exploit_dbtype webappsauthor High-Tech Bridge SApublished 2013-07-05catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-7376US | medium6.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the authentication of administrators, a… | ||||
| CVE-2013-3514US | medium4.3 | Exploit | ||
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. (dot dot) in the group parameter to… | ||||
| CVE-2013-3515US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter t… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan