Security Advisory

CVE-2013-7149

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-12-28 02:00:00

Last updated 2024-08-06 18:01:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.

← Browse all CVEs View on cve.org ↗