CVE-2013-7149 SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to ex...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openx | <= 2.8.11 | No fix listed |
| openx | = 2.8.10 | No fix listed |
| revive-adserver revive adserver | <= 3.0.1 | No fix listed |
| revive-adserver revive adserver | = 3.0.0 | No fix listed |