CVE-2008-6163

Опубликовано: 20 фев. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter.

Ссылки

http://forum.openx.org/index.php?s=8d4c74dab4fd4597a7facda7c7414703&showtopic=503422735
Vendor Advisory
http://secunia.com/advisories/32114
Vendor Advisory
http://www.securityfocus.com/bid/31549
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/45631
https://www.exploit-db.com/exploits/6655
http://forum.openx.org/index.php?s=8d4c74dab4fd4597a7facda7c7414703&showtopic=503422735
Vendor Advisory
http://secunia.com/advisories/32114
Vendor Advisory
http://www.securityfocus.com/bid/31549
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/45631
https://www.exploit-db.com/exploits/6655

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openx:openx:2.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00181

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2008-6163

debian

почти 17 лет назад

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allo ...

GHSA-g4vg-c8q8-p936

github

больше 3 лет назад