Summary
OpenX is prone to a backdoor vulnerability.
Impact
Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application.
Impact Level: Application
Solution
Updates are available.
Insight
The security issue is caused due to the distribution of a compromised OpenX Source source code package containing a backdoor.
Affected
OpenX 2.8.10 is vulnerable
other versions may also be affected.
Detection
It was possible to execute 'phpinfo()' by sending a special crafted POST request
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2013-4211 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities