Description

SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.

Remediation

References

CVE-2013-7149

Related Vulnerabilities

Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.2)

Drupal Core 7.x Remote Code Execution (7.0 - 7.74)

MySQL CVE-2021-2226 Vulnerability (CVE-2021-2226)

WeBid Incorrect Comparison Vulnerability (CVE-2020-23359)

PHP CVE-2011-1467 Vulnerability (CVE-2011-1467)

Severity

High

Classification

CVE-2013-7149 CWE-138

Tags

Missing Update Known Vulnerabilities