CVE-2013-3515: XSS
Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3515?
CVE-2013-3515 has a medium severity rating due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2013-3515?
To fix CVE-2013-3515, upgrade your OpenX to version 2.8.11 or later, which addresses these vulnerabilities.
What are the specific cross-site scripting vulnerabilities in CVE-2013-3515?
CVE-2013-3515 includes multiple XSS vulnerabilities found in the package and group parameters of certain OpenX admin pages.
Which versions of OpenX are affected by CVE-2013-3515?
CVE-2013-3515 affects OpenX Source versions 2.8.10 and earlier.
Can CVE-2013-3515 lead to remote code execution?
While CVE-2013-3515 primarily enables XSS attacks, it could lead to further exploitation such as remote code execution if combined with other vulnerabilities.