CVE-2013-7149: SQL Injection
SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7149?
CVE-2013-7149 is considered to have a high severity due to its potential for remote SQL injection attacks.
How do I fix CVE-2013-7149?
To fix CVE-2013-7149, upgrade to Revive Adserver version 3.0.2 or OpenX Source version 2.8.12 or later.
What products are affected by CVE-2013-7149?
CVE-2013-7149 affects Revive Adserver versions up to 3.0.1 and OpenX Source versions up to 2.8.11.
What kind of attacks can be executed through CVE-2013-7149?
CVE-2013-7149 allows attackers to execute arbitrary SQL commands remotely, leading to potential data breaches.
Is CVE-2013-7149 exploitable without authentication?
Yes, CVE-2013-7149 can be exploited by remote attackers without requiring authentication.