CVE-2013-3515 - CVE House
Back to Database
Status published Medium CVE-2013-3515

Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-3515

Credits & Attribution

No credits recorded in the NVD database.

References

More from openx

View All →
CVE-2014-2230
Open redirect vulnerability in the header function in adclick.php in...
Medium 5.8
CVE-2013-7376
Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly...
Medium 6.8
CVE-2013-7149
SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation...
High 7.5
CVE-2013-3514
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710...
Medium 4.3
CVE-2012-4990
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision...
High 7.5

Affected Vendor

Affected Software

openx
Vulnerable Versions:
0, 2.4, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.4.10, 2.4.11, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.7.29, 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5

Timeline

Official Publish: July 29th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.