CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11…

published December 28, 2013

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02011 · 80.7th percentile
Published
2013-12-28T02:00Z
EPSS history
Timeline
  • 28 DEC 02:00Z
    SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11…
    cvelistv5