FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OpenX -- SQL injection vulnerability

Affected packages
openx < 2.8.10


VuXML ID dee44ba9-08ab-11e2-a044-d0df9acfd7e5
Discovery 2012-09-14
Entry 2012-09-27

Secunia reports:

A vulnerability has been discovered in OpenX, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed via the "xajaxargs" parameter to www/admin/updates-history.php (when "xajax" is set to "expandOSURow") is not properly sanitised in e.g. the "queryAuditBackupTablesByUpgradeId()" function (lib/OA/Upgrade/DB_UpgradeAuditor.php) before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerability is confirmed in version 2.8.9. Prior versions may also be affected.