NVD

Id
41168  
Name
CVE-2013-5954  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete (1) users via admin/agency-user-unlink.php, (2) advertisers via admin/advertiser-delete.php, (3) banners via admin/banner-delete.php, (4) campaigns via admin/campaign-delete.php, (5) channels via admin/channel-delete.php, (6) affiliate websites via admin/affiliate-delete.php, or (7) zones via admin/zone-delete.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-04-25  
Modified Date
2015-08-11  
Seq
2013-5954  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
208525 41168 CVE-2013-5954 http://packetstormsecurity.com/files/125735  View
208526 41168 CVE-2013-5954 20140315 [CVE-2013-5954] Multiple Cross Site Request Forgery Vulnerabilities in OpenX 2.8.11  View
208527 41168 CVE-2013-5954 20140515 [REVIVE-SA-2014-001] Revive Adserver 3.0.5 fixes CSRF vulnerability  View
208528 41168 CVE-2013-5954 http://www.revive-adserver.com/security/revive-sa-2014-001/  View
208529 41168 CVE-2013-5954 20140515 [REVIVE-SA-2014-001] Revive Adserver 3.0.5 fixes CSRF vulnerability  View
208530 41168 CVE-2013-5954 66251  View
208531 41168 CVE-2013-5954 openx-cve20135954-csrf(91889)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24776 JVNDB-2013-006351 OpenX におけるクロスサイトリクエストフォージェリの脆弱性 OpenX には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-5954 65896 CVE-2013-5954 41168 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006351.html 2013-09-27 2014-04-28 View