Description
SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2012-0506 Vulnerability (CVE-2012-0506)
Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4359)
WordPress Plugin Warranties and Returns for WooCommerce Security Bypass (5.2.1)
MySQL CVE-2022-21358 Vulnerability (CVE-2022-21358)
Apache HTTP Server Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2019-0220)