CVE-2013-3514

OpenX < 2.8.10 - Directory Traversal via Plugin Preferences and Settings

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-3514.

AI-analyzed exploit summary The exploit demonstrates a Local File Inclusion (LFI) vulnerability in OpenX via the 'group' parameter in plugin-preferences.php and plugin-settings.php, allowing arbitrary file inclusion and execution. It also includes Cross-Site Scripting (XSS) examples via the 'package' and 'group' parameters.

Description

Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. (dot dot) in the group parameter to (1) plugin-preferences.php or (2) plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to read arbitrary files.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/26624

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in OpenX via the 'group' parameter in plugin-preferences.php and plugin-settings.php, allowing arbitrary file inclusion and execution. It also includes Cross-Site Scripting (XSS) examples via the 'package' and 'group' parameters.

Classification
Working Poc 100%
Attack Type
Lfi | Xss
Complexity
Trivial
Reliability
Reliable
Target: OpenX 2.8.10 and prior
Auth required
Prerequisites: Administrative access or CSRF to trick an admin into executing the exploit
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/94778
Exploit mailing-list x_refsource_bugtraq
http://seclists.org/bugtraq/2013/Jul/27

Scores

EPSS 0.0333
EPSS Percentile 87.0%

Details

CWE
CWE-22
Status published
Products (27)
openx/openx 2.4
openx/openx 2.4.4
openx/openx 2.4.5
openx/openx 2.4.6
openx/openx 2.4.7
openx/openx 2.4.8
openx/openx 2.4.9
openx/openx 2.4.10
openx/openx 2.4.11
openx/openx 2.6.0
... and 17 more
Published May 14, 2014
Tracked Since Feb 18, 2026