CVE-2013-3514

no score yetEPSS 3.2%

openx openx: no CVSS score yet. EPSS 3.2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. (dot dot) in the group parameter to (1) plugin-preferences.php or (2) plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to read arbitrary files.

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2014-05-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

openx:openx

References

http://osvdb.org/94778
http://seclists.org/bugtraq/2013/Jul/27
https://www.htbridge.com/advisory/HTB23155
http://osvdb.org/94778
http://seclists.org/bugtraq/2013/Jul/27

Check your stack JSON