Arbitrary PHP code execution in Revive Adserver - CVE-2013-4211

Vulnerability identifier: #VU4383

CSH Severity: Critical

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-4211

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to execute arbitrary PHP code on the target system.

The weakness exists due to compromise of the source code package. A remote attacker can create a specially crafted request with a rot13'd and reversed payload and send it to the target system to execute arbitrary PHP code.

Successful exploitation of the vulnerability results in arbitrary PHP code execution on the vulnerable system.

Note: the vulnerability was being actively exploited.

Revive Adserver

Update to version 2.8.11 or later.

• Exploit #765 - OpenX - Backdoor PHP Code Execution (Metasploit) (March 18, 2020)
• Exploit #1771 - OpenX Backdoor PHP Code Execution (March 18, 2020)

• http://seclists.org/oss-sec/2013/q3/295

• PHP code execution in OpenX Revive Adserver