- OpenX Community Forums

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Code Injection On The Openx Admin, An input text box asking for a password
lbny
post Dec 21 2011, 01:33 PM
Post #1


Beginner
*

Group: Members
Posts: 2
Joined: 14-December 11
Member No.: 171,071



Hi

I've Openx 2.8.8 installed. Since many days ago i'm viewing a input text box when i try to create an HTML banner or when i access to the invocation code tab (see http://servicios.web.com.ve/Captura.PNG for the screenshot).

I dont know where are located this injection code, if in the files or in the mysql. I searched all the database looking for a input text box but i dont find anything. I search for javascript and i dont see anything.

Can anybody help me? Where i can find this code injection?

The injected code are


<pre align=center><form method=post>Password: <input type=password name=pass><input type=submit value='>>'></form></pre>
Go to the top of the page
 
+Quote Post
rakshan
post Dec 21 2011, 06:25 PM
Post #2


Mentor
********

Group: Moderators
Posts: 1,303
Joined: 12-November 08
From: San Francisco
Member No.: 24,158



QUOTE (lbny @ Dec 21 2011, 02:33 PM) *
Can anybody help me? Where i can find this code injection?

The injected code are
<pre align=center><form method=post>Password: <input type=password name=pass><input type=submit value='>>'></form></pre>


I believe this is in the plugins.
Unpack a fresh copy of openx in another directory and compare each plugin size. One file will be smaller/different.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 

Locations of visitors to this page