Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.
| Software | From | Fixed in |
|---|---|---|
| openx / openx | 2.8.3 | 2.8.3.x |
| openx / openx | - | 2.8.10.x |
| openx / openx | 2.8.5 | 2.8.5.x |
| openx / openx | 2.8.8 | 2.8.8.x |
| openx / openx | 2.8 | 2.8.x |
| openx / openx | 2.8.9 | 2.8.9.x |
| openx / openx | 2.8.6 | 2.8.6.x |
| openx / openx | 2.8.2 | 2.8.2.x |
| openx / openx | 2.8.1 | 2.8.1.x |
| openx / openx | 2.8.4 | 2.8.4.x |
| openx / openx | 2.8.7 | 2.8.7.x |