Identifying Blind SQLi in OpenX

[publists () enablesecurity com]

Hi all,

Posted an advisory for vulnerabilities in OpenX. ALso posted a screencast to explain how these issues were found, what 
sort of manual tests I did and demonstrating exploitation. 

http://resources.enablesecurity.com/advisories/openx-2.6.4-multiple.txt

http://www.youtube.com/watch?v=kiNeiMS2Iu0

- sandro