TI-2014-02042 CVE-2014-2540 · GHSA-xqwg-mwmp-6pp4SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows…Priority LOW 35SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the site_directory_sort_field parameter to guest/site_directory.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01223 · Published 2014-04-11 · No fix listed CWE-89