OpenX versions 2.6.1 and below and versions 2.4.8 and below suffer from a blind remote SQL injection vulnerability in ac.php.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/70699/OPENX-SA-2008-002.txt
Source: https://packetstormsecurity.com/files/70699/OPENX-SA-2008-002.txt.html