OpenX versions 2.6.4 suffer from SQL injection, cross site scripting, CRLF injection, and file deletion vulnerabilities.