Revive-adserver

Revive Adserver

67 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2016-9126

  • EPSS 1.45%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboard upon login, allowing persistent XSS attacks. An authenticated user with enough privileges to create...

8.8

CVE-2016-9127

  • EPSS 0.76%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password recovery form in Revive Adserver is vulnerable to CSRF attacks. This vulnerability could be exploited to send a large number of password recovery emails to the ...

5.4

CVE-2016-9128

  • EPSS 1.6%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This vulnerability could be used by an attacker to steal the session ID of an authenticated user, by trick...

5.3

CVE-2016-9129

  • EPSS 1.43%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was associated to one or more user accounts on a target Revive Adserver instance by examining the message prin...

5.4

CVE-2016-9454

  • EPSS 1.1%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The banner image URL for external banners wasn't properly escaped wh...

8.8

CVE-2016-9455

  • EPSS 0.8%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: `www/admin/banner-acl.php`, `www/admin/banner-activate.php`, `www/admin/banner-advanc...

8.8

CVE-2016-9456

  • EPSS 0.52%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interface scripts in order to identify and fix other potential CSRF vulnerabilities. Over 20+ such issues we...

5.4

CVE-2016-9457

  • EPSS 1.52%
  • Veröffentlicht 28.03.2017 02:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, period_star...

5.4

CVE-2017-5832

  • EPSS 1.34%
  • Veröffentlicht 03.03.2017 15:59:01
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address.

9.8

CVE-2017-5830

  • EPSS 3.3%
  • Veröffentlicht 03.03.2017 15:59:01
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.