Skip to content
Sign in
Not rated

CVE-2016-9472 Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS

Description

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narrow and it is very unlikely that such an attack could be actually effective.

Affected products and versions

Product Affected versions Fixed in
Revive Adserver All versions before 3.2.5 and 4.0.0 Versions not published

Other CVEs of Revive Adserver All versions before 3.2.5 and 4.0.0

The 3 CVEs of Revive Adserver All versions before 3.2.5 and 4.0.0 →
CVE-2016-9470 Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download Not rated CVE-2016-9471 Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection Not rated
Track this CVE