Non notée
CVE-2016-9126 Revive Adserver before 3.2.3 suffers from persistent XSS
Description
Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboard upon login, allowing persistent XSS attacks. An authenticated user with enough privileges to create other users could exploit the vulnerability to access the administrator account.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Revive Adserver All versions before 3.2.3 | Versions non publiées |
Références
- github.com github.com
- www.revive-adserver.com www.revive-adserver.com
- hackerone.com hackerone.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Revive Adserver All versions before 3.2.3
Les 11 CVE de Revive Adserver All versions before 3.2.3 →
CVE-2016-9455
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF)
Non notée
CVE-2016-9457
Revive Adserver before 3.2.3 suffers from Reflected XSS
Non notée
CVE-2016-9454
Revive Adserver before 3.2.3 suffers from Persistent XSS
Non notée
CVE-2016-9129
Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy
Non notée