Non notée

CVE-2016-9455 Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF)

Description

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: `www/admin/banner-acl.php`, `www/admin/banner-activate.php`, `www/admin/banner-advanced.php`, `www/admin/banner-modify.php`, `www/admin/banner-swf.php`, `www/admin/banner-zone.php`, `www/admin/tracker-modify.php`.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Revive Adserver All versions before 3.2.3	Versions non publiées

Références

hackerone.com hackerone.com
github.com github.com
83964 www.securityfocus.com
www.revive-adserver.com www.revive-adserver.com

Chronologie

Publiée 28 mars 2017
Dernière modification 6 août 2024

Les 11 CVE de Revive Adserver All versions before 3.2.3 →

CVE-2016-9454 Revive Adserver before 3.2.3 suffers from Persistent XSS Non notée CVE-2016-9129 Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy Non notée CVE-2016-9457 Revive Adserver before 3.2.3 suffers from Reflected XSS Non notée CVE-2016-9128 Revive Adserver before 3.2.3 suffers from reflected XSS Non notée

Suivre cette CVE