Pavanw3B

#12049de 60,596
26.7CVSS total
Vulnerabilidades · 4
Média
3
Crítica
1
PT-2017-10163
2017-03-28
5.4
CVE-2016-9472
Revive Adserver Team
Revive Adserver
The issue concerns a reflected XSS attack. The Revive Adserver web installer scripts are vulnerable to this attack via parameters such as `dbHost` and `dbUser`. The window for such attack vectors is extremely narrow, making it unlikely for an attack to be effective.
PT-2017-16695
2017-03-03
9.8
CVE-2017-5830
Revive Adserver
Revive Adserver
The issue allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.
PT-2017-16697
2017-03-03
5.4
CVE-2017-5832
Revive Adserver
Revive Adserver
The issue allows remote authenticated users to inject arbitrary web script or HTML via the user's `email address`. This can lead to cross-site scripting (XSS) attacks.
PT-2017-16698
2017-03-03
6.1
CVE-2017-5833
Revive Adserver
Revive Adserver
A cross-site scripting (XSS) issue exists in the invocation code generation for interstitial zones, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters.