Revive Adserver - Exposed Installer
Detected exposed Revive Adserver installation wizard that allows unauthorized installation and configuration.
Revive AdserverPoC 已收录
CVSS—
World's most popular free, open source ad serving system. Formerly known as OpenX Adserver and phpAdsNew.
共找到 5 条公开漏洞记录
Detected exposed Revive Adserver installation wizard that allows unauthorized installation and configuration.
A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions.
Revive Adserver before 5.1.0 contains an open redirect vulnerability via the dest, oadest, and ct0 parameters of the lg.php and ck.php delivery scripts. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
Revive Adserver 5.0.3 and prior contains a reflected cross-site scripting vulnerability in the publicly accessible afr.php delivery script. In older versions, it is possible to steal the session identifier and gain access to the admin interface. The query string sent to the www/delivery/afr.php script is printed back without proper escaping, allowing an attacker to execute arbitrary JavaScript code on the browser of the victim.
Revive Adserver 4.2 is susceptible to remote code execution. An attacker can send a crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. This can be exploited to perform various types of attacks, e.g. serialize-related PHP vulnerabilities or PHP object injection. It is possible, although unconfirmed, that the vulnerability has been used by some attackers in order to gain access to some Revive Adserver instances and deliver malware through them to third-party websites.