N/A

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narrow and it is very unlikely that such an attack could be actually effective.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Revive Adserver 跨站脚本漏洞

Revive Adserver是Revive Adserver团队的一套开源的广告管理系统。该系统提供广告投放、广告位管理、数据统计等功能。 Revive Adserver 3.2.5之前的版本和4.0.0之前的版本中的Web安装程序脚本存在跨站脚本漏洞。攻击者可借助‘dbHost’或‘dbUser’参数利用该漏洞注入任意的Web脚本或HTML。

N/A

N/A