N/A

Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be able to brute force session IDs in order to take over a specific account.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

revive-adserver 安全特征问题漏洞

revive-adserver是一个开源 广告服务器，根据GNU 通用公共许可证获得许可。 revive-adserver存在安全特征问题漏洞，该漏洞源于revive-adserver生成会话 ID 的漏洞，基于密码不安全的 uniqid() PHP 函数。

N/A

N/A