Reflected XSS Vulnerability in Revive Adserver by Revive
CVE-2016-9457

5.4MEDIUM

Key Information:

Vendor: Revive-adserver
Status: Revive Adserver All Versions Before 3.2.3
Vendor: CVE Published:; 28 March 2017

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2016-9457?

The Revive Adserver software prior to version 3.2.3 is susceptible to reflected cross-site scripting (XSS) attacks. Attackers can exploit this vulnerability by sending malicious requests to the www/admin/stats.php endpoint. Parameters such as setPerPage, pageId, bannerid, period_start, and period_end are not adequately sanitized or escaped, allowing attackers to inject and execute arbitrary scripts in users' browsers. This could lead to unauthorized access to sensitive information or hijacked sessions. It is crucial for users of affected versions to update their software to mitigate this security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch