Skip to content
OpenAdvisories

Vendor

Revive

55 known vulnerabilities.

55 results · Feed

  • High 8.7

    Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versio…

  • Medium 6.1

    Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.

  • Low 3.5

    Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be …

  • Low 3.5

    Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XS…

  • Medium 4.3

    Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes…

  • High 7.1

    Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delet…

  • Medium 4.3

    Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes n…

  • Low 2.7

    Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions ca…

  • Medium 6.5

    HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box…

  • Medium 5.4

    HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the usern…

  • Medium 6.5

    HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in t…

  • Medium 6.3

    A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver version 5.5.2. An attacker …

  • High 8.8

    SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payl…

  • Unscored —
    CVE-2023-38040 Scanner template

    A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..

  • Unscored —

    Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a poten…