QwikSec

Security Database

CVE

CWE

Training

CVE-2015-7366

Published: Oct 14, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authentication of users for requests that (1) perform certain plugin actions and possibly cause a denial of service (disabled core plugins) via unknown vectors or (2) change the contact name and language or possibly have unspecified other impact via a crafted POST request to an account-user-*.php script.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.revive-adserver.com/security/revive-sa-2015-001

x_refsource_CONFIRM

20151007 [REVIVE-SA-2015-001] Revive Adserver - Multiple vulnerabilities

mailing-list

x_refsource_BUGTRAQ

20151008 [REVIVE-SA-2015-001] Revive Adserver - Multiple vulnerabilities

mailing-list

x_refsource_FULLDISC

http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.