CVE-2016-9470

🗓️ 28 Mar 2017 02:46:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 80 Views🌐 WEB

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download in asyncspc.ph

Reporter	Title	Published	Views	Family All 9
CNVD	Revive Adserver Elevation of Privilege Vulnerability (CNVD-2017-05631)	30 Mar 201700:00	–	cnvd
Cvelist	CVE-2016-9470	28 Mar 201702:46	–	cvelist
EUVD	EUVD-2016-10276	7 Oct 202500:30	–	euvd
Mend	CVE-2016-9470	28 Mar 201702:46	–	mend
NVD	CVE-2016-9470	28 Mar 201702:59	–	nvd
osv_cve	CVE-2016-9470	28 Mar 201702:59	–	osv_cve
Prion	Design/Logic Flaw	28 Mar 201702:59	–	prion
Positive Technologies	PT-2017-10161	28 Mar 201700:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2016-9470: Improper Neutralization of Input During Web Page Generation	28 Mar 201700:00	–	rapid7

NVD

Vulners

Node

revive-adserver revive_adserverRange≤3.2.4

revive-adserver revive_adserverMatch4.0.0

[
  {
    "product": "Revive Adserver All versions before 3.2.5 and 4.0.0",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Revive Adserver All versions before 3.2.5 and 4.0.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/revive-adserver/revive-adserver/commit/69aacbd2
revive-adserver	www.revive-adserver.com/security/revive-sa-2016-002/
hackerone	www.hackerone.com/reports/148745