CVE-2026-107662

A blind SQL injection vulnerability exists in Revive Adserver 6.0.8 and earlier versions, affecting the banner-zone.php and campaign-zone.php administration pages. The root cause is an inconsistent request-input precedence where permission checks and database queries retrieve different values for...