CVE-2019-5433: URL Redirection to Untrusted Site

A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another unsafe domain, potentially used for stealing credentials or other phishing attacks. This vulnerability was...

PT-2019-17665

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 4.2.0 Description A phishing attack could be conducted by tricking a user into clicking a specifically crafted admin account-switch.php URL, potentially leading to credential theft or other phishing attacks...