CVE-2015-7372: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the layerstyle parameter...

PT-2015-7535

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.2 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the layerstyle parameter. Recommendations...