CVE-2016-9128

CVE-2016-9128 affects Revive Adserver prior to 3.2.3. A reflected XSS flaw exists in the affiliate-preview.php script in www/admin, enabling an attacker to steal the session ID of an authenticated user by convincing them to visit a crafted URL. Affected component: Revive Adserver web admin. Root ...