Revive Adserver: Blind SQL injection due to request precedence issue in global input registration

A blind SQL injection vulnerability was discovered in administration pages for banner zones and campaign zones. The vulnerability resulted from a request precedence issue where permission checks and database queries used different values for the same request parameter. This mismatch could have be...