727 matches found
WordPress plugin Revive Old Posts 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...
Revive Adserver: Stored XSS in Conversion Statistics via Tracker Name
I found stored XSS on the conversion statistics page. Advertisers can inject malicious JavaScript through tracker names, which executes when admins view conversion reports www/admin/stats-conversions.php:356. I was able to steal admin session cookies using this vulnerability. This is a privilege...
Revive Adserver: Stored XSS on inventory-retrieve.php
A Cross-site Scripting XSS vulnerability was discovered on the inventory-retrieve.php and campaign-edit.php pages. The vulnerability allowed an attacker to inject malicious code that would be executed when the page was loaded...
Revive Adserver: Reflected XSS in account-preferences-plugin.php
A reflected cross-site scripting RXSS vulnerability was discovered in revive-adserver-6.0.1/www/admin/account-preferences-plugin.php via the group query parameter. Untrusted input was reflected without proper output encoding or context-aware escaping, allowing injection of JavaScript into the...
Revive Adserver: Authorization bypass allows changing email address of other users
The Revive Adserver 6.0.0 was found to have an authorization bypass vulnerability that allowed changing the email address of other users without requiring the account password. The vulnerability was present in the admin panel endpoint /admin/agency-user.php, which accepted a POST request that...
Revive Adserver: Error-Based & Time-Based SQL Injection in 'keyword' Parameter of admin-search.php Allowing Full Database Access in Revive Adserver v6.0.0
==Cricetinae== Summary: A critical SQL Injection vulnerability has been identified in Revive Adserver's administrative search functionality, specifically in the admin-search.php file. The vulnerability exists in the handling of the keyword GET parameter, which is passed to multiple database queri...
WordPress Revive Old Posts plugin <= 9.3.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Revive Old Posts versions = 9.3.3...
EUVD-2015-7294
Malware in sbrugna...
EUVD-2015-7290
Malware in sbrugna...
EUVD-2017-14907
Malware in sbrugna...
EUVD-2020-29039
Malware in sbrugna...
EUVD-2016-10261
Malware in sbrugna...
EUVD-2021-10009
Malware in sbrugna...
EUVD-2016-9942
Malware in sbrugna...
EUVD-2016-9946
Malware in sbrugna...
EUVD-2019-15023
Malware in sbrugna...
EUVD-2015-7292
Malware in sbrugna...
EUVD-2015-7291
Malware in sbrugna...