CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

Revive Adserver: Unrestricted setPerPage allows huge result sets / resource exhaustion / mass log retrieval

Description: The setPerPage query parameter controls pagination for the log viewer but is not validated or capped on the server. An attacker can supply an extremely large numeric value for example setPerPage=100000000000000000 and the application will attempt to honor that value when building the...

EUVD-2021-10010

Malware in sbrugna...

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

Cross site scripting

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

CVE-2021-22875

Revive Adserver is affected by CVE-2021-22875: a reflected XSS in stats.php via the setPerPage parameter, impacting Revive Adserver versions up to 5.1.0 (fixed in 5.1.1). The root cause is insufficient input validation/neutralization of user-supplied data in the request parameters, allowing injec...

CVE-2021-22875: Improper Neutralization of Input During Web Page Generation

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

PT-2021-15248

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 5.1.1 Description The issue is related to a reflected XSS vulnerability. It affects the stats.php file via the setPerPage parameter. Recommendations For versions prior to 5.1.1, update to version 5.1.1 or late...

CVE-2016-9457

Revive Adserver before 3.2.3 suffers from Reflected XSS. "www/admin/stats.php" is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...

CVE-2016-9457: Improper Neutralization of Input During Web Page Generation

Revive Adserver before 3.2.3 suffers from Reflected XSS. www/admin/stats.php is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...

PT-2017-10148

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.3 Description The issue affects the "www/admin/stats.php" endpoint, which is vulnerable to reflected XSS attacks. This is due to multiple parameters not being properly sanitised or escaped when displayed,...