CVE-2014-8793

Cross-site scripting XSS vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via the refreshpage parameter to www/admin/report-generate.php...

CVE-2014-8793: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via the refreshpage parameter to www/admin/report-generate.php...

PT-2014-8734

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.0.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the refresh page parameter to "www/admin/report-generate.php". Recommendations For versions...