CVE-2016-9457CWE-79

Revive Adserver before 3.2.3 suffers from Reflected XSS

published March 28, 2017

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, period_start, period_end, and possibly others.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01520 · 74.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2017-03-28T02:46Z
EPSS history
Timeline
  • 28 MAR 02:46Z
    Revive Adserver before 3.2.3 suffers from Reflected XSS
    cvelistv5