| Package | Affected versions | Patched versions |
|---|---|---|
| revive adserver | ≤ 3.0.5 |
The XML_RPC_cd function in lib/pear/XML/RPC.php in Revive Adserver before 3.0.6 allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted XML-RPC request, aka an XML Entity Expansion (XEE) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free