CVE-2021-22871

Mô tả

Tham khảo

• packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html · Third Party Advisory
• seclists.org/fulldisclosure/2021/Jan/60 · Broken Link
• revive-adserver/revive-adserver commit 62a2a04 · Patch
• revive-adserver/revive-adserver commit 89b88ce · Patch
• hackerone.com/reports/819362 · Exploit
• revive-adserver.com/security/revive-sa-2021-001 · Vendor Advisory

Lỗ hổng khác của revive adserver

• CVE-2026-50745TRUNG BÌNH 6.1A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did …
• CVE-2026-50744TRUNG BÌNH 4.3A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a sess…
• CVE-2026-50742TRUNG BÌNH 5.4A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. T…
• CVE-2026-50741CAO 8.8Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed eith…
• CVE-2026-50740TRUNG BÌNH 5.4A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privile…