mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-13 15:32:53 +00:00
962 B
962 B
CVE-2016-9130
Description
Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The website name wasn't properly escaped when displayed in the campaign-zone.php script.
POC
Reference
Github
No PoCs found on GitHub currently.