Description

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.

Remediation

References

CVE-2015-7372

Related Vulnerabilities

MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2311)

WordPress Plugin Retain Live Chat Cross-Site Scripting (0.1)

Oracle Database Server CVE-2023-22096 Vulnerability (CVE-2023-22096)

WordPress Improper Input Validation Vulnerability (CVE-2020-28037)

WordPress Plugin Welcart e-Commerce SQL Injection (2.0.0)

Severity

High

Classification

CVE-2015-7372 CWE-22

Tags

Missing Update Known Vulnerabilities