Description

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.

Remediation

References

CVE-2015-7372

Related Vulnerabilities

Oracle JRE CVE-2012-0507 Vulnerability (CVE-2012-0507)

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39524)

WordPress Plugin Video Gallery-Vimeo and YouTube Gallery Cross-Site Scripting (1.1.4)

Oracle JRE CVE-2013-0351 Vulnerability (CVE-2013-0351)

MySQL CVE-2017-3460 Vulnerability (CVE-2017-3460)

Severity

High

Classification

CVE-2015-7372 CWE-22

Tags

Missing Update Known Vulnerabilities