Description

Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request.

Remediation

References

CVE-2015-7371

Related Vulnerabilities

WordPress Plugin Request a Quote Cross-Site Scripting (2.3.4)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-11820)

MySQL CVE-2016-0616 Vulnerability (CVE-2016-0616)

Joomla Other Vulnerability (CVE-2006-1027)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10268)

Severity

Medium

Classification

CVE-2015-7371 CWE-264

Tags

Missing Update Known Vulnerabilities