Description
Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a trusted domain.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Essentials-Social Stats and Sharing Buttons Cross-Site Scripting (1.3.1)
WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (3.95)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-1551)
Liferay Portal CVE-2021-38266 Vulnerability (CVE-2021-38266)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8563)