Description
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: `www/admin/banner-acl.php`, `www/admin/banner-activate.php`, `www/admin/banner-advanced.php`, `www/admin/banner-modify.php`, `www/admin/banner-swf.php`, `www/admin/banner-zone.php`, `www/admin/tracker-modify.php`.
Remediation
References
Related Vulnerabilities
WordPress Plugin DW Question & Answer Cross-Site Scripting (1.4.2.2)
Drupal Core 4.5.x Multiple Vulnerabilities (4.5.0 - 4.5.5)
Oracle JRE CVE-2024-20918 Vulnerability (CVE-2024-20918)
WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.6.3)
PHP Resource Management Errors Vulnerability (CVE-2010-3710)