Description

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.

Remediation

References

CVE-2015-7372

Related Vulnerabilities

Sqlite Incorrect Conversion between Numeric Types Vulnerability (CVE-2019-19317)

WordPress Plugin Hero Maps Premium Cross-Site Scripting (2.2.1)

Drupal Core 7.x SQL Injection (7.0 - 7.31)

Mailman Other Vulnerability (CVE-2001-0884)

WordPress Plugin Citizen Space Cross-Site Scripting (1.0)

Severity

High

Classification

CVE-2015-7372 CWE-22

Tags

Missing Update Known Vulnerabilities