Description

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.

Remediation

References

CVE-2015-7372

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2001-0591)

GlassFish CVE-2012-3155 Vulnerability (CVE-2012-3155)

WordPress Plugin Backup and Staging by WP Time Capsule PHP Object Injection (1.21.9)

WordPress Plugin Participants Database Cross-Site Scripting (1.7.5.9)

WordPress Plugin FileBird-WordPress Media Library Folders & File Manager SQL Injection (4.7.3)

Severity

High

Classification

CVE-2015-7372 CWE-22

Tags

Missing Update Known Vulnerabilities