Description

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.

Remediation

References

CVE-2015-7372

Related Vulnerabilities

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-19520)

MySQL CVE-2024-21238 Vulnerability (CVE-2024-21238)

Python URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-1000110)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58024)

Sqlite CVE-2020-13631 Vulnerability (CVE-2020-13631)

Severity

High

Classification

CVE-2015-7372 CWE-22

Tags

Missing Update Known Vulnerabilities