Description

Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors.

Remediation

References

CVE-2015-7365

Related Vulnerabilities

WordPress 4.0.x Arbitrary File Deletion Vulnerability (4.0 - 4.0.23)

WordPress Plugin Advanced Woo Search Information Disclosure (1.99)

SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-3889)

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4302)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9547)

Severity

Medium

Classification

CVE-2015-7365 CWE-707

Tags

Missing Update Known Vulnerabilities