9
CVSSv3

CVE-2016-9470

Published: 28/03/2017 Updated: 09/10/2019
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 9 | Impact Score: 6 | Exploitability Score: 2.3
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Revive Adserver prior to 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables malicious users to gain complete control over a victim's machine by virtually downloading a file from a trusted domain.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

revive-adserver revive adserver

revive-adserver revive adserver 4.0.0