Beveiligingsadvies

CVE-2026-34914

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 16:14:38

Laatst bijgewerkt 2026-06-23 17:27:08

Toegewezen door hackerone

CVSS-score 8.3

Status PUBLISHED

Beschrijving

A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. A low‑privileged user could exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the script are properly validated.

← Alle CVE's bekijken Bekijk op cve.org ↗