Beveiligingsadvies

CVE-2026-34915

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 16:14:38

Laatst bijgewerkt 2026-06-23 17:42:13

Toegewezen door hackerone

CVSS-score 6.1

Status PUBLISHED

Beschrijving

A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the script are properly validated.

← Alle CVE's bekijken Bekijk op cve.org ↗