CVE-2015-7371

Publication date

2015-10-14 19:00:00

Family

mitre

State

PUBLISHED

Description

Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request.