CVE-2015-7367

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.54%

Published

Oct 14, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked.

Weaknesses (CWE)

CWE-284

Affected Products (1)

revive-adserver · revive_adservervulnerable

References (8)

http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html

http://seclists.org/fulldisclosure/2015/Oct/32

http://www.revive-adserver.com/security/revive-sa-2015-001

Vendor Advisory

http://www.securityfocus.com/archive/1/536633/100/0/threaded

http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html

http://seclists.org/fulldisclosure/2015/Oct/32

http://www.revive-adserver.com/security/revive-sa-2015-001

Vendor Advisory

http://www.securityfocus.com/archive/1/536633/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs