Back to CVE Browser

CVE-2016-9470

CRITICAL

9.0

CVSS Severity Score

EPSS Score0.0390%

EPSS Percentile35.80th

PublishedMar 28, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a trusted domain.

Affected Platforms (CPE)

📦

Revive Adserver

Revive Adserver

<= 3.2.4

📦

Revive Adserver

Revive Adserver

= 4.0.0

References & Advisories

🔗 https://github.com/revive-adserver/revive-adserver/commit/69aacbd2

🔗 https://hackerone.com/reports/148745

🔗 https://www.revive-adserver.com/security/revive-sa-2016-002/

🔗 https://github.com/revive-adserver/revive-adserver/commit/69aacbd2

🔗 https://hackerone.com/reports/148745

🔗 https://www.revive-adserver.com/security/revive-sa-2016-002/

Related Vulnerabilities

CVE-2016-91249.8

Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adse...

CVE-2016-91259.8

Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the sam...

CVE-2019-54349.8

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "...

CVE-2017-58309.8

Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the d...