CVE-2019-5434
72Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 57%
de la publicación al arma211 días
Publicada en NVD6 may
1ª PoC+211d
VulnCheck+2499d
probabilidad de explotación
57%top 1% de las CVE
explotación observada
síVulnCheck
2 exploit(s) público(s)
An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP vulnerabilities or PHP object injection. It is possible, although unconfirmed, that the vulnerability has been used by some attackers in order to gain access to some Revive Adserver instances and deliver malware through them to third party websites. This vulnerability was addressed in version 4.2.0.
Productos afectados
n/a · Revive AdserverPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/47739no verificadocve_referencepacketstormsecurity.com/files/155559/Revive-Adserver-4.2-Remote-Code-Execution.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.