admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-08-04 16:51:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create Revive_Adserver_adxmlrpc.php_Remote_Code_Execution_Vulnerability.md

Browse Source
This commit is contained in:
Goby 2023-09-25 10:27:38 +08:00 committed by GitHub
parent b85b2b505a
commit af7bc929bf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
Revive_Adserver_adxmlrpc.php_Remote_Code_Execution_Vulnerability.md Normal file
View File

@ -0,0 +1,16 @@
## Revive Adserver adxmlrpc.php Remote Code Execution Vulnerability (CVE-2019-5434)
| **Vulnerability** | Revive Adserver adxmlrpc.php Remote Code Execution Vulnerability (CVE-2019-5434) |
| :----: | :-----|
| **Chinese name** | Revive Adserver 广告管理系统 adxmlrpc.php 文件远程代码执行漏洞（CVE-2019-5434） |
| **CVSS core** | 9.0 |
| **FOFA Query** (click to view the results directly)| [title="Revive Adserver" \|\| body="strPasswordMinLength" \|\| body="Welcome to Revive Adserver"](https://en.fofa.info/result?qbase64=dGl0bGU9IlJldml2ZSBBZHNlcnZlciIgfHwgYm9keT0ic3RyUGFzc3dvcmRNaW5MZW5ndGgiIHx8IGJvZHk9IldlbGNvbWUgdG8gUmV2aXZlIEFkc2VydmVyIg%3D%3D)|
| **Number of assets affected** | 5667 |
| **Description** | Revive Adserver is an open source advertising management system developed by the Revive Adserver team. The system provides functions such as advertising placement, advertising space management, and data statistics.The delivery XML-RPC script in versions prior to Revive Adserver 4.2.0 has a code problem vulnerability, and an attacker can execute arbitrary code to obtain server permissions. |
| **Impact** | The delivery XML-RPC script in versions prior to Revive Adserver 4.2.0 has a code problem vulnerability, and an attacker can execute arbitrary code to obtain server permissions. |
![](https://s3.bmp.ovh/imgs/2023/09/25/74874bad3ffe8fc6.gif)