Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ReviveAdserver Other Vulnerability - CVE-2016-9471 - Vulnerability Database
ReviveAdserver

ReviveAdserver Other Vulnerability - CVE-2016-9471

Low
Reference: CVE-2016-9471
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9471
Title: ReviveAdserver Other Vulnerability
Overview:

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren39t properly sanitised when creating users on a Revive Adserver instance. Especially control characters were not filtered allowing apparently identical usernames to co-exist in the system due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing although elevated privileges are required to create users within Revive Adserver.