Unrated severityNVD Advisory· Published Oct 14, 2015· Updated May 6, 2026
CVE-2015-7366
CVE-2015-7366
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authentication of users for requests that (1) perform certain plugin actions and possibly cause a denial of service (disabled core plugins) via unknown vectors or (2) change the contact name and language or possibly have unspecified other impact via a crafted POST request to an account-user-*.php script.
Affected products
1- cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*Range: <=3.2.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.