CVE-2016-9472

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narrow and it is very unlikely that such an attack could be actually effective.

• CWE-79
• CWE-79

• https://github.com/revive-adserver/revive-adserver/commit/14ff73f0Permissions Required, Third Party Advisory
• https://github.com/revive-adserver/revive-adserver/commit/fcf72c8aPatch, Third Party Advisory
• https://hackerone.com/reports/170156Permissions Required
• https://www.revive-adserver.com/security/revive-sa-2016-002/Patch, Vendor Advisory
• https://github.com/revive-adserver/revive-adserver/commit/14ff73f0Permissions Required, Third Party Advisory
• https://github.com/revive-adserver/revive-adserver/commit/fcf72c8aPatch, Third Party Advisory
• https://hackerone.com/reports/170156Permissions Required
• https://www.revive-adserver.com/security/revive-sa-2016-002/Patch, Vendor Advisory

Published

Mar 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9466Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.…
• CVE-2016-9467Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server …
• CVE-2016-9468Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server …
• CVE-2016-9469Multiple versions of GitLab expose a dangerous method to any…
• CVE-2016-9470Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflecte…
• CVE-2016-9471Revive Adserver before 3.2.5 and 4.0.0 suffers from Special …
• CVE-2016-9473Brave Browser iOS before 1.2.18 and Brave Browser Android 1.…4.7
• CVE-2016-9474Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9475Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9476Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9477Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9478Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…