CVE-2016-9125

Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session upon a successful authentication. Under some circumstances, that could have been an opportunity for an attacker to steal an authenticated session.

List of 729 websites affected by CVE-2016-9125
Contact us to get more info

DomainCountryRankContacts
***********.ro Romania**,***
******.com United States**,***
************************.**.uk GB**,***
********.rs Serbia**,***
*******.com United States**,***
*******.it Italy***,***
***********.com United States***,***
****************.org Cyprus***,***
******************.de Germany***,***
***********.it United States***,***
*************.com United States***,***
********.com United States***,***
************.com Germany***,***
***********.com United States***,***
***********.com United States***,***
******.com United States***,***
*****.********.com France***,***
**********.pl Poland***,***
**********************.es Spain***,***
**************.com United States***,***