🔺Severity: High
👽 Reporter: rajib mahmud
⭐️ Reputation: 102
🛠 State: resolved
💼 Team: Revive Adserver
💵 Bounty: null
🕐 Submitted: 2026-05-18
⏰ Disclosed: 2026-06-03 13:29:15
📝 Summary: A vulnerability was reported in Revive Adserver 6.0.6 and earlier versions where user input was not properly validated when saving delivery limitations. This allowed a low-privileged user to inject malicious PHP code into the
compiledlimitations field, which could then be executed during banner delivery.📂 Report JSON File: 3744200
@hackeronereports