Revive Adserver · Report #3656781
PHP code injection via delivery limitation logical
Validstatus
highseverity
36upvotes
3 Jun 2026disclosed
Summary
HackerOne community member 0x4c616e has reported a missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could use the logical parameter to inject malicious PHP code into the compiledlimitations field on the database and have it executed during banner delivery.
Input sanitisation has been improved to ensure that the parameter is properly validated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.