S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Feb 1, 2024

CVE-2019-5434 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Revive Adserver affects v. 4.2.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
3.3k
Times Used
continuous scan runs
4.4k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2019-5434
9.8
CVSS

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP vulnerabilities or PHP object injection. It is possible, although unconfirmed, that the vulnerability has been used by some attackers in order to gain access to some Revive Adserver instances and deliver malware through them to third party websites. This vulnerability was addressed in version 4.2.0.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
Revive Adserverby n/a
Fixed version v4.2.0
Updated Aug 21, 2026View on NVD →
Detail

Revive Adserver is an open-source ad management software that helps publishers and advertisers to manage their ads effectively. This software is widely used by small and large-scale publishers to handle ad delivery, targeting, and monitoring. With Revive Adserver, publishers can manage multiple ad networks and measure their campaigns' performance with real-time reports.

CVE-2019-5434 is a vulnerability detected in the Revive Adserver application. This vulnerability is related to the unserialize() method of PHP, where an attacker can send a malicious payload to the XML-RPC invocation script's "what" parameter in the "openads.spc" RPC method. This vulnerability could allow attackers to exploit any serialize-related PHP vulnerabilities or even perform PHP object injection.

When exploited, the CVE-2019-5434 vulnerability can lead to severe consequences for publishers and advertisers. Attackers could use this vulnerability to gain access to the publisher's Revive Adserver instance and inject malicious code while managing the ad delivery process. This malicious ad code could then spread to third-party websites that host the advertiser's content, infecting their digital assets with malware.

Thanks to the pro features of the s4e.io platform, publishers and advertisers can easily and quickly discover vulnerabilities in their digital assets. With the platform's intuitive interface, users can gain detailed insights into their assets' security posture and take actions to mitigate any security risks. Apart from the vulnerability assessment, users can also track their assets' security posture continuously and receive alerts whenever a high-risk vulnerability is discovered. By leveraging such a platform, publishers and advertisers can secure their digital assets and prevent any potential security breaches.

 

REFERENCES

Solution Advice

To protect against this vulnerability, it is essential to follow some basic precautions. Here are some of the practices that could safeguard publishers and advertisers from such vulnerabilities:

  • Update the Revive Adserver application to the latest version available.
  • Configure the application to only accept XML-RPC requests from trusted sources.
  • Use a firewall to isolate the application and limit the access to only the necessary ports and protocols.
  • Conduct regular security audits to identify vulnerabilities and exploit them proactively.
  • Educate employees and administrators to spot suspicious activities and report them as soon as possible.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.