A spreadsheet formula injection vulnerability exists in Revive Adserver version 6.0.8 and earlier. An unauthenticated attacker can submit conversion values that are interpreted as formulas in exported XLS reports. When users open these reports in spreadsheet applications, the attacker-supplied formulas may be executed. The vulnerability allows formula execution but does not confirm information disclosure. The issue is fixed in version 6.0.9 by sanitizing conversion values before export.