ActiveCampaign

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ActiveCampaign records in CISA KEV

No ActiveCampaign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Knowledgebuilder 5 records LOW Supporttrio 4 records LOW Activecampaign 3 records MEDIUM 1-2-all Broadcast Email 2 records LOW Triolive 2 records LOW 1-2-all 1 record LOW Activecampaign For Woocommerce 1 record MEDIUM General 1 record LOW

Records

5 records in Knowledgebuilder · all components

TI-2006-05702 CVE-2006-5919 · GHSA-9hh5-58rj-f97g

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in…

LOW 39

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEdit_root parameter, a di…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0317 Published 2006-11-15 No fix listed

TI-2003-01034 CVE-2003-1131 · GHSA-h9wr-4rpj-pqr5

PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as…

LOW 39

PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03429 Published 2005-03-20 No fix listed

TI-2005-03623 CVE-2005-3829 · GHSA-fp3m-w4r4-j69f

index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to…

LOW 38

index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be proc…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01845 Published 2005-11-26 No fix listed

TI-2006-00941 CVE-2006-0970 · GHSA-8fqw-3pg3-gmfj

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign…

LOW 36

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2006-03-03 No fix listed

TI-2005-03622 CVE-2005-3828 · GHSA-62x7-9wc2-qhpc

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and…

LOW 35

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-11-26 No fix listed

Open these records in search →

Critical	1
High	8
Medium	8
Low	0
No CVSS	0