ActiveCampaign

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ActiveCampaign records in CISA KEV

No ActiveCampaign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Knowledgebuilder 5 records LOW Supporttrio 4 records LOW Activecampaign 3 records MEDIUM 1-2-all Broadcast Email 2 records LOW Triolive 2 records LOW 1-2-all 1 record LOW Activecampaign For Woocommerce 1 record MEDIUM General 1 record LOW

Records

4 records in Supporttrio · all components

TI-2006-00941 CVE-2006-0970 · GHSA-8fqw-3pg3-gmfj

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign…

LOW 36

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2006-03-03 No fix listed

TI-2005-04364 CVE-2005-4634 · GHSA-2fv9-9wxv-5vmh

SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote…

LOW 35

SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0121 Published 2006-01-09 No fix listed

TI-2006-01441 CVE-2006-1488 · GHSA-rmpx-wc8x-r6wv

ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the…

LOW 26

ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters in a kb action to index.php, or (3) an invalid category parameter to modules/KB…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01528 Published 2006-03-29 No fix listed

TI-2006-01440 CVE-2006-1487 · GHSA-wmgc-7vp7-xmjj

Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows…

LOW 24

Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01929 Published 2006-03-29 No fix listed

Open these records in search →

Critical	1
High	8
Medium	8
Low	0
No CVSS	0