Vulnerabilities

TI-2009-04713 CVE-2009-4957 · GHSA-x3fh-hp6c-w93x

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote…

LOW 37

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory traversal sequences in the Panel paramete…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02356 Published 2010-07-22 No fix listed CWE-22

TI-2008-02242 CVE-2008-2338 · GHSA-8m83-76jj-3w93

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting…

MEDIUM 42

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06359 Published 2008-05-19 No fix listed CWE-264

TI-2007-05211 CVE-2007-5425 · GHSA-ppc8-8hw8-wp4w

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote…

LOW 31

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01131 Published 2007-10-12 No fix listed CWE-94

Vulnerabilities

Filters

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote…

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting…

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote…