Vulnerabilities

TI-2006-05702 CVE-2006-5919 · GHSA-9hh5-58rj-f97g

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in…

LOW 39

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEdit_root parameter, a di…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0317 Published 2006-11-15 No fix listed

TI-2006-00941 CVE-2006-0970 · GHSA-8fqw-3pg3-gmfj

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign…

LOW 36

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2006-03-03 No fix listed

TI-2005-03623 CVE-2005-3829 · GHSA-fp3m-w4r4-j69f

index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to…

LOW 38

index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be proc…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01845 Published 2005-11-26 No fix listed

TI-2005-03622 CVE-2005-3828 · GHSA-62x7-9wc2-qhpc

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and…

LOW 35

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-11-26 No fix listed

TI-2003-01034 CVE-2003-1131 · GHSA-h9wr-4rpj-pqr5

PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as…