Vulnerabilities > Activecampaign > 1 2 ALL Broadcast Email > Medium

DATE CVE VULNERABILITY TITLE RISK
2007-05-11 CVE-2007-2630 Remote Code Execution vulnerability in Activecampaign 1-2-All Broadcast Email 4.5/4.53.13
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors.
network
low complexity
activecampaign
6.5