Vulnerabilities > Activecampaign > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-11-13 | CVE-2008-5055 | SQL Injection vulnerability in Activecampaign Triolive SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php. | 7.5 |
| 2006-11-15 | CVE-2006-5919 | Remote File Include vulnerability in Activecampaign Knowledgebuilder 2.2 PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEdit_root parameter, a different vector than CVE-2003-1131. | 7.5 |
| 2006-03-03 | CVE-2006-0970 | Remote Security vulnerability in SupportTrio PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter. | 7.5 |
| 2005-12-31 | CVE-2005-4634 | SQL-Injection vulnerability in Activecampaign Supporttrio 1.4 SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. | 7.5 |
| 2005-11-26 | CVE-2005-3829 | SQL-Injection vulnerability in Activecampaign Knowledgebuilder 2.4 index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be processed. | 7.8 |
| 2005-11-26 | CVE-2005-3828 | SQL-Injection vulnerability in Activecampaign Knowledgebuilder 2.4 SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter. | 7.5 |
| 2005-11-18 | CVE-2005-3679 | Unspecified vulnerability in Activecampaign 1-2-All Broadcast Email 4.07 SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. | 7.5 |
| 2003-12-31 | CVE-2003-1131 | Remote File Include vulnerability in KnowledgeBuilder PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code. | 7.5 |