Lucene search
HistoryNov 18, 2005 - 11:03 p.m.
CVE-2005-3679
cve-2005-3679
sql injection
admin/index.php
activecampaign
1-2-all broadcast email
remote attackers
authentication bypass
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.051 Low
EPSS
Percentile
92.9%
SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel.
| CPE | Name | Operator | Version |
|---|---|---|---|
| activecampaign:1-2-all_broadcast_email | activecampaign 1-2-all broadcast email | eq | 4.07 |
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.051 Low
EPSS
Percentile
92.9%
Related for CVE-2005-3679