Sql injection

2008-11-1311:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.2%

JSON

SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php.

CPENameOperatorVersion
trioliveeq1.31
trioliveeq1.50.1
trioliveeq1.19
trioliveeq1.33
trioliveeq1.05
trioliveequnknown beta3
trioliveeq1.06
trioliveeq1.56.2
trioliveeq1.39
trioliveeq1.13

Name	Operator	Version
triolive	eq	1.31
triolive	eq	1.50.1
triolive	eq	1.19
triolive	eq	1.33
triolive	eq	1.05
triolive	eq	unknown beta3
triolive	eq	1.06
triolive	eq	1.56.2
triolive	eq	1.39
triolive	eq	1.13

Rows per page:

1-10 of 651

References

activecampaign.com/support/forum/showthread.php?t=4554

holisticinfosec.org/content/view/93/45/

osvdb.org/49825

secunia.com/advisories/32703

www.securityfocus.com/bid/32268

www.vupen.com/english/advisories/2008/3125

exchange.xforce.ibmcloud.com/vulnerabilities/46557