EUVD-2006-5902

Malware in sbrugna...

EUVD-2005-3824

Malware in sbrugna...

CVE-2006-5919

CVE-2006-5919 describes a PHP remote file inclusion vulnerability in ActiveCampaign KnowledgeBuilder 2.2, specifically in admin/e_data/visEdit_control.class.php where an attacker can supply a URL via visEdit_root to execute arbitrary PHP code on the server. The affected component is KnowledgeBuil...

CVE-2006-5919

PHP remote file inclusion vulnerability in admin/edata/visEditcontrol.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEditroot parameter, a different vector than CVE-2003-1131...

CVE-2006-5919: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/edata/visEditcontrol.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEditroot parameter, a different vector than CVE-2003-1131...

CVE-2005-3828

ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...

CVE-2005-3829: Undefined Security Weakness

index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service CPU consumption via an invalid category parameter, which causes a large number of SQL queries to be processed...

CVE-2005-3828: Undefined Security Weakness

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...