activecampaign.com XSS vulnerability

Vulnerable URL: https://www.activecampaign.com/login/?section=feedas%22%3E%3Cimg%20src=x%20onerror=prompt%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 04.04.2016 Latest check for patch:| 04.04.2016 01:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

ActiveCampaign KnowledgeBuilder 2.2 - Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20020/info ActiveCampaign KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application and the...

ActiveCampaign SupportTrio 2.50.2 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. ActiveCampaign SupportTrio is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...

ActiveCampaign 1-2-All Broadcast Email 4.0 Admin Control Panel Username SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15400/info ActiveCampaign 1-2-All Broadcast Email is prone to an SQL-injection vulnerability. This is an input-validation issue related to data that will be used in SQL queries, allowing a remote user to influence the...

ActiveCampaign 1-2-All Broadcast Email sername Parameter SQL Injection - Ver2 (CVE-2005-3679)

An SQL injection vulnerability has been reported in Activecampaign 1-2-all Broadcast Email. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

ActiveCampaign 1-2-All Broadcast Email 4.0 7 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================================================== ActiveCampaign 1-2-All Broadcast Email Admin Control Panel Username SQL Injection Vulnerability...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2008-5056

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

Sql injection

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5056

CVE-2008-5056 affects ActiveCampaign TrioLive before 1.58.7. The issue is a cross-site scripting (XSS) vulnerability in department_offline_context.php, exploitable via the department_id parameter to index.php. This allows remote attackers to inject arbitrary web script or HTML. The NVD entry list...

CVE-2008-5055

CVE-2008-5055 affects ActiveCampaign TrioLive before 1.58.7. The flaw is a SQL injection in department_offline_context.php, exploitable via the department_id parameter to index.php, enabling remote execution of arbitrary SQL commands. The provided documents do not specify exploits, vulnerable ver...

CVE-2008-5056

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2007-2630

Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...

CVE-2007-2630

Removed by vendor...

12All File Upload Vulnerability

Author: John McGuire Company: ActiveCampaign Product: 1-2-All Version: 4.5x - 4.53.13 Flaw: Arbitrary File Upload Vendor Notified: Yes Patch Available: Yes Patch Location: http://www.activecampaign.com/support/forum/showthread.php?t=3293 URL:...

CVE-2006-5919

CVE-2006-5919 describes a PHP remote file inclusion vulnerability in ActiveCampaign KnowledgeBuilder 2.2, specifically in admin/e_data/visEdit_control.class.php where an attacker can supply a URL via visEdit_root to execute arbitrary PHP code on the server. The affected component is KnowledgeBuil...

CVE-2006-5919

PHP remote file inclusion vulnerability in admin/edata/visEditcontrol.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEditroot parameter, a different vector than CVE-2003-1131...

ActiveCampaign KnowledgeBuilder 2.2 - Remote File Inclusion

ActiveCampaign KnowledgeBuilder 2.2 - Remote File Inclusion source: https://www.securityfocus.com/bid/20020/info ActiveCampaign KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise t...