ActiveCampaign 1-2-All Broadcast Email sername Parameter SQL Injection - Ver2 (CVE-2005-3679)

An SQL injection vulnerability has been reported in Activecampaign 1-2-all Broadcast Email. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

ActiveCampaign 1-2-All Broadcast Email 4.0 7 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================================================== ActiveCampaign 1-2-All Broadcast Email Admin Control Panel Username SQL Injection Vulnerability...

CVE-2008-5056

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

Sql injection

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5056

CVE-2008-5056 affects ActiveCampaign TrioLive before 1.58.7. The issue is a cross-site scripting (XSS) vulnerability in department_offline_context.php, exploitable via the department_id parameter to index.php. This allows remote attackers to inject arbitrary web script or HTML. The NVD entry list...

CVE-2008-5056

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2008-5055

CVE-2008-5055 affects ActiveCampaign TrioLive before 1.58.7. The flaw is a SQL injection in department_offline_context.php, exploitable via the department_id parameter to index.php, enabling remote execution of arbitrary SQL commands. The provided documents do not specify exploits, vulnerable ver...

CVE-2007-2630

Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...

CVE-2007-2630

Removed by vendor...

12All File Upload Vulnerability

Author: John McGuire Company: ActiveCampaign Product: 1-2-All Version: 4.5x - 4.53.13 Flaw: Arbitrary File Upload Vendor Notified: Yes Patch Available: Yes Patch Location: http://www.activecampaign.com/support/forum/showthread.php?t=3293 URL:...

CVE-2006-5919

PHP remote file inclusion vulnerability in admin/edata/visEditcontrol.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEditroot parameter, a different vector than CVE-2003-1131...

CVE-2006-5919

CVE-2006-5919 describes a PHP remote file inclusion vulnerability in ActiveCampaign KnowledgeBuilder 2.2, specifically in admin/e_data/visEdit_control.class.php where an attacker can supply a URL via visEdit_root to execute arbitrary PHP code on the server. The affected component is KnowledgeBuil...

ActiveCampaign KnowledgeBuilder 2.2 - Remote File Inclusion

ActiveCampaign KnowledgeBuilder 2.2 - Remote File Inclusion source: https://www.securityfocus.com/bid/20020/info ActiveCampaign KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise t...

ActiveCampaign KnowledgeBuilder 2.2 - Remote File Inclusion

source: https://www.securityfocus.com/bid/20020/info ActiveCampaign KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application and the underlying system; other attacks are...

CVE-2006-1487

Cross-site scripting XSS vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module...

CVE-2006-1488

ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid 1 article or 2 print parameters in a kb action to index.php, or 3 an invalid category parameter to modules/KB/pdf.php, which leaks the path in an error message...

Cross site scripting

Cross-site scripting XSS vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module...