EUVD-2008-5034

Malware in sbrugna...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2008-5056

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

Sql injection

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5056

CVE-2008-5056 affects ActiveCampaign TrioLive before 1.58.7. The issue is a cross-site scripting (XSS) vulnerability in department_offline_context.php, exploitable via the department_id parameter to index.php. This allows remote attackers to inject arbitrary web script or HTML. The NVD entry list...

CVE-2008-5055

CVE-2008-5055 affects ActiveCampaign TrioLive before 1.58.7. The flaw is a SQL injection in department_offline_context.php, exploitable via the department_id parameter to index.php, enabling remote execution of arbitrary SQL commands. The provided documents do not specify exploits, vulnerable ver...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2008-5056

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...

CVE-2008-5055: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2008-5056: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the departmentid parameter to index.php...