CVE-2008-5056

CVE-2008-5056 affects ActiveCampaign TrioLive before 1.58.7. The issue is a cross-site scripting (XSS) vulnerability in department_offline_context.php, exploitable via the department_id parameter to index.php. This allows remote attackers to inject arbitrary web script or HTML. The NVD entry list...

CVE-2008-5055

CVE-2008-5055 affects ActiveCampaign TrioLive before 1.58.7. The flaw is a SQL injection in department_offline_context.php, exploitable via the department_id parameter to index.php, enabling remote execution of arbitrary SQL commands. The provided documents do not specify exploits, vulnerable ver...