Skip to content
Noroxi

ActiveCampaign records

17 published records for vendor activecampaign.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
11.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2024-32430
    39Monitor

    WordPress ActiveCampaign plugin <= 8.1.14 - Server Side Request Forgery (SSRF) vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    activecampaign · activecampaignApr 15, 2024

  • CVE-2005-3829
    32Monitor

    index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an i

    HighCVSS 7.8No exploitEPSS 2%

    activecampaign · knowledgebuilderNov 26, 2005

  • CVE-2003-1131
    31Monitor

    PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute a

    HighCVSS 7.5Proof of conceptEPSS 3%

    activecampaign · knowledgebuilderDec 31, 2003

  • CVE-2006-5919
    31Monitor

    PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attac

    HighCVSS 7.5Proof of conceptEPSS 3%

    activecampaign · knowledgebuilderNov 15, 2006

  • CVE-2006-0970
    30Monitor

    PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers t

    HighCVSS 7.5No exploitEPSS 2%

    activecampaign · 1-2-allMar 3, 2006

  • CVE-2008-5055
    30Monitor

    SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute ar

    HighCVSS 7.5No exploitEPSS 1%

    activecampaign · trioliveNov 13, 2008

  • CVE-2005-3679
    30Monitor

    SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL co

    HighCVSS 7.5Proof of conceptEPSS 1%

    activecampaign · 1-2-all broadcast emailNov 18, 2005

  • CVE-2005-3828
    30Monitor

    SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL

    HighCVSS 7.5No exploitEPSS 1%

    activecampaign · knowledgebuilderNov 26, 2005

  • CVE-2005-4634
    30Monitor

    SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the

    HighCVSS 7.5No exploitEPSS 1%

    activecampaign · supporttrioDec 31, 2005

  • CVE-2007-2630
    26Monitor

    Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampai

    MediumCVSS 6.5No exploitEPSS 1%

    activecampaign · 1-2-all broadcast emailMay 11, 2007

  • CVE-2023-0233
    21Monitor

    ActiveCampaign < 8.1.12 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    activecampaign · activecampaignMay 15, 2023

  • CVE-2005-3830
    20Monitor

    index.php in ActiveCampaign SupportTrio 1.4 and earlier allows remote attackers to read or include arbitrary files via the page parameter, p

    MediumCVSS 5.0No exploitEPSS 2%

    activecampaign · supporttrioNov 26, 2005

  • CVE-2006-1488
    20Monitor

    ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters

    MediumCVSS 5.0No exploitEPSS 2%

    activecampaign · supporttrioMar 28, 2006

  • CVE-2006-1487
    18Monitor

    Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 2%

    activecampaign · supporttrioMar 28, 2006

  • CVE-2008-5056
    17Monitor

    Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers

    MediumCVSS 4.3No exploitEPSS 1%

    activecampaign · trioliveNov 13, 2008

  • CVE-2022-3923
    17Monitor

    ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup

    MediumCVSS 4.3No exploitEPSS 0%

    activecampaign · activecampaign for woocommerceJan 9, 2023

  • CVE-2021-24133
    17Monitor

    ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings

    MediumCVSS 4.3No exploitEPSS 0%

    activecampaign · activecampaignMar 18, 2021