İçeriğe atla
Noroxi

ActiveCampaign kayıtları

activecampaign üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%11,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2024-32430
    39İzleyin

    WordPress ActiveCampaign plugin <= 8.1.14 - Server Side Request Forgery (SSRF) vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    activecampaign · activecampaign15 Nis 2024

  • CVE-2005-3829
    32İzleyin

    index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an i

    YüksekCVSS 7,8İstismar yokEPSS %2

    activecampaign · knowledgebuilder26 Kas 2005

  • CVE-2003-1131
    31İzleyin

    PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    activecampaign · knowledgebuilder31 Ara 2003

  • CVE-2006-5919
    31İzleyin

    PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attac

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    activecampaign · knowledgebuilder15 Kas 2006

  • CVE-2006-0970
    30İzleyin

    PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers t

    YüksekCVSS 7,5İstismar yokEPSS %2

    activecampaign · 1-2-all3 Mar 2006

  • CVE-2008-5055
    30İzleyin

    SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute ar

    YüksekCVSS 7,5İstismar yokEPSS %1

    activecampaign · triolive13 Kas 2008

  • CVE-2005-3679
    30İzleyin

    SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL co

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    activecampaign · 1-2-all broadcast email18 Kas 2005

  • CVE-2005-3828
    30İzleyin

    SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL

    YüksekCVSS 7,5İstismar yokEPSS %1

    activecampaign · knowledgebuilder26 Kas 2005

  • CVE-2005-4634
    30İzleyin

    SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the

    YüksekCVSS 7,5İstismar yokEPSS %1

    activecampaign · supporttrio31 Ara 2005

  • CVE-2007-2630
    26İzleyin

    Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampai

    OrtaCVSS 6,5İstismar yokEPSS %1

    activecampaign · 1-2-all broadcast email11 May 2007

  • CVE-2023-0233
    21İzleyin

    ActiveCampaign < 8.1.12 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    activecampaign · activecampaign15 May 2023

  • CVE-2005-3830
    20İzleyin

    index.php in ActiveCampaign SupportTrio 1.4 and earlier allows remote attackers to read or include arbitrary files via the page parameter, p

    OrtaCVSS 5,0İstismar yokEPSS %2

    activecampaign · supporttrio26 Kas 2005

  • CVE-2006-1488
    20İzleyin

    ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters

    OrtaCVSS 5,0İstismar yokEPSS %2

    activecampaign · supporttrio28 Mar 2006

  • CVE-2006-1487
    18İzleyin

    Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    activecampaign · supporttrio28 Mar 2006

  • CVE-2008-5056
    17İzleyin

    Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers

    OrtaCVSS 4,3İstismar yokEPSS %1

    activecampaign · triolive13 Kas 2008

  • CVE-2022-3923
    17İzleyin

    ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup

    OrtaCVSS 4,3İstismar yokEPSS %0

    activecampaign · activecampaign for woocommerce9 Oca 2023

  • CVE-2021-24133
    17İzleyin

    ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings

    OrtaCVSS 4,3İstismar yokEPSS %0

    activecampaign · activecampaign18 Mar 2021