PT-2006-2009 · Activecampaign · Activecampaign+1

Patriotic Hackers · Publicado 2006-03-03 · Atualizado 2018-10-18 · CVE-2006-0970

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ActiveCampaign products (affected versions not specified)

Description A remote file inclusion issue exists in one or more ActiveCampaign products, potentially including SupportTrio, allowing remote attackers to include and execute arbitrary files via the page parameter in index.php.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0970

Produtos afetados

Activecampaign

Supporttrio

Referências · 5

• http://osvdb.org/3228 · Nota
• http://securityfocus.com/archive/1/426214/100/0/threaded · Nota
• http://securityreason.com/securityalert/505 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24989 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0970 · Nota de Segurança