PT-2006-2009 · Activecampaign · Activecampaign+1

Patriotic Hackers · Published 2006-03-03 · Updated 2018-10-18 · CVE-2006-0970

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ActiveCampaign products (affected versions not specified)

Description A remote file inclusion issue exists in one or more ActiveCampaign products, potentially including SupportTrio, allowing remote attackers to include and execute arbitrary files via the page parameter in index.php.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0970

Affected Products

Activecampaign

Supporttrio

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-0970 · Security Note
• http://osvdb.org/3228 · Note
• http://securityfocus.com/archive/1/426214/100/0/threaded · Note
• http://securityreason.com/securityalert/505 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24989 · Note