VendorsActiveCampaignsupporttrio2.50.2
Vulnerabilities

ActiveCampaign Supporttrio 2.50.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2006-1488
ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters in a kb action to index.php, or (3) an invalid category parameter to modules/KB/pdf.php, which leaks the path in an error message.
Published 2006-03-29 · Modified
5.0EPSS 0.015
CVE-2006-1487
Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module.
Published 2006-03-29 · Modified
4.31 PoCEPSS 0.019