PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 1-2-all | Activecampaign | * | * |
| General | Activecampaign | * | * |
| Isalient | Activecampaign | * | * |
| Knowledgebuilder | Activecampaign | * | * |
| Supporttrio | Activecampaign | * | * |
| Visualedit | Activecampaign | * | * |
References
- http://securityreason.com/securityalert/505
- http://www.osvdb.org/3228
- http://www.securityfocus.com/archive/1/426214/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24989
- http://securityreason.com/securityalert/505
- http://www.osvdb.org/3228
- http://www.securityfocus.com/archive/1/426214/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24989