CVE-2003-1131 PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to referen...
HighCVSS 7.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activecampaign knowledgebuilder | = 2.0.1 | No fix listed |
| activecampaign knowledgebuilder | = 2.1.0 | No fix listed |
| activecampaign knowledgebuilder | = 2.1.4 | No fix listed |
| activecampaign knowledgebuilder | = 3.0.1 | No fix listed |
References
- 20050312 KnowledgeBase mailing-list
- 10504 third-party-advisory vendor-advisory
- 3228 vdb-entry
- 20031224 Remote Code Execution in Knowledge Builder. exploit mailing-list
- 9292 exploit patch vdb-entry
- knowledgebuilder-indexphp-file-include(14078) vdb-entry