CVE-2005-3679 SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in t...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activecampaign 1-2-all broadcast email | = 4.07 | No fix listed |
References
- 20051111 1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin mailing-list
- 20949 vdb-entry
- 15400 exploit vdb-entry