CVE-2008-5055 SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to inde...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activecampaign triolive | <= 1.58.6 | No fix listed |
| activecampaign triolive | = 1.0 | No fix listed |
| activecampaign triolive | = 1.03 | No fix listed |
| activecampaign triolive | = 1.04 | No fix listed |
| activecampaign triolive | = 1.05 | No fix listed |
| activecampaign triolive | = 1.06 | No fix listed |
| activecampaign triolive | = 1.07 | No fix listed |
| activecampaign triolive | = 1.08 | No fix listed |
| activecampaign triolive | = 1.09 | No fix listed |
| activecampaign triolive | = 1.10 | No fix listed |
| activecampaign triolive | = 1.11 | No fix listed |
| activecampaign triolive | = 1.12 | No fix listed |
| activecampaign triolive | = 1.13 | No fix listed |
| activecampaign triolive | = 1.14 | No fix listed |
| activecampaign triolive | = 1.15 | No fix listed |
| activecampaign triolive | = 1.16 | No fix listed |
| activecampaign triolive | = 1.17 | No fix listed |
| activecampaign triolive | = 1.18 | No fix listed |
| activecampaign triolive | = 1.19 | No fix listed |
| activecampaign triolive | = 1.20 | No fix listed |
| activecampaign triolive | = 1.21 | No fix listed |
| activecampaign triolive | = 1.22 | No fix listed |
| activecampaign triolive | = 1.23 | No fix listed |
| activecampaign triolive | = 1.24 | No fix listed |
| activecampaign triolive | = 1.25 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| activecampaign triolive | = 1.26 | No fix listed |
| activecampaign triolive | = 1.27 | No fix listed |
| activecampaign triolive | = 1.28 | No fix listed |
| activecampaign triolive | = 1.29 | No fix listed |
| activecampaign triolive | = 1.30 | No fix listed |
| activecampaign triolive | = 1.31 | No fix listed |
| activecampaign triolive | = 1.32 | No fix listed |
| activecampaign triolive | = 1.33 | No fix listed |
| activecampaign triolive | = 1.34 | No fix listed |
| activecampaign triolive | = 1.35 | No fix listed |
| activecampaign triolive | = 1.36 | No fix listed |
| activecampaign triolive | = 1.37 | No fix listed |
| activecampaign triolive | = 1.39 | No fix listed |
| activecampaign triolive | = 1.40 | No fix listed |
| activecampaign triolive | = 1.41 | No fix listed |
| activecampaign triolive | = 1.42 | No fix listed |
| activecampaign triolive | = 1.50.1 | No fix listed |
| activecampaign triolive | = 1.50.2 | No fix listed |
| activecampaign triolive | = 1.50.3 | No fix listed |
| activecampaign triolive | = 1.50.4 | No fix listed |
| activecampaign triolive | = 1.50.5 | No fix listed |
| activecampaign triolive | = 1.50.6 | No fix listed |
| activecampaign triolive | = 1.55.0 | No fix listed |
| activecampaign triolive | = 1.55.1 | No fix listed |
| activecampaign triolive | = 1.55.2 | No fix listed |
| activecampaign triolive | = 1.56.1 | No fix listed |
| activecampaign triolive | = 1.56.2 | No fix listed |
| activecampaign triolive | = 1.56.3 | No fix listed |
| activecampaign triolive | = 1.56.4 | No fix listed |
| activecampaign triolive | = 1.56.5 | No fix listed |
| activecampaign triolive | = 1.57 | No fix listed |
| activecampaign triolive | = 1.58.0 | No fix listed |
| activecampaign triolive | = 1.58.1 | No fix listed |
| activecampaign triolive | = 1.58.2 | No fix listed |
| activecampaign triolive | = 1.58.3 | No fix listed |
| activecampaign triolive | = 1.58.4 | No fix listed |
| activecampaign triolive | = 1.58.5 | No fix listed |
| activecampaign triolive | = unknown-beta2 | No fix listed |
| activecampaign triolive | = unknown-beta3 | No fix listed |
| activecampaign triolive | = unknown-beta5 | No fix listed |
References
- activecampaign.com patch
- holisticinfosec.org
- 49825 vdb-entry
- 32703 patch third-party-advisory vendor-advisory
- 32268 vdb-entry
- ADV-2008-3125 vdb-entry
- triolive-index-sql-injection(46557) vdb-entry