Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Activecampaign Subscribe
Filtered by product 1-2-all Broadcast Email
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-2630 1 Activecampaign 1 1-2-all Broadcast Email 2018-10-16 6.5 MEDIUM N/A
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors. NOTE: this issue is reachable through filemanager/browser/default/browser.html.
CVE-2005-3679 1 Activecampaign 1 1-2-all Broadcast Email 2016-10-17 7.5 HIGH N/A
SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel.