CVEvulnerability

CVE-2008-5055

7.5 HIGH Published 2008-11-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-89

Description

SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php.

Affected configurations

• activecampaign triolive (<= 1.58.6) • activecampaign triolive 1.0 • activecampaign triolive 1.03 • activecampaign triolive 1.04 • activecampaign triolive 1.05 • activecampaign triolive 1.06 • activecampaign triolive 1.07 • activecampaign triolive 1.08 • activecampaign triolive 1.09 • activecampaign triolive 1.10 • activecampaign triolive 1.11 • activecampaign triolive 1.12 • activecampaign triolive 1.13 • activecampaign triolive 1.14 • activecampaign triolive 1.15 • activecampaign triolive 1.16 • activecampaign triolive 1.17 • activecampaign triolive 1.18 • activecampaign triolive 1.19 • activecampaign triolive 1.20 • activecampaign triolive 1.21 • activecampaign triolive 1.22 • activecampaign triolive 1.23 • activecampaign triolive 1.24 • activecampaign triolive 1.25 • activecampaign triolive 1.26 • activecampaign triolive 1.27 • activecampaign triolive 1.28 • activecampaign triolive 1.29 • activecampaign triolive 1.30 • activecampaign triolive 1.31 • activecampaign triolive 1.32 • activecampaign triolive 1.33 • activecampaign triolive 1.34 • activecampaign triolive 1.35 • activecampaign triolive 1.36 • activecampaign triolive 1.37 • activecampaign triolive 1.39 • activecampaign triolive 1.40 • activecampaign triolive 1.41 • activecampaign triolive 1.42 • activecampaign triolive 1.50.1 • activecampaign triolive 1.50.2 • activecampaign triolive 1.50.3 • activecampaign triolive 1.50.4 • activecampaign triolive 1.50.5 • activecampaign triolive 1.50.6 • activecampaign triolive 1.55.0 • activecampaign triolive 1.55.1 • activecampaign triolive 1.55.2 • activecampaign triolive 1.56.1 • activecampaign triolive 1.56.2 • activecampaign triolive 1.56.3 • activecampaign triolive 1.56.4 • activecampaign triolive 1.56.5 • activecampaign triolive 1.57 • activecampaign triolive 1.58.0 • activecampaign triolive 1.58.1 • activecampaign triolive 1.58.2 • activecampaign triolive 1.58.3 … and 3 more

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References