CVE-2006-0970 - PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter

Published Mar 3, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.54%

Description

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://securityreason.com/securityalert/505
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/3228
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/426214/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/24989
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/505		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/3228		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/426214/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/24989		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 3, 2006

Updated Aug 7, 2024

Reserved Mar 3, 2006

Link CVE-2006-0970

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0970

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0970