CVE-2003-1131: High severity ActiveCampaign KnowledgeBuilder vulnerability

Published Dec 31, 2003

Updated

PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code.

Affected Software

4 affected components

ActiveCampaign KnowledgeBuilder=2.0.1

ActiveCampaign KnowledgeBuilder=2.1.4

ActiveCampaign KnowledgeBuilder=2.1.0

ActiveCampaign KnowledgeBuilder=3.0.1

Remediation

Patch Available

http://www.securityfocus.com/bid/9292

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Mar 20, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1131?

CVE-2003-1131 is considered a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2003-1131?

To fix CVE-2003-1131, update the KnowledgeBuilder application to the latest version that addresses this vulnerability.

Which versions of KnowledgeBuilder are affected by CVE-2003-1131?

CVE-2003-1131 affects KnowledgeBuilder versions 2.0.1, 2.1.0, 2.1.4, and 3.0.1.

What type of vulnerability is CVE-2003-1131?

CVE-2003-1131 is a remote file inclusion vulnerability that allows attackers to execute arbitrary PHP code.

Can CVE-2003-1131 be exploited remotely?

Yes, CVE-2003-1131 can be exploited remotely, allowing attackers to compromise affected systems from afar.