CVE-2008-5055: SQL Injection
Published Nov 13, 2008
·Updated
SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php.
Affected Software
65 affected components
ActiveCampaign TrioLive<=1.58.6
ActiveCampaign TrioLive=1.0
ActiveCampaign TrioLive=1.03
ActiveCampaign TrioLive=1.04
ActiveCampaign TrioLive=1.05
ActiveCampaign TrioLive=1.06
ActiveCampaign TrioLive=1.07
ActiveCampaign TrioLive=1.08
ActiveCampaign TrioLive=1.09
ActiveCampaign TrioLive=1.10
ActiveCampaign TrioLive=1.11
ActiveCampaign TrioLive=1.12
ActiveCampaign TrioLive=1.13
ActiveCampaign TrioLive=1.14
ActiveCampaign TrioLive=1.15
ActiveCampaign TrioLive=1.16
ActiveCampaign TrioLive=1.17
ActiveCampaign TrioLive=1.18
ActiveCampaign TrioLive=1.19
ActiveCampaign TrioLive=1.20
ActiveCampaign TrioLive=1.21
ActiveCampaign TrioLive=1.22
ActiveCampaign TrioLive=1.23
ActiveCampaign TrioLive=1.24
ActiveCampaign TrioLive=1.25
ActiveCampaign TrioLive=1.26
ActiveCampaign TrioLive=1.27
ActiveCampaign TrioLive=1.28
ActiveCampaign TrioLive=1.29
ActiveCampaign TrioLive=1.30
ActiveCampaign TrioLive=1.31
ActiveCampaign TrioLive=1.32
ActiveCampaign TrioLive=1.33
ActiveCampaign TrioLive=1.34
ActiveCampaign TrioLive=1.35
ActiveCampaign TrioLive=1.36
ActiveCampaign TrioLive=1.37
ActiveCampaign TrioLive=1.39
ActiveCampaign TrioLive=1.40
ActiveCampaign TrioLive=1.41
ActiveCampaign TrioLive=1.42
ActiveCampaign TrioLive=1.50.1
ActiveCampaign TrioLive=1.50.2
ActiveCampaign TrioLive=1.50.3
ActiveCampaign TrioLive=1.50.4
ActiveCampaign TrioLive=1.50.5
ActiveCampaign TrioLive=1.50.6
ActiveCampaign TrioLive=1.55.0
ActiveCampaign TrioLive=1.55.1
ActiveCampaign TrioLive=1.55.2
ActiveCampaign TrioLive=1.56.1
ActiveCampaign TrioLive=1.56.2
ActiveCampaign TrioLive=1.56.3
ActiveCampaign TrioLive=1.56.4
ActiveCampaign TrioLive=1.56.5
ActiveCampaign TrioLive=1.57
ActiveCampaign TrioLive=1.58.0
ActiveCampaign TrioLive=1.58.1
ActiveCampaign TrioLive=1.58.2
ActiveCampaign TrioLive=1.58.3
ActiveCampaign TrioLive=1.58.4
ActiveCampaign TrioLive=1.58.5
ActiveCampaign TrioLive=unknown-beta2
ActiveCampaign TrioLive=unknown-beta3
ActiveCampaign TrioLive=unknown-beta5
Remediation
Patch Available
Event History
Nov 13, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5055?
CVE-2008-5055 is classified as a critical vulnerability due to the potential for remote SQL command execution.
2
How do I fix CVE-2008-5055?
To fix CVE-2008-5055, upgrade to ActiveCampaign TrioLive version 1.58.7 or later.
3
What types of attacks can exploit CVE-2008-5055?
CVE-2008-5055 can be exploited to carry out SQL injection attacks, potentially allowing unauthorized access to the database.
4
Which versions of ActiveCampaign TrioLive are affected by CVE-2008-5055?
CVE-2008-5055 affects multiple versions of ActiveCampaign TrioLive prior to 1.58.7.
5
What impact does CVE-2008-5055 have on user data?
Exploitation of CVE-2008-5055 can lead to unauthorized data manipulation and access, compromising user data confidentiality and integrity.