Interspire Activekb vulnerabilities
2 known vulnerabilities affecting interspire/activekb.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2008-2338P3HIGHCVSS 7.5PoC≤ 1.52008-05-19
CVE-2008-2338 [HIGH] CWE-264 CVE-2008-2338: Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth c
Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.
nvd
CVE-2007-5425P4MEDIUMCVSS 6.4v1.52007-10-12
CVE-2007-5425 [MEDIUM] CVE-2007-5425: SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131.
nvd