📦

activekb_nx

Vendor: interspire

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 0 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 1.48% Exploit Prob.
Latest CVE CVE-2007-5426 Oct 12

Security Vulnerability Index

Page 1 / 1
4.3 CVSS
CVE-2007-5426
Exploit Found

Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.

EPSS: 1.79%
7.5 CVSS
CVE-2007-5131
Exploit Found

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected.

EPSS: 1.17%