📦

activekb

Vendor: interspire

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 0 Remote Access
Total CVEs 7 Total Indexed
Avg. EPSS 3.28% Exploit Prob.
Latest CVE CVE-2009-4957 Jul 22

Security Vulnerability Index

Page 1 / 1
7.5 CVSS
CVE-2009-4957
Exploit Found

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory traversal sequences in the Panel parameter.

EPSS: 2.36%
7.5 CVSS
CVE-2008-2338
Exploit Found

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.

EPSS: 6.36%
6.4 CVSS
CVE-2007-5425

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131.

EPSS: 1.13%