Unrated severityNVD Advisory· Published Mar 3, 2006· Updated Apr 16, 2026

CVE-2006-0970

Description

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.

Affected products

Activecampaign/1 2 All
cpe:2.3:a:activecampaign:1-2-all:*:*:*:*:*:*:*:*
Activecampaign/General
cpe:2.3:a:activecampaign:general:*:*:*:*:*:*:*:*
Activecampaign/Isalient
cpe:2.3:a:activecampaign:isalient:*:*:*:*:*:*:*:*
Activecampaign/Knowledgebuilder
cpe:2.3:a:activecampaign:knowledgebuilder:*:*:*:*:*:*:*:*
Activecampaign/Supporttrio
cpe:2.3:a:activecampaign:supporttrio:*:*:*:*:*:*:*:*
Activecampaign/Visualedit
cpe:2.3:a:activecampaign:visualedit:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securityreason.com/securityalert/505nvd
www.osvdb.org/3228nvd
www.securityfocus.com/archive/1/426214/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/24989nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000