What’s Vulnerable › Vulnerabilities

CVE-2006-0970

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-03-03 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.

Affected products

• ActiveCampaign 1-2-All: all versions
• ActiveCampaign General: all versions
• ActiveCampaign Isalient: all versions
• ActiveCampaign Knowledgebuilder: all versions
• ActiveCampaign Supporttrio: all versions
• ActiveCampaign Visualedit: all versions

References

• http://securityreason.com/securityalert/505
• http://www.osvdb.org/3228
• http://www.securityfocus.com/archive/1/426214/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24989
• http://securityreason.com/securityalert/505
• http://www.osvdb.org/3228
• http://www.securityfocus.com/archive/1/426214/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24989

Get alerted when CVE-2006-0970 or the next vulnerability affects your stack