Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters in a kb action to index.php, or (3) an invalid category parameter to modules/KB/pdf.php, which leaks the path in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ActiveCampaign SupportTrio 多个敏感信息泄露漏洞
Vulnerability Description
ActiveCampaign SupportTrio 2.5可以让远程攻击者通过以下途径获取服务器完整路径：无效的 (1) article或(2)用于index.php中的kb操作print参数，(3)一个用于modules/KB/pdf.php中的无效category参数，它会在一条出错短信中暴露路径。
CVSS Information
N/A
Vulnerability Type
N/A