Description
index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be processed.
References
- 17732 third-party-advisory
- http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html
- ADV-2005-2587 vdb-entry
- 21098 vdb-entry