Description
SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php.
References
- ADV-2008-3125 vdb-entry
- 32268 vdb-entry
- http://activecampaign.com/support/forum/showthread.php?t=4554
- 32703 third-party-advisory
- http://holisticinfosec.org/content/view/93/45/
- 49825 vdb-entry
- triolive-index-sql-injection(46557) vdb-entry