CVE-2005-3679: Activecampaign 1-2-All Broadcast Email

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel.

Affected products

• Activecampaign 1-2-All Broadcast Email: version 4.07 only

Published 2005-11-18. Last modified 2026-06-16.