CVE-2012-5865

Description

References

• osvdb.org/88184
• packetstormsecurity.com/files/118673/Achievo-1.4.5-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/bid/56858 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/80570
• htbridge.com/advisory/HTB23126 · Exploit

Weitere Schwachstellen in achievo

• CVE-2012-5866MITTEL 4.3Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via …
• CVE-2011-3697MITTEL 5.0Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa…
• CVE-2009-3705HOCH 7.5PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a …
• CVE-2009-2734HOCH 7.5SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute a…
• CVE-2009-2733MITTEL 4.3Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML vi…