CVE-2006-2688

概要

参考情報

• bugzilla.achievo.org/show_bug.cgi
• secunia.com/advisories/20327 · Patch
• achievo.org/download/releasenotes/1_2_1 · Patch
• osvdb.org/25811
• securityfocus.com/bid/18171
• vupen.com/english/advisories/2006/2053
• exchange.xforce.ibmcloud.com/vulnerabilities/26755

achievo のその他の脆弱性

• CVE-2012-5866中 4.3Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via …
• CVE-2012-5865中 6.5SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the act…
• CVE-2011-3697中 5.0Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa…
• CVE-2009-3705高 7.5PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a …
• CVE-2009-2734高 7.5SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute a…