CVE-2008-6035

概要

参考情報

• packetstormsecurity.org/0809-exploits/achievo-xss.txt · Exploit
• securityfocus.com/bid/31326 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/45344

achievo のその他の脆弱性

• CVE-2012-5866中 4.3Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via …
• CVE-2012-5865中 6.5SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the act…
• CVE-2011-3697中 5.0Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa…
• CVE-2009-3705高 7.5PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a …
• CVE-2009-2734高 7.5SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute a…