CVE-2011-3697

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/achievo-1.4.5 · Exploit
• openwall.com/lists/oss-security/2011/06/27/6

achievo のその他の脆弱性

• CVE-2012-5866中 4.3Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via …
• CVE-2012-5865中 6.5SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the act…
• CVE-2009-3705高 7.5PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a …
• CVE-2009-2734高 7.5SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute a…
• CVE-2009-2733中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML vi…