CVE-2012-5866

概要

参考情報

• packetstormsecurity.com/files/118673/Achievo-1.4.5-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/bid/56858 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/80571
• htbridge.com/advisory/HTB23126 · Exploit

achievo のその他の脆弱性

• CVE-2012-5865中 6.5SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the act…
• CVE-2011-3697中 5.0Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa…
• CVE-2009-3705高 7.5PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a …
• CVE-2009-2734高 7.5SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute a…
• CVE-2009-2733中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML vi…