Achievo vulnerabilities

Products

• Achievo 12

Newest

• achievo Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers... CVE-2012-5866 4.3 MediumOctober 20, 2014
• achievo SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to... CVE-2012-5865 Public exploit 6.5 MediumOctober 20, 2014
• achievo Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3697 5.0 MediumSeptember 23, 2011
• achievo PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote... CVE-2009-3705 Public exploit 7.5 HighOctober 16, 2009
• achievo SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before... CVE-2009-2734 Public exploit 7.5 HighOctober 16, 2009
• achievo Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote... CVE-2009-2733 Public exploit 4.3 MediumOctober 16, 2009
• achievo Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote... CVE-2008-6035 4.3 MediumFebruary 3, 2009
• achievo Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers... CVE-2008-6034 Public exploit 4.3 MediumFebruary 3, 2009
• achievo Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser... CVE-2008-2742 Public exploit 7.5 HighJune 17, 2008
• achievo PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to... CVE-2007-2736 Public exploit 10.0 HighMay 17, 2007
• achievo SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and... CVE-2006-2688 6.4 MediumMay 31, 2006
• achievo class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote... CVE-2002-1435 Public exploit 7.5 HighApril 11, 2003