CVE-2006-2688

2006-05-3110:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.01

Percentile

84.0%

JSON

SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter.

References

bugzilla.achievo.org/show_bug.cgi?id=624

secunia.com/advisories/20327

www.achievo.org/download/releasenotes/1_2_1

www.osvdb.org/25811

www.securityfocus.com/bid/18171

www.vupen.com/english/advisories/2006/2053

exchange.xforce.ibmcloud.com/vulnerabilities/26755