EUVD-2011-3656

Malware in sbrugna...

EUVD-2007-2728

Malware in sbrugna...

EUVD-2002-1418

Malware in sbrugna...

EUVD-2008-6005

Malware in sbrugna...

EUVD-2012-5743

Malware in sbrugna...

EUVD-2012-5744

Malware in sbrugna...

EUVD-2009-2725

Malware in sbrugna...

EUVD-2009-2724

Malware in sbrugna...

EUVD-2006-2687

Malware in sbrugna...

EUVD-2008-6004

Malware in sbrugna...

EUVD-2008-2735

Malware in sbrugna...

EUVD-2009-3678

Malware in sbrugna...

CVE-2011-3697

Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/graph/jpgraph/jpgraphradar.php and certain other files...

CVE-2009-3705

PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the configatkroot parameter...

Achievo cross-site scripting vulnerability (CNVD-2016-03590)

Achievo is a WEB-based project management tool for business environments. A cross-site scripting vulnerability exists in Achievo, where an attacker can execute arbitrary HTML and script code in a user's browser in the context of an affected website due to input filtering errors in parameters...

Achievo Detection

Detection of Achievo application. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Achievo XSS Vulnerability (Mar 2016)

Achievo is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:achievo:achievo"; i...

Achievo 1.4.5 Cross Site Scripting

Exploit Title: Achievo Cross Site Scripting vulnerability Vendor: www.achievo.org Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=98 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-2016 Cross Site scripting link:...

CVE-2012-5865

SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action...

CVE-2012-5866

Cross-site scripting XSS vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter...