Lucene search
+L

147 matches found

0day.today
0day.today
added 2009/09/22 12:0 a.m.27 views

Achievo 1.3.4 Remote File Inclusion

Exploit for unknown platform in category web applications =================================== Achievo 1.3.4 Remote File Inclusion =================================== Achievo 1.3.4debugger.php Remote File Include Vulnerability Author : M3NW5 Location : INDONESIA Achievo 1.3.4 Information Vendor :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2009/09/22 12:0 a.m.27 views

Achievo 1.3.4 Remote File Inclusion

No description provided by source. Achievo 1.3.4debugger.php Remote File Include Vulnerability Author : M3NW5 Homepage : http://www.indonesiancoder.com contach : [email protected] Location : INDONESIA Achievo 1.3.4 Information Vendor : http://www.achievo.org/ Scripts :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/09/22 12:0 a.m.24 views

Achievo 1.3.4 - Remote File Inclusion

Achievo 1.3.4 - Remote File Inclusion Achievo 1.3.4debugger.php Remote File Include Vulnerability Author : M3NW5 Homepage : http://www.indonesiancoder.com contach : [email protected] Location : INDONESIA Achievo 1.3.4 Information Vendor : http://www.achievo.org/ Scripts :...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/09/22 12:0 a.m.35 views

Achievo 1.3.4 - Remote File Inclusion

Achievo 1.3.4debugger.php Remote File Include Vulnerability Author : M3NW5 Homepage : http://www.indonesiancoder.com contach : [email protected] Location : INDONESIA Achievo 1.3.4 Information Vendor : http://www.achievo.org/ Scripts : http://www.achievo.org/download/ File : debugger.php...

7.5CVSS7.4AI score0.09813EPSS
SaveExploits2
securityvulns
securityvulns
added 2009/05/29 12:0 a.m.38 views

[InterN0T] Achievo 1.3.4 - XSS Vulnerability

Achievo - Cross Site Scripting Vulnerability Version Affected: 1.3.4 August 12, 2008 newest Info: Achievo is a flexible web-based resource management tool for business environments. Achievo's resource management capabilities will enable organisations to support their business processes in a simpl...

6.4AI score
SaveExploits0
exploitpack
exploitpack
added 2009/05/28 12:0 a.m.14 views

Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities

Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35140/info Achievo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/05/28 12:0 a.m.21 views

Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35140/info Achievo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

7AI score
SaveExploits0
NVD
NVD
added 2009/02/03 11:30 a.m.10 views

CVE-2008-6035

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter...

4.3CVSS5.7AI score0.01068EPSS
SaveExploits1References3
Prion
Prion
added 2009/02/03 11:30 a.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the atkaction parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01446EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2009/02/03 11:30 a.m.11 views

CVE-2008-6034

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the atkaction parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01446EPSS
SaveExploits1References3
Prion
Prion
added 2009/02/03 11:30 a.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter...

4.3CVSS6.1AI score0.01068EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2009/02/03 11:0 a.m.49 views

CVE-2008-6035

CVE-2008-6035 is an XSS vulnerability in Achievo 1.3.2-STABLE, exposed via the atknodetype parameter in dispatch.php. The issue allows remote attackers to inject arbitrary web script or HTML. The available sources document the affected product and the vulnerability class but do not provide detail...

4.3CVSS5.9AI score0.01068EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2009/02/03 11:0 a.m.18 views

CVE-2008-6034

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the atkaction parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.01446EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2009/02/03 11:0 a.m.21 views

CVE-2008-6035

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter...

5.7AI score0.01068EPSS
SaveExploits1References3
CVE
CVE
added 2009/02/03 11:0 a.m.46 views

CVE-2008-6034

CVE-2008-6034 describes a cross-site scripting (XSS) vulnerability in the Achievo 1.3.2 web application, specifically in the file dispatch.php . The flaw is exploitable via the atkaction parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected documents do not pr...

4.3CVSS5.7AI score0.01446EPSS
SaveExploits1References3Affected Software1
exploitpack
exploitpack
added 2008/09/20 12:0 a.m.21 views

Achievo 1.3.2 - atknodetype Cross-Site Scripting

Achievo 1.3.2 - atknodetype Cross-Site Scripting source: https://www.securityfocus.com/bid/31326/info Achievo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/09/20 12:0 a.m.18 views

achievo-xss.txt

============================================================ Achievo-1.3.2-STABLE Cross Site Scripting XSS ============================================================ AUTHOR : ROHIT BANSAL DATE : 19th Sept,2008 Mail: RoHiTiSbAcK at GmAiL.com...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/09/20 12:0 a.m.25 views

Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31326/info Achievo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

4.3CVSS7.4AI score0.01446EPSS
SaveExploits1
NVD
NVD
added 2008/06/17 3:41 p.m.11 views

CVE-2008-2742

Unrestricted file upload in the mcpuk file editor atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php in Achievo 1.2.0 through 1.3.2 allows remote attackers to execute arbitrary code by uploading a file with .php followed by a safe extension, then accessing it via a dire...

7.5CVSS7.7AI score0.04714EPSS
SaveExploits1References5
Prion
Prion
added 2008/06/17 3:41 p.m.16 views

Unrestricted file upload

Unrestricted file upload in the mcpuk file editor atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php in Achievo 1.2.0 through 1.3.2 allows remote attackers to execute arbitrary code by uploading a file with .php followed by a safe extension, then accessing it via a dire...

7.5CVSS8.2AI score0.04714EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder