CVE-2008-2742

Unrestricted file upload in the mcpuk file editor atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php in Achievo 1.2.0 through 1.3.2 allows remote attackers to execute arbitrary code by uploading a file with .php followed by a safe extension, then accessing it via a dire...

CVE-2008-2742

The CVE-2008-2742 entry concerns Achievo versions 1.2.0 through 1.3.2, where an unrestricted file upload vulnerability exists in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php). The underlying issue allows remote code execution by uploading a ...

achievo-upload.txt

array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file extensions isn't properly checked / errorreporting0...

Achievo <= 1.3.2 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- Achievo = 1.3.2 fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Achievo <= 1.3.2 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ========================================================== Achievo array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to...

Achievo 1.3.2 - 'FCKeditor' Arbitrary File Upload

array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file extensions isn't properly checked / errorreporting0...

Achievo 1.3.2 - FCKeditor Arbitrary File Upload

Achievo 1.3.2 - FCKeditor Arbitrary File Upload array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file...

CVE-2007-2736

PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the configatkroot parameter...

CVE-2007-2736

PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the configatkroot parameter...

CVE-2007-2736

Achievo 1.1.0 is affected by a PHP remote file inclusion vulnerability in index.php via the config_atkroot parameter, allowing an attacker to execute arbitrary PHP code. The issue is documented in CVE-2007-2736 and is classified with high impact. The connected sources confirm the vulnerability de...

achievo-rfi.txt

Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit http://site.com/path/index.php?configatkroot=SH...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

No description provided by source. Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================== Achievo 1.1.0 atk.inc configatkroot Remote File Inclusion Vulnerability ========================================================================== Achievo...

Achievo 1.1.0 - config_atkroot Remote File Inclusion

Achievo 1.1.0 - configatkroot Remote File Inclusion Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc";...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

No description provided by source. Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Achievo 1.1.0 - 'config_atkroot' Remote File Inclusion

Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Sql injection

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2006-2688

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2006-2688

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2006-2688

This CVE (CVE-2006-2688) affects Achievo prior to versions 1.1.0 and earlier and 1.2 and earlier. The vulnerability is a SQL injection in the employees node (class.employee.inc) that allows remote attackers to corrupt or exfiltrate data by supplying a crafted atkselector parameter. The NVD entry ...