CVE-2007-2736: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the configatkroot parameter...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

No description provided by source. Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Achievo 1.1.0 - config_atkroot Remote File Inclusion

Achievo 1.1.0 - configatkroot Remote File Inclusion Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc";...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================== Achievo 1.1.0 atk.inc configatkroot Remote File Inclusion Vulnerability ========================================================================== Achievo...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

No description provided by source. Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Achievo 1.1.0 - 'config_atkroot' Remote File Inclusion

Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Sql injection

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2006-2688

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2006-2688

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2006-2688

This CVE (CVE-2006-2688) affects Achievo prior to versions 1.1.0 and earlier and 1.2 and earlier. The vulnerability is a SQL injection in the employees node (class.employee.inc) that allows remote attackers to corrupt or exfiltrate data by supplying a crafted atkselector parameter. The NVD entry ...

CVE-2006-2688: Undefined Security Weakness

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...

CVE-2002-1435

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allowurlfopen' setting is enabled via a URL in the configatkroot parameter that points to the code...

CVE-2002-1435

CVE-2002-1435 affects Achievo 0.7.0 through 0.9.1, excluding 0.8.2. The issue allows remote PHP code execution when allow_url_fopen is enabled and a URL in the config_atkroot parameter points to attacker-controlled code. This is a remote file inclusion vulnerability; affected component is a PHP s...

CVE-2002-1435: Undefined Security Weakness

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allowurlfopen' setting is enabled via a URL in the configatkroot parameter that points to the code...

CVE-2002-1435

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allowurlfopen' setting is enabled via a URL in the configatkroot parameter that points to the code...

Arbitrary code execution problem in Achievo

Arbitrary code execution problem in Achievo 0. Table of Contents 1. Summary / Impact analysis 2. Affected versions 3. Workaround / Solution 4. Proof of Vulnerability 5. References 1. Summary / Impact analysis Achievo is a web-based project management tool for business-environments. It has been...

Achievo class.atkdateattribute.js.php config_atkroot Parameter Remote File Inclusion

The remote host is running Achievo, a web-based resource management tool written in PHP. The version of Achievo on the remote host includes a PHP script which is reported to be affected by a remote file include vulnerability. An attacker may use this flaw to inject arbitrary code in the remote ho...

Achievo 0.7/0.8/0.9 - Remote File Inclusion / Command Execution

source: https://www.securityfocus.com/bid/5552/info Achievo includes a PHP script which is used to generate JavaScript class.atkdateattribute.js.php. This script employs a number of PHP includeonce statements to call code contained in function libraries and grab configuration information. Attacke...

Achievo 0.70.80.9 - Remote File Inclusion Command Execution

Achievo 0.70.80.9 - Remote File Inclusion Command Execution source: https://www.securityfocus.com/bid/5552/info Achievo includes a PHP script which is used to generate JavaScript class.atkdateattribute.js.php. This script employs a number of PHP includeonce statements to call code contained in...