EUVD-2007-2728

Malware in sbrugna...

EUVD-2008-2735

Malware in sbrugna...

EUVD-2012-5744

Malware in sbrugna...

EUVD-2011-3656

Malware in sbrugna...

EUVD-2009-3678

Malware in sbrugna...

EUVD-2009-2725

Malware in sbrugna...

EUVD-2012-5743

Malware in sbrugna...

EUVD-2008-6005

Malware in sbrugna...

EUVD-2006-2687

Malware in sbrugna...

EUVD-2008-6004

Malware in sbrugna...

EUVD-2002-1418

Malware in sbrugna...

EUVD-2009-2724

Malware in sbrugna...

CVE-2011-3697

Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/graph/jpgraph/jpgraphradar.php and certain other files...

CVE-2009-3705

PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the configatkroot parameter...

Achievo cross-site scripting vulnerability (CNVD-2016-03590)

Achievo is a WEB-based project management tool for business environments. A cross-site scripting vulnerability exists in Achievo, where an attacker can execute arbitrary HTML and script code in a user's browser in the context of an affected website due to input filtering errors in parameters...

Achievo XSS Vulnerability (Mar 2016)

Achievo is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:achievo:achievo"; i...

Achievo Detection

Detection of Achievo application. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Achievo 1.4.5 Cross Site Scripting

Exploit Title: Achievo Cross Site Scripting vulnerability Vendor: www.achievo.org Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=98 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-2016 Cross Site scripting link:...

CVE-2012-5865

SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action...

CVE-2012-5866

Cross-site scripting XSS vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter...