CVE-2006-2688: Undefined Security Weakness

SQL injection vulnerability in the employees node class.employee.inc in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter...