CVE-2006-2688

This CVE (CVE-2006-2688) affects Achievo prior to versions 1.1.0 and earlier and 1.2 and earlier. The vulnerability is a SQL injection in the employees node (class.employee.inc) that allows remote attackers to corrupt or exfiltrate data by supplying a crafted atkselector parameter. The NVD entry ...