← Database

CVE-2006-2688

MEDIUM CVSS: 6.4 Published: 2006-05-31 Modified: 2026-06-16

Description

SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter.

Affected Platforms

Achievo Achievo

Weakness Type

NVD-CWE-Other

References