Achievo

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5866 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS PHP Achievo

NVD

CVSS 2.0

4.3

EPSS

0.4%

CVE-2012-5865 MEDIUM POC This Month

SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Achievo

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

1.0%

CVE-2012-5866

EPSS 0% CVSS 4.3

MEDIUM POC This Month

XSS PHP Achievo

NVD

CVE-2012-5865

EPSS 1% CVSS 6.5

MEDIUM POC This Month

PHP SQLi Achievo

NVD Exploit-DB