CVE:CVE-2006-2688
CNNVD:CNNVD-200605-556
Achievo 1.1.0中的employees节点(class.employee.inc)存在SQL注入漏洞。远程攻击者可以借助atkselector 参数执行任意SQL指令。
solution:Upgrade achievo achievo to a higher version than 1.1.0,1.2.0,and avoid the version 1.1.0,1.2.0