CVE-2009-2734

SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL…

published October 16, 2009

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter (aka user_id variable) to dispatch.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01256 · 69.3th percentile
Published
2009-10-16T16:00Z
EPSS history
Timeline
  • 16 OCT 16:00Z
    SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL…
    cvelistv5