CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter. | 10 |
|||
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. | 7.2 |