CVE

Id
17382  
CVE No.
CVE-2006-1278  
Status
Candidate  
Description
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5) edit.php and (6) delete.php in control/users/, (7) edit.php, (8) access.php, and (9) in control/folders/, (10) access.php and (11) delete.php in control/groups/, (12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.php. NOTE: it was later reported that vectors 12 and 13 also affect @1 File Store PRO 3.2.  
Phase
Assigned (20060318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143612 17382 CVE-2006-1278 BUGTRAQ:20060324 [eVuln] @1 File Store Multiple XSS and SQL Injection Vulnerabilities  View
143613 17382 CVE-2006-1278 URL:http://www.securityfocus.com/archive/1/archive/1/428659/100/0/threaded  View
143614 17382 CVE-2006-1278 MILW0RM:6040  View
143615 17382 CVE-2006-1278 URL:http://www.milw0rm.com/exploits/6040  View
143616 17382 CVE-2006-1278 MISC:http://evuln.com/vulns/95/summary.html  View
143617 17382 CVE-2006-1278 VIM:20090825 @1 File Store PRO SQL injection - the old gray dupe  View
143618 17382 CVE-2006-1278 URL:http://www.attrition.org/pipermail/vim/2009-August/002246.html  View
143619 17382 CVE-2006-1278 BID:17090  View
143620 17382 CVE-2006-1278 URL:http://www.securityfocus.com/bid/17090  View
143621 17382 CVE-2006-1278 BID:30182  View
143622 17382 CVE-2006-1278 URL:http://www.securityfocus.com/bid/30182  View
143623 17382 CVE-2006-1278 OSVDB:47017  View
143624 17382 CVE-2006-1278 URL:http://osvdb.org/47017  View
143625 17382 CVE-2006-1278 OSVDB:47018  View
143626 17382 CVE-2006-1278 URL:http://osvdb.org/47018  View
143627 17382 CVE-2006-1278 SECUNIA:31063  View
143628 17382 CVE-2006-1278 URL:http://secunia.com/advisories/31063  View
143629 17382 CVE-2006-1278 VUPEN:ADV-2006-0943  View
143630 17382 CVE-2006-1278 URL:http://www.vupen.com/english/advisories/2006/0943  View
143631 17382 CVE-2006-1278 OSVDB:23851  View
143632 17382 CVE-2006-1278 URL:http://www.osvdb.org/23851  View
143633 17382 CVE-2006-1278 OSVDB:23852  View
143634 17382 CVE-2006-1278 URL:http://www.osvdb.org/23852  View
143635 17382 CVE-2006-1278 OSVDB:23853  View
143636 17382 CVE-2006-1278 URL:http://www.osvdb.org/23853  View
143637 17382 CVE-2006-1278 OSVDB:23854  View
143638 17382 CVE-2006-1278 URL:http://www.osvdb.org/23854  View
143639 17382 CVE-2006-1278 OSVDB:23855  View
143640 17382 CVE-2006-1278 URL:http://www.osvdb.org/23855  View
143641 17382 CVE-2006-1278 OSVDB:23856  View
143642 17382 CVE-2006-1278 URL:http://www.osvdb.org/23856  View
143643 17382 CVE-2006-1278 OSVDB:23857  View
143644 17382 CVE-2006-1278 URL:http://www.osvdb.org/23857  View
143645 17382 CVE-2006-1278 OSVDB:23858  View
143646 17382 CVE-2006-1278 URL:http://www.osvdb.org/23858  View
143647 17382 CVE-2006-1278 OSVDB:23859  View
143648 17382 CVE-2006-1278 URL:http://www.osvdb.org/23859  View
143649 17382 CVE-2006-1278 OSVDB:23860  View
143650 17382 CVE-2006-1278 URL:http://www.osvdb.org/23860  View
143651 17382 CVE-2006-1278 OSVDB:23861  View
143652 17382 CVE-2006-1278 URL:http://www.osvdb.org/23861  View
143653 17382 CVE-2006-1278 OSVDB:23862  View
143654 17382 CVE-2006-1278 URL:http://www.osvdb.org/23862  View
143655 17382 CVE-2006-1278 OSVDB:23863  View
143656 17382 CVE-2006-1278 URL:http://www.osvdb.org/23863  View
143657 17382 CVE-2006-1278 OSVDB:23864  View
143658 17382 CVE-2006-1278 URL:http://www.osvdb.org/23864  View
143659 17382 CVE-2006-1278 OSVDB:24106  View
143660 17382 CVE-2006-1278 URL:http://www.osvdb.org/24106  View
143661 17382 CVE-2006-1278 SECTRACK:1015826  View
143662 17382 CVE-2006-1278 URL:http://securitytracker.com/id?1015826  View
143663 17382 CVE-2006-1278 SECUNIA:19224  View
143664 17382 CVE-2006-1278 URL:http://secunia.com/advisories/19224  View
143665 17382 CVE-2006-1278 SREASON:619  View
143666 17382 CVE-2006-1278 URL:http://securityreason.com/securityalert/619  View
143667 17382 CVE-2006-1278 XF:filestore-multiple-sql-injection(25183)  View
143668 17382 CVE-2006-1278 URL:http://xforce.iss.net/xforce/xfdb/25183  View
143669 17382 CVE-2006-1278 XF:filestorepro-download-file-include(43724)  View
143670 17382 CVE-2006-1278 URL:http://xforce.iss.net/xforce/xfdb/43724  View
143671 17382 CVE-2006-1278 XF:filestorepro-id-sql-injection(43718)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61653 JVNDB-2006-003919 CGI::Session における権限情報を取得される脆弱性 CGI::Session には、権限情報を取得される脆弱性が存在します。 CVE-2006-1280 17382 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003919.html  View