NVD

Id
59992  
Name
CVE-2006-1278  
Description
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5) edit.php and (6) delete.php in control/users/, (7) edit.php, (8) access.php, and (9) in control/folders/, (10) access.php and (11) delete.php in control/groups/, (12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.php. NOTE: it was later reported that vectors 12 and 13 also affect @1 File Store PRO 3.2.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-03-19  
Modified Date
2011-08-08  
Seq
2006-1278  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308739 59992 CVE-2006-1278 http://evuln.com/vulns/95/summary.html  View
308740 59992 CVE-2006-1278 619  View
308741 59992 CVE-2006-1278 1015826  View
308742 59992 CVE-2006-1278 20090825 @1 File Store PRO SQL injection - the old gray dupe  View
308743 59992 CVE-2006-1278 6040  View
308744 59992 CVE-2006-1278 20060324 [eVuln] @1 File Store Multiple XSS and SQL Injection Vulnerabilities  View
308745 59992 CVE-2006-1278 17090  View
308746 59992 CVE-2006-1278 30182  View
308747 59992 CVE-2006-1278 ADV-2006-0943  View
308748 59992 CVE-2006-1278 filestore-multiple-sql-injection(25183)  View
308749 59992 CVE-2006-1278 filestorepro-id-sql-injection(43718)  View
308750 59992 CVE-2006-1278 filestorepro-download-file-include(43724)  View

Related JVN