@1 File Store
Approved changes feed: RSS · Atom
cpe:2.3:a:upoint:\@1_file_store:2006.03.07:*:*:*:*:*:*:*
part: a version: 2006.03.07 update: *
| Vendor | Upoint (8fcf5884-a965-56c6-9021-72b852097640) |
|---|---|
| Product | @1 File Store (2a2321ea-d188-5ea2-8a4e-73f3882624b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-1278 |
vulnerable | 2026-06-08 04:48:56.779746 |
Details available
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5) edit.php and (6) delete.php in control/users/, (7) edit.php, (8) access.php, and (9) in control/folders/, (10) access.php and (11) delete.php in control/groups/, (12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.php. NOTE: it was later reported that vectors 12 and 13 also affect @1 File Store PRO 3.2.
Published: 2006-03-19T11:00:00.000Z
Updated: 2024-08-07T17:03:28.981Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.