CVE-2006-1278
published 2006-03-19CVE-2006-1278: SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and…
PriorityP338medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
3.65%
88.2th percentile
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5) edit.php and (6) delete.php in control/users/, (7) edit.php, (8) access.php, and (9) in control/folders/, (10) access.php and (11) delete.php in control/groups/, (12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.php. NOTE: it was later reported that vectors 12 and 13 also affect @1 File Store PRO 3.2.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| upoint | 1_file_store | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
File Store PRO 3.2 - Multiple Blind SQL Injections
exploitdb·2008-07-11
CVE-2006-1278 File Store PRO 3.2 - Multiple Blind SQL Injections
File Store PRO 3.2 - Multiple Blind SQL Injections
---
| File Store PRO 3.2 Blind SQL Injection |
|________________________________________|
Download from: http://upoint.info/cgi/demo/fs/filestore.zip
- Need admin rights:
/confirm.php:
[code]
if(isset($_GET["folder"]) && $_GET["folder"]!="") {
$folder=$_GET["folder"];
} else {
exit("Bad Request");
}
if(isset($_GET["id"]) && $_GET["id"]!="") {
$id=$_GET["id"];
} else {
exit("Bad Request");
}
// Validate all inputs
// Added by SepedaTua on June 01, 2006 - http://www.sepedatua.info/
/********************** SepedaTua ****************************/
/* Fields:
$folder
$id
*/
$search = array ('@]*?>.*?@si',
'@]*?>@si',
'@([\r\n])[\s]+@',
'@&(quot|#34);@i',
'@&(amp|#38);@i',
'@&(lt|#60);@i',
'@&(gt|#62);@i',
'@&(nbsp|#160);@i',
'@&(iexcl|#1
Exploit-DB
Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)
exploitdb·2006-08-28
CVE-2006-3439 Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)
Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)
---
/*
* MS06-040 Remote Code Execution Proof of Concept
*
* Ported by ub3r st4r aka iRP
* ---------------------------------------------------------------------
* Tested Against:
* Windows XP SP1
* Windows 2000 SP4
*
* Systems Affected:
* Microsoft Windows 2000 SP0-SP4
* Microsoft Windows XP SP0-SP1
* Microsoft Windows NT 4.0
* ---------------------------------------------------------------------
* This is provided as proof-of-concept code only for educational
* purposes and testing by authorized individuals with permission
* to do so.
*
* PRIVATE v.0.2 (08-27-06)
*/
#include
#include
#pragma comment(lib, "mpr")
#pragma comment(lib, "Rpcrt4")
// bind uuid interface: 4b324fc8-1670-01d3-1278-5a47bf6ee188 v3.0
unsigned cha
No writeups or analysis indexed.
http://evuln.com/vulns/95/summary.htmlhttp://osvdb.org/47017http://osvdb.org/47018http://secunia.com/advisories/19224http://secunia.com/advisories/31063http://securityreason.com/securityalert/619http://securitytracker.com/id?1015826http://www.attrition.org/pipermail/vim/2009-August/002246.htmlhttp://www.osvdb.org/23851http://www.osvdb.org/23852http://www.osvdb.org/23853http://www.osvdb.org/23854http://www.osvdb.org/23855http://www.osvdb.org/23856http://www.osvdb.org/23857http://www.osvdb.org/23858http://www.osvdb.org/23859http://www.osvdb.org/23860http://www.osvdb.org/23861http://www.osvdb.org/23862http://www.osvdb.org/23863http://www.osvdb.org/23864http://www.osvdb.org/24106http://www.securityfocus.com/archive/1/428659/100/0/threadedhttp://www.securityfocus.com/bid/17090http://www.securityfocus.com/bid/30182http://www.vupen.com/english/advisories/2006/0943https://exchange.xforce.ibmcloud.com/vulnerabilities/25183https://exchange.xforce.ibmcloud.com/vulnerabilities/43718https://exchange.xforce.ibmcloud.com/vulnerabilities/43724https://www.exploit-db.com/exploits/6040http://evuln.com/vulns/95/summary.htmlhttp://osvdb.org/47017http://osvdb.org/47018http://secunia.com/advisories/19224http://secunia.com/advisories/31063http://securityreason.com/securityalert/619http://securitytracker.com/id?1015826http://www.attrition.org/pipermail/vim/2009-August/002246.htmlhttp://www.osvdb.org/23851http://www.osvdb.org/23852http://www.osvdb.org/23853http://www.osvdb.org/23854http://www.osvdb.org/23855http://www.osvdb.org/23856http://www.osvdb.org/23857http://www.osvdb.org/23858http://www.osvdb.org/23859http://www.osvdb.org/23860http://www.osvdb.org/23861http://www.osvdb.org/23862http://www.osvdb.org/23863http://www.osvdb.org/23864http://www.osvdb.org/24106http://www.securityfocus.com/archive/1/428659/100/0/threadedhttp://www.securityfocus.com/bid/17090http://www.securityfocus.com/bid/30182http://www.vupen.com/english/advisories/2006/0943https://exchange.xforce.ibmcloud.com/vulnerabilities/25183https://exchange.xforce.ibmcloud.com/vulnerabilities/43718https://exchange.xforce.ibmcloud.com/vulnerabilities/43724https://www.exploit-db.com/exploits/6040
2006-03-19
Published