CVE-2006-1278

CVE-2006-1278 is a SQL injection in @1 File Store 2006.03.07 (also affecting FILE STORE PRO 3.2 for vectors 12–13) allowing remote attackers to execute arbitrary SQL via multiple input vectors across libs, control/files, control/users, control/folders, control/groups, as well as password.php and ...