CVE-2006-1277

Published: Mar 19, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject arbitrary web script or HTML via the (1) real_name, (2) email, and (3) login parameters.

Affected (1)

Products: Upoint: At1 File Store

Upoint

1 product

At1 File Store

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Upoint At1 File Store	Up to 2006.03.07

References (16)

http://evuln.com/vulns/95/summary.html

Source: cve@mitre.org

http://secunia.com/advisories/19224

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015826

Source: cve@mitre.org

http://www.osvdb.org/23850

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428659/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17090

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0943

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25182

Source: cve@mitre.org

http://evuln.com/vulns/95/summary.html