AlstraSoft Video Share Enterprise ufriends.php UID Variable SQL Injection

2007-07-22T00:00:00
ID OSVDB:37877
Type osvdb
Reporter OSVDB
Modified 2007-07-22T00:00:00

Description

Manual Testing Notes

http://[target]/videoshare/ufriends.php?UID=253 or 1=1

References:

Related OSVDB ID: 37874 Related OSVDB ID: 37873 Related OSVDB ID: 37876 Related OSVDB ID: 1014988 Related OSVDB ID: 37872 Related OSVDB ID: 37875 Related OSVDB ID: 37878 Other Advisory URL: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html CVE-2007-4086