CVE-2007-2017

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-2017

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

CVE-2007-2018

Affected software: AlstraSoft Video Share Enterprise. Vulnerable component: msg.php. Root cause: SQL injection via the id parameter. Impact: remote authenticated users can execute arbitrary SQL commands. Attack vector/conditions: network access; low complexity; single authentication required. Sco...

CVE-2007-2017

CVE-2007-2017 affects AlstraSoft Video Share Enterprise; vulnerability in siteadmin/useredit.php allows remote attackers to obtain or modify user information due to missing authentication via a direct request. The issue is rated HIGH (CVSSv2 7.5). A patch is available at the vendor’s fix package ...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2006-4443

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

CVE-2006-4443

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

CVE-2006-4443

CVE-2006-4443 is a PHP remote file inclusion vulnerability in AlstraSoft Video Share Enterprise. The flaw exists in the file myajaxphp.php where the attacker can supply a URL via the config[BASE_DIR] parameter to cause arbitrary PHP code execution on the server. The NVD entry reports a base score...

AlstraSoft Video Share Enterprise Remote File Include Vulnerability

NightWarriorKurdish Hacker nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php";...

AlstraSoftRFI.txt

NightWarrior nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php"; http://www.example.com/Script...

Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code an...

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit thi...