CVE-2008-2857

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-2857

CVE-2008-2857 affects AlstraSoft AskMe Pro 2.1 and earlier. The root cause is that passwords are stored in cleartext in a MySQL database, enabling context-dependent attackers to obtain sensitive information. The connected records confirm the same description across multiple sources. No explicit r...

alstrasoft-sql.txt

-+================================================================================+- -+ AlstraSoft AskMe Pro = 2.1 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 10 JUNE 2008 Script...

Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections

-+================================================================================+- -+ AlstraSoft AskMe Pro = 2.1 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 10 JUNE 2008 Script...

Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections

Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections -+================================================================================+- -+ AlstraSoft AskMe Pro = 2.1 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By:...

CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

Design/Logic Flaw

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0440

The affected software is AlstraSoft Forum Pay Per Post Exchange 2.0. The CVE entry describes the root cause as storing passwords in cleartext, enabling attackers to access user accounts. The connected documents confirm this issue, but do not provide a remediation or patch version. Exploitation st...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

CVE-2008-0429

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

CVE-2008-0429

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

CVE-2008-0429

CVE-2008-0429 describes an SQL injection in the PHP file index.php for AlstraSoft Forum Pay Per Post Exchange 2.0. The vulnerability is exploitable via the catid parameter in the forum_catview action, potentially allowing remote attackers to execute arbitrary SQL commands and compromise data. The...

AlstraSoft Forum Pay Per Post Exchange 2.0 SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection --==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==...

CVE-2007-6106

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action...

CVE-2007-6106

AlstraSoft E-Friends up to version 4.98 and earlier is affected by an SQL injection in index.php via the seid parameter in the viewevent action, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the affected product/version and the vulnerable parameter, ...

CVE-2007-6106

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action...

[ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities

ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL Injection Vulnerabilities ----------------------------------------------------------------------------------------- Author :...