448 matches found
alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================================== alstrasoft E-Friends = 4.98 seid Multiple SQL Injection Vulnerabilities ========================================================================== \ /\ \ / | \ \ | ...
Alstrasoft e-Friends 4.98 - seid Multiple SQL Injections
Alstrasoft e-Friends 4.98 - seid Multiple SQL Injections \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid...
alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL...
Alstrasoft e-Friends 4.98 - 'seid' Multiple SQL Injections
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL Injection Vulnerabilities...
Input validation
Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving 1 admin/backupstart.php, 2 a .sql filename under admin/admin/dump/, 3 a .sql...
CVE-2007-5223
Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving 1 admin/backupstart.php, 2 a .sql filename under admin/admin/dump/, 3 a .sql...
CVE-2007-5223
CVE-2007-5223 relates to multiple unspecified vulnerabilities in the AlstraSoft Affiliate Network Pro. The root cause involves input validation defects that can allow an attacker to influence file handling actions, potentially leading to local file inclusion. Affected components include (1) admin...
CVE-2007-5223
Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving 1 admin/backupstart.php, 2 a .sql filename under admin/admin/dump/, 3 a .sql...
Affiliate Network Pro Multiple Input Validation and Local file inclusion
Discovered by hack2prison and navaro - VNBRAIN.NET member Vendor: Alstrasoft http://site/path/admin/backupstart.php http://site/path/admin/admin/dump/backup-dd-mm-yyyy.sql http://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql...
anp-multi.txt
Discovered by hack2prison and navaro - VNBRAIN.NET member Vendor: Alstrasoft http://site/path/admin/backupstart.php http://site/path/admin/admin/dump/backup-dd-mm-yyyy.sql http://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql...
CVE-2007-4079
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...
Sql injection
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via 1 the catid parameter to search.php or the 2 typ parameter to register.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in a merchants/index.php, including the 1 id or 2 msg parameter in a programedit action; the 3 pgmid parameter in an uploadProducts actio...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...
CVE-2007-4085
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the 1 queid parameter to forumanswer.php or 2 the catid parameter to search.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...
Sql injection
Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to gmembers.php, or 2 the UID parameter to a uvideos.php, b ugroups.php, c uprofile.php, d ufavour.php, e ufriends.php, or f uplaylist.php...
Cross site scripting
Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...
CVE-2007-4086
Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to gmembers.php, or 2 the UID parameter to a uvideos.php, b ugroups.php, c uprofile.php, d ufavour.php, e ufriends.php, or f uplaylist.php...