CVE-2007-4082

Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

Sql injection

Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the 1 queid parameter to forumanswer.php or 2 the catid parameter to search.php...

Design/Logic Flaw

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information the full path via 1 a ' quote character in the category parameter to viewvideo.php, or 2 an XSS sequence in the UID parameter to a uprofile.php, b channeldetail.php, c uvideos.php, d groupshome.php, or e...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

CVE-2007-4083

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via 1 the catid parameter to search.php or the 2 typ parameter to register.php...

CVE-2007-4087

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information the full path via 1 a ' quote character in the category parameter to viewvideo.php, or 2 an XSS sequence in the UID parameter to a uprofile.php, b channeldetail.php, c uvideos.php, d groupshome.php, or e...

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...

CVE-2007-4084

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...

CVE-2007-4081

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in a merchants/index.php, including the 1 id or 2 msg parameter in a programedit action; the 3 pgmid parameter in an uploadProducts actio...

CVE-2007-4078

CVE-2007-4078 concerns multiple XSS vulnerabilities in AlstraSoft Text Ads Enterprise. The affected components are web pages handling user input: forgot_uid.php (r parameter), search_results.php (query or sk parameters), and website_page.php (pageId parameter). The root cause is improper input va...

CVE-2007-4087

CVE-2007-4087 affects AlstraSoft Video Share Enterprise. Affected component: the web application handling category and UID inputs. The root cause is improper input handling leading to information disclosure: sending a single quote (') in the category parameter to view_video.php can reveal the ful...

CVE-2007-4082

CVE-2007-4082 describes a cross-site scripting (XSS) vulnerability in AlstraSoft Article Manager Pro, exploitable via theuserid parameter in contact_author.php. The issue allows remote attackers to inject arbitrary scripts/HTML; CVSS v2 base score 4.3 (Medium) with Network attack vector, no authe...

CVE-2007-4083

CVE-2007-4083 affects AlstraSoft AskMe Pro. The documented vulnerabilities are multiple XSS flaws exploited via user-supplied input: (1) cat_id in search.php and (2) typ in register.php. Remote attackers could inject arbitrary script/HTML, leading to client-side compromise. The sources provide th...

CVE-2007-4086

The CVE-2007-4086 entry describes multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise. The affected components are server-side scripts that accept user-supplied input: gid to gmembers.php, and UID to uvideos.php, ugroups.php, uprofile.php, ufavour.php, ufriends.php, or upl...

CVE-2007-4080

Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...

CVE-2007-4085

Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the 1 queid parameter to forumanswer.php or 2 the catid parameter to search.php...

CVE-2007-4082

Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2007-4080

The CVE-2007-4080 entry documents a cross-site scripting (XSS) vulnerability in the AlstraSoft E-Friends application, specifically in index.php. The issue is triggered via the p_id parameter in the people_card action, enabling remote attackers to inject arbitrary web script or HTML. Affected comp...

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...