CVE-2007-4081

This entry (CVE-2007-4081) concerns multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro. The affected components are the PHP actions in merchants/index.php (notably parameters: id, msg in programedit; pgmid in uploadProducts; d, m, y in daily; err in ProgramRep...

CVE-2007-4079

CVE-2007-4079 describes multiple XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise. The flaws allow remote attackers to inject arbitrary web script or HTML via the domain or q parameter to admin/membersearch.php, or the userid parameter to admin/edituser.php. The NVD entry lists a M...

CVE-2007-4077

Affected product/variant : AlstraSoft Video Share Enterprise. Vulnerability type : Multiple cross-site scripting (XSS) vulnerabilities. Root cause : Reflected XSS via unvalidated user-supplied parameters in multiple PHP pages. Affected vectors/params : (1) msg, (2) page, (3) viewkey, (4) viewtype...

CVE-2007-4086

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to gmembers.php, or 2 the UID parameter to a uvideos.php, b ugroups.php, c uprofile.php, d ufavour.php, e ufriends.php, or f uplaylist.php...

CVE-2007-4083

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via 1 the catid parameter to search.php or the 2 typ parameter to register.php...

CVE-2007-4084

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...

CVE-2007-4084

The CVE-2007-4084 entry concerns multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro, allowing remote attackers to execute arbitrary SQL commands via user-supplied input in (1) the pgmid parameter of an uploadProducts action (merchants/index.php) and (2) the rowid parameter...

CVE-2007-4085

CVE-2007-4085 affects AlstraSoft AskMe Pro (multiple SQL injection flaws). The vulnerabilities allow remote attackers to manipulate SQL via 1) que_id in forum_answer.php and 2) cat_id in search.php. Root cause: unsafely constructed SQL queries leading to arbitrary command execution. Evidence from...

CVE-2007-4077

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...

CVE-2007-4087

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information the full path via 1 a ' quote character in the category parameter to viewvideo.php, or 2 an XSS sequence in the UID parameter to a uprofile.php, b channeldetail.php, c uvideos.php, d groupshome.php, or e...

CVE-2007-4081

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in a merchants/index.php, including the 1 id or 2 msg parameter in a programedit action; the 3 pgmid parameter in an uploadProducts actio...

CVE-2007-4079

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

Alstrasoft Affiliate Network Pro 8.0 - index.php Cross-Site Scripting

Alstrasoft Affiliate Network Pro 8.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. ...

Alstrasoft Sms Text Messaging Enterprise 2.0 - adminmembersearch.php Multiple Cross-Site Scripting Vulnerabilities

Alstrasoft Sms Text Messaging Enterprise 2.0 - adminmembersearch.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly...

Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/edituser.php?userid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...

Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/membersearch.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...

Alstrasoft Affiliate Network Pro 8.0 - 'temp.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

alstrasoft-multi.txt

AlstraSoft Multiple products multiple Vulnerabilities Vendor urL:http://www.alstrasoft.com/products.htm Advisore url:http://lostmon.blogspot.com/2007/07/ alstrasoft-multiple-products-multiple.html Vendor notify:yes webform Exploit included: yes Multiple products of Alstrasoft Are prone vulnerable...

Alstrasoft Sms Text Messaging Enterprise 2.0 - adminedituser.php?userid Cross-Site Scripting

Alstrasoft Sms Text Messaging Enterprise 2.0 - adminedituser.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplie...

Alstrasoft Affiliate Network Pro 8.0 - temp.php Cross-Site Scripting

Alstrasoft Affiliate Network Pro 8.0 - temp.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A...