CVE-2007-2017

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

CVE-2007-2018

Affected software: AlstraSoft Video Share Enterprise. Vulnerable component: msg.php. Root cause: SQL injection via the id parameter. Impact: remote authenticated users can execute arbitrary SQL commands. Attack vector/conditions: network access; low complexity; single authentication required. Sco...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-2017

CVE-2007-2017 affects AlstraSoft Video Share Enterprise; vulnerability in siteadmin/useredit.php allows remote attackers to obtain or modify user information due to missing authentication via a direct request. The issue is rated HIGH (CVSSv2 7.5). A patch is available at the vendor’s fix package ...

CVE-2006-6818

AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config...

CVE-2006-6819

AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db...

CVE-2006-6817

AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an error message, a different vulnerability than CVE-2006-2617...

CVE-2006-6817

The CVE-2006-6817 issue affects AlstraSoft Web Host Directory (also listed as HyperStop WebHost Directory 1.2). Affected component: login/URI handling that, when an invalid URI is requested, exposes the installation path in the error message, enabling a remote attacker to obtain sensitive informa...

CVE-2006-6819

AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db...

CVE-2006-6817

AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an error message, a different vulnerability than CVE-2006-2617...

CVE-2006-6818

AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config...

CVE-2006-6818

CVE-2006-6818 affects AlstraSoft Web Host Directory. The vulnerability allows remote attackers to bypass authentication and change the admin password via a direct request to /admin/config. CVSS v2 base score 7.5 (HIGH) with network attack vector and no authentication required; impact includes par...

CVE-2006-6819

CVE-2006-6819 concerns AlstraSoft Web Host Directory, where sensitive information is stored under the web root due to insufficient access control. The vulnerability allows remote attackers to download a backup database by issuing a direct request to admin/backup/db. The public records indicate th...

CVE-2006-4913

Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. dot dot sequence and trailing null %00 byte in the lang parameter, as demonstrated by injecting PHP code...

CVE-2006-4913

Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. dot dot sequence and trailing null %00 byte in the lang parameter, as demonstrated by injecting PHP code...

CVE-2006-4913

The CVE-2006-4913 entry describes a directory traversal in AlstraSoft E-friends 4.85 (chat/getStartOptions.php). An attacker can cause local file inclusion and potentially execute code by supplying a .. sequence and a trailing null (%00) byte in the lang parameter, demonstrated by injecting PHP i...

AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] PS: fuck CarcaBot...

AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================= AlstraSoft E-Friends = 4.85 Remote Command Execution Exploit ============================================================= !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command...

Alstrasoft e-Friends 4.85 - Remote Command Execution

Alstrasoft e-Friends 4.85 - Remote Command Execution !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] P...

Alstrasoft e-Friends 4.85 - Remote Command Execution

!/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] PS: fuck CarcaBot ..another lame romanian guy= use...