CVE-2006-4591

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the configtemplatepath parameter to 1 payment/paymentresult.php or 2 /payment/spuserresult.php...

CVE-2006-4591

CVE-2006-4591 affects AlstraSoft Template Seller (and possibly AltraSoft Template Seller Pro 3.25). The vulnerability is a PHP remote file inclusion via a URL in config[template_path] used by payment_result.php and spuser_result.php, enabling arbitrary PHP code execution. NVD lists a CVSS2 base s...

SolpotCrew Advisory #7 - AlstraSoft Template Seller Remote File Include Vulnerability

SolpotCrew Community AlstraSoft Template Seller Remote File Include Vulnerability Download file : http://www.alstrasoft.com/template.htm Bug Found By : NoGe a.k.a dajackass contact: [email protected] Website : http://nyubicrew.org/adv/Nogeadv01.txt Greetz: skulmaticthanks for sharing knowledge...

Alstrasoft Template Seller - Config[Template_Path] Multiple Remote File Inclusions

Alstrasoft Template Seller - ConfigTemplatePath Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19769/info AlstraSoft Template Seller is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An...

Alstrasoft Template Seller - 'Config[Template_Path]' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19769/info AlstraSoft Template Seller is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...

CVE-2006-4443

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

CVE-2006-4443

CVE-2006-4443 is a PHP remote file inclusion vulnerability in AlstraSoft Video Share Enterprise. The flaw exists in the file myajaxphp.php where the attacker can supply a URL via the config[BASE_DIR] parameter to cause arbitrary PHP code execution on the server. The NVD entry reports a base score...

CVE-2006-4443

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

AlstraSoftRFI.txt

NightWarrior nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php"; http://www.example.com/Script...

AlstraSoft Video Share Enterprise Remote File Include Vulnerability

NightWarriorKurdish Hacker nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php";...

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit thi...

Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code an...

chatizens.txt

Chatizens.com Also known as Chattown.com Homepage: http://www.chatizens.com Affected files: Profile input boxes: All input boxes of your profile. Browsing the forums -------------------------------------------- XSS vuln with cookie disclosure via profile input boxes. To bypass chatizens filters o...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

CVE-2006-2616

SQL injection vulnerability in the search script in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter...

Sql injection

1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL...

Sql injection

SQL injection vulnerability in the search script in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter...

CVE-2006-2618

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

CVE-2006-2616

The CVE-2006-2616 entry describes an SQL injection in the search script of AlstraSoft Web Host Directory 1.2 (also listed as HyperStop WebHost Directory 1.2). The vulnerability allows remote attackers to execute arbitrary SQL commands via the uri parameter, enabling potential data exposure or mod...

CVE-2006-2618

The CVE-2006-2618 entry describes a cross-site scripting (XSS) vulnerability in AlstraSoft Web Host Directory 1.2 and HyperStop WebHost Directory 1.2, exploitable via the "+write a review" box. The flaw allows remote attackers to inject arbitrary web script or HTML, with the issue arising because...