Cross site scripting

Cross-site scripting XSS vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to inject arbitrary web script or HTML via the tempid parameter...

CVE-2006-0222

The CVE-2006-0222 entry concerns an XSS vulnerability in AlstraSoft Template Seller Pro, affecting the fullview.php script where the tempid parameter can be exploited to inject arbitrary web script/HTML. Affected product: AlstraSoft Template Seller Pro; vulnerable component: fullview.php; entry d...

CVE-2006-0222

Cross-site scripting XSS vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to inject arbitrary web script or HTML via the tempid parameter...

AlstraSoft Template Seller Pro Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com AlstraSoft Template Seller Pro Cross-Site Scripting Vulnerability http://www.alstrasoft.com http://vicktimhost/template/fullview.php?tempid=XSS Contact :nightwarrior771athotmail.com NightWarriorKurdihs Hacker...

CVE-2005-4651

The CVE-2005-4651 entry describes an SQL injection vulnerability in index.php of AlstraSoft EPay Pro 2.0, exploitable via the pmodule parameter to execute arbitrary SQL commands remotely. Affected component: index.php in AlstraSoft EPay Pro 2.0; root cause is injectable SQL through pmodule. Docum...

CVE-2005-4651

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter...

CVE-2005-4651

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter...

CVE-2005-4530

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Enterprise 3.0 formerly DoPays allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in 1 profile.htm, 2 card.htm, 3 bank.htm, 4 subscriptions.htm, 5 send.htm, 6 request.htm, 7...

CVE-2005-4530

CVE-2005-4530 : Affected product is AlstraSoft EPay Enterprise 3.0 (formerly DoPays). The issue is multiple cross-site scripting (XSS) vulnerabilities in pages such as profile.htm, card.htm, bank.htm, subscriptions.htm, send.htm, request.htm, forgot.htm, escrow.htm, donations.htm, and products.ht...

CVE-2005-4530

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Enterprise 3.0 formerly DoPays allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in 1 profile.htm, 2 card.htm, 3 bank.htm, 4 subscriptions.htm, 5 send.htm, 6 request.htm, 7...

CVE-2005-3798

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2005-3795

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

CVE-2005-3793

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the 1 username or 2 password to admin/adminvalidatelogin, or the 3 login, 4 password, and 5 flag parameters to loginvalidate.php...

CVE-2005-3796

CVE-2005-3796 affects AlstraSoft Affiliate Network Pro 7.2. A vulnerability in admin_options_manage.php allows direct static code injection via the number parameter, enabling arbitrary PHP code execution. Root cause: inadequate input handling/validation in the affected PHP file. Impact per public...

CVE-2005-3794

CVE-2005-3794 concerns AlstraSoft Affiliate Network Pro 7.2, where remote attackers can disclose sensitive information by issuing direct requests to scripts such as togateway.php (and other unspecified scripts). The linked sources consistently describe information disclosure without detailing spe...

CVE-2005-3797

CVE-2005-3797 affects AlstraSoft Template Seller Pro 3.25. PHP remote file inclusion via the config[basepath] parameter allows remote code execution. The vulnerability is documented by NVD; no patch/version info is included in the provided connected documents. Exploitation details or in-the-wild ...

CVE-2005-3797

PHP remote file inclusion vulnerability in paymentpaypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the configbasepath parameter...

CVE-2005-3798

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2005-3794

AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as 1 togateway.php and 2 other unspecified scripts...

CVE-2005-3793

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the 1 username or 2 password to admin/adminvalidatelogin, or the 3 login, 4 password, and 5 flag parameters to loginvalidate.php...