448 matches found
CVE-2005-3796
CVE-2005-3796 affects AlstraSoft Affiliate Network Pro 7.2. A vulnerability in admin_options_manage.php allows direct static code injection via the number parameter, enabling arbitrary PHP code execution. Root cause: inadequate input handling/validation in the affected PHP file. Impact per public...
CVE-2005-3793
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the 1 username or 2 password to admin/adminvalidatelogin, or the 3 login, 4 password, and 5 flag parameters to loginvalidate.php...
CVE-2005-3797
CVE-2005-3797 affects AlstraSoft Template Seller Pro 3.25. PHP remote file inclusion via the config[basepath] parameter allows remote code execution. The vulnerability is documented by NVD; no patch/version info is included in the provided connected documents. Exploitation details or in-the-wild ...
CVE-2005-3796
Direct static code injection vulnerability in adminoptionsmanage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this doe...
CVE-2005-3793
The CVE-2005-3793 entry describes SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2. The affected component is the admin login and login_validate.php endpoints, where the (1) username, (2) password, (3) login, (4) password, and (5) flag parameters can be manipulated to bypass ...
AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability
AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability Vuln. dicovered by : r0t Vendor:http://www.alstrasoft.com/ Product link: http://www.alstrasoft.com/epay.htm affected version:v2.0 Product Overview: How would you like to own your very own payment processing website and business built with...
affiliateNetwork.txt
Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS ======================================================================== Software: Affiliate Network Pro v7.2 Severity: SQL Injections, Arbitrary code execution, XSS Risk: High Author: Robin Verton Date: Nov. 15 2005 Vendor:...
Template Seller Pro 3.25
AlstraSoft Template Seller Pro 3.25 =================================== Software: AlstraSoft Template Seller Pro 3.25 Severity: Arbitrary code execution, SQL Injections Risk: High Author: Robin Verton [email protected] Date: Nov. 15 2005 Vendor: www.alstrasoft.com Description: Ever thought of...
Alstrasoft Template Seller Pro 3.25 - Remote File Inclusion
Alstrasoft Template Seller Pro 3.25 - Remote File Inclusion source: https://www.securityfocus.com/bid/15441/info Template Seller Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...
CVE-2005-3062
PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter...
CVE-2005-3062
CVE-2005-3062 describes a PHP remote file inclusion vulnerability in the index.php of AlstraSoft E-Friends 4.0 , exploitable via the mode parameter to allow remote attackers to execute arbitrary PHP code. The vulnerability is documented in multiple sources (NVD CVE entry) with a base score of 7.5...
CVE-2005-3062
PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter...
efriends.txt
AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...
AlstraSoft E-Friends Remote Command Exucetion
AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...
HYA-2005-008-alstrasoft-epay-pro.txt
------------------------------------------------------ HYA-2005-008 h4cky0u.org Advisory 008 ------------------------------------------------------ Date - Mon Sep 19 2005 TITLE: ====== Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability SEVERITY: ========= Medium SOFTWARE: =======...
CVE-2005-3026
Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...
CVE-2005-3026
The vulnerability CVE-2005-3026 affects Alstrasoft Epay Pro 2.0 and earlier, allowing remote attackers to read arbitrary files through a directory traversal in the read parameter (..). The issue is described in the NVD entry as a directory traversal in index.php. No remediation details are provid...
CVE-2005-3026
Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...
Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability
------------------------------------------------------ HYA-2005-008 h4cky0u.org Advisory 008 ------------------------------------------------------ Date - Mon Sep 19 2005 TITLE: ====== Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability SEVERITY: ========= Medium SOFTWARE: =======...