CVE-2005-3795

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

CVE-2005-3794

CVE-2005-3794 concerns AlstraSoft Affiliate Network Pro 7.2, where remote attackers can disclose sensitive information by issuing direct requests to scripts such as togateway.php (and other unspecified scripts). The linked sources consistently describe information disclosure without detailing spe...

CVE-2005-3795

CVE-2005-3795 affects AlstraSoft Affiliate Network Pro 7.2 and involves multiple cross-site scripting (XSS) vulnerabilities. The affected parameters are (1) Err in admin/index.php and (2) firstname and (3) lastname in index.php. These allow remote attackers to inject arbitrary web script or HTML....

CVE-2005-3796

CVE-2005-3796 affects AlstraSoft Affiliate Network Pro 7.2. A vulnerability in admin_options_manage.php allows direct static code injection via the number parameter, enabling arbitrary PHP code execution. Root cause: inadequate input handling/validation in the affected PHP file. Impact per public...

CVE-2005-3797

CVE-2005-3797 affects AlstraSoft Template Seller Pro 3.25. PHP remote file inclusion via the config[basepath] parameter allows remote code execution. The vulnerability is documented by NVD; no patch/version info is included in the provided connected documents. Exploitation details or in-the-wild ...

CVE-2005-3798

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2005-3794

AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as 1 togateway.php and 2 other unspecified scripts...

CVE-2005-3795

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

CVE-2005-3796

Direct static code injection vulnerability in adminoptionsmanage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this doe...

CVE-2005-3797

PHP remote file inclusion vulnerability in paymentpaypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the configbasepath parameter...

CVE-2005-3798

The CVE-2005-3798 entry describes a SQL injection vulnerability in the admin/index.php script of AlstraSoft Template Seller Pro 3.25 . The underlying issue is an injectable username parameter that permits remote attackers to execute arbitrary SQL commands. This is the only concrete detail provide...

CVE-2005-3793

The CVE-2005-3793 entry describes SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2. The affected component is the admin login and login_validate.php endpoints, where the (1) username, (2) password, (3) login, (4) password, and (5) flag parameters can be manipulated to bypass ...

CVE-2005-3793

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the 1 username or 2 password to admin/adminvalidatelogin, or the 3 login, 4 password, and 5 flag parameters to loginvalidate.php...

CVE-2005-3793: Undefined Security Weakness

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the 1 username or 2 password to admin/adminvalidatelogin, or the 3 login, 4 password, and 5 flag parameters to loginvalidate.php...

CVE-2005-3796: Undefined Security Weakness

Direct static code injection vulnerability in adminoptionsmanage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this doe...

CVE-2005-3797: Undefined Security Weakness

PHP remote file inclusion vulnerability in paymentpaypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the configbasepath parameter...

CVE-2005-3794: Undefined Security Weakness

AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as 1 togateway.php and 2 other unspecified scripts...

CVE-2005-3798: Undefined Security Weakness

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2005-3795: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability

AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability Vuln. dicovered by : r0t Vendor:http://www.alstrasoft.com/ Product link: http://www.alstrasoft.com/epay.htm affected version:v2.0 Product Overview: How would you like to own your very own payment processing website and business built with...