CVE-2007-4077

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...

CVE-2007-4077

Affected product/variant : AlstraSoft Video Share Enterprise. Vulnerability type : Multiple cross-site scripting (XSS) vulnerabilities. Root cause : Reflected XSS via unvalidated user-supplied parameters in multiple PHP pages. Affected vectors/params : (1) msg, (2) page, (3) viewkey, (4) viewtype...