CVE-2005-4651: Undefined Security Weakness

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter...

CVE-2005-4651

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter...

CVE-2005-4530

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Enterprise 3.0 formerly DoPays allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in 1 profile.htm, 2 card.htm, 3 bank.htm, 4 subscriptions.htm, 5 send.htm, 6 request.htm, 7...

CVE-2005-4530

CVE-2005-4530 : Affected product is AlstraSoft EPay Enterprise 3.0 (formerly DoPays). The issue is multiple cross-site scripting (XSS) vulnerabilities in pages such as profile.htm, card.htm, bank.htm, subscriptions.htm, send.htm, request.htm, forgot.htm, escrow.htm, donations.htm, and products.ht...

CVE-2005-4530

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Enterprise 3.0 formerly DoPays allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in 1 profile.htm, 2 card.htm, 3 bank.htm, 4 subscriptions.htm, 5 send.htm, 6 request.htm, 7...

CVE-2005-4530: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Enterprise 3.0 formerly DoPays allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in 1 profile.htm, 2 card.htm, 3 bank.htm, 4 subscriptions.htm, 5 send.htm, 6 request.htm, 7...

AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability

AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability Vuln. dicovered by : r0t Vendor:http://www.alstrasoft.com/ Product link: http://www.alstrasoft.com/epay.htm affected version:v2.0 Product Overview: How would you like to own your very own payment processing website and business built with...

HYA-2005-008-alstrasoft-epay-pro.txt

------------------------------------------------------ HYA-2005-008 h4cky0u.org Advisory 008 ------------------------------------------------------ Date - Mon Sep 19 2005 TITLE: ====== Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability SEVERITY: ========= Medium SOFTWARE: =======...

CVE-2005-3026

Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...

CVE-2005-3026

The vulnerability CVE-2005-3026 affects Alstrasoft Epay Pro 2.0 and earlier, allowing remote attackers to read arbitrary files through a directory traversal in the read parameter (..). The issue is described in the NVD entry as a directory traversal in index.php. No remediation details are provid...

CVE-2005-3026

Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...

CVE-2005-3026: Undefined Security Weakness

Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...

Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability

------------------------------------------------------ HYA-2005-008 h4cky0u.org Advisory 008 ------------------------------------------------------ Date - Mon Sep 19 2005 TITLE: ====== Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability SEVERITY: ========= Medium SOFTWARE: =======...

CVE-2005-0981

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 payment or 2 send parameter...

CVE-2005-0980

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code...

AlstraSoft20.txt

This is a multi-part message in MIME format. ------=NextPart000001201C53726.5C0BF6A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/...

CVE-2005-0981

CVE-2005-0981 describes multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 that allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter. The NVD entry lists a base score of 4.3 (MEDIUM) with network attack vector, no conf...

CVE-2005-0980

Vulnerability: CVE-2005-0980 affects AlstraSoft EPay Pro 2.0 (index.php) through a PHP remote file inclusion via the view parameter, enabling arbitrary PHP code execution when an attacker references a URL on a remote server. Root cause: insufficient input validation/ sanitization allowing inclusi...

CVE-2005-0980

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0981: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 payment or 2 send parameter...