CVE-2005-0980: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code...

AlstraSoft EPay Pro v2.0 has file include and multiple xss vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Severity: High Title: AlstraSoft EPay Pro v2.0 has file include and multiple xss vulnerabilities Date: 02/04/2005 Vendor: AlstraSoft...

Alstrasoft EPay Pro 2.0 - Remote File Inclusion

Alstrasoft EPay Pro 2.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/12973/info EPay Pro is reported prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the...

Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12974/info It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities. These problems present themselves when malicious HTML and script code is sent to t...

Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12974/info It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities. These problems present themselves when malicious HTML and script code is sent to the application through multiple parameters. This issue may allow for the...

Alstrasoft EPay Pro 2.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/12973/info EPay Pro is reported prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'view' parameter. An attacker may leverage this...