EUVD-2007-2012

Malware in sbrugna...

EUVD-2007-4070

Malware in sbrugna...

Alstrasoft Video Share Enterprise 4.72 - SQL Injection

Alstrasoft Video Share Enterprise 4.72 - SQL Injection Exploit Title: AlstraSoft Video Share Enterprise v4.72 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/videoshare.htm Demo:...

Alstrasoft Video Share Enterprise 4.72 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AlstraSoft Video Share Enterprise v4.72 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/videoshare.htm Demo:...

AlstraSoft Video Share Enterprise 4.x MyajaxPHP.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fil...

AlstraSoft Video Share Enterprise SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= AlstraSoft Video Share Enterprise SQL Injection Vulnerability ============================================================= Author : M3NW5 Homepage :...

CVE-2008-3386

CVE-2008-3386 is a SQL injection vulnerability in album.php of AlstraSoft Video Share Enterprise 4.51, exploitable via the UID parameter. The connected records also document CVE-2007-4086 for the same product with multiple SQL injection vectors. The provided materials state the vulnerable compone...

CVE-2008-3386

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...

CVE-2008-3386: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...

CVE-2007-4086

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to gmembers.php, or 2 the UID parameter to a uvideos.php, b ugroups.php, c uprofile.php, d ufavour.php, e ufriends.php, or f uplaylist.php...

CVE-2007-4086

The CVE-2007-4086 entry describes multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise. The affected components are server-side scripts that accept user-supplied input: gid to gmembers.php, and UID to uvideos.php, ugroups.php, uprofile.php, ufavour.php, ufriends.php, or upl...

CVE-2007-4087

CVE-2007-4087 affects AlstraSoft Video Share Enterprise. Affected component: the web application handling category and UID inputs. The root cause is improper input handling leading to information disclosure: sending a single quote (') in the category parameter to view_video.php can reveal the ful...

CVE-2007-4077

Affected product/variant : AlstraSoft Video Share Enterprise. Vulnerability type : Multiple cross-site scripting (XSS) vulnerabilities. Root cause : Reflected XSS via unvalidated user-supplied parameters in multiple PHP pages. Affected vectors/params : (1) msg, (2) page, (3) viewkey, (4) viewtype...

CVE-2007-4077

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...

CVE-2007-4086: Undefined Security Weakness

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to gmembers.php, or 2 the UID parameter to a uvideos.php, b ugroups.php, c uprofile.php, d ufavour.php, e ufriends.php, or f uplaylist.php...

CVE-2007-4087: Undefined Security Weakness

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information the full path via 1 a ' quote character in the category parameter to viewvideo.php, or 2 an XSS sequence in the UID parameter to a uprofile.php, b channeldetail.php, c uvideos.php, d groupshome.php, or e...

CVE-2007-4077: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-2017

CVE-2007-2017 affects AlstraSoft Video Share Enterprise; vulnerability in siteadmin/useredit.php allows remote attackers to obtain or modify user information due to missing authentication via a direct request. The issue is rated HIGH (CVSSv2 7.5). A patch is available at the vendor’s fix package ...