EUVD-2007-4070

Malware in sbrugna...

EUVD-2007-2012

Malware in sbrugna...

Alstrasoft Video Share Enterprise 4.72 - SQL Injection

Alstrasoft Video Share Enterprise 4.72 - SQL Injection Exploit Title: AlstraSoft Video Share Enterprise v4.72 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/videoshare.htm Demo:...

Alstrasoft Video Share Enterprise 4.72 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AlstraSoft Video Share Enterprise v4.72 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/videoshare.htm Demo:...

AlstraSoft Video Share Enterprise 4.x MyajaxPHP.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fil...

AlstraSoft Video Share Enterprise SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= AlstraSoft Video Share Enterprise SQL Injection Vulnerability ============================================================= Author : M3NW5 Homepage :...

CVE-2008-3386

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...

CVE-2008-3386

CVE-2008-3386 is a SQL injection vulnerability in album.php of AlstraSoft Video Share Enterprise 4.51, exploitable via the UID parameter. The connected records also document CVE-2007-4086 for the same product with multiple SQL injection vectors. The provided materials state the vulnerable compone...

CVE-2007-4086

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to gmembers.php, or 2 the UID parameter to a uvideos.php, b ugroups.php, c uprofile.php, d ufavour.php, e ufriends.php, or f uplaylist.php...

CVE-2007-4086

The CVE-2007-4086 entry describes multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise. The affected components are server-side scripts that accept user-supplied input: gid to gmembers.php, and UID to uvideos.php, ugroups.php, uprofile.php, ufavour.php, ufriends.php, or upl...

CVE-2007-4077

Affected product/variant : AlstraSoft Video Share Enterprise. Vulnerability type : Multiple cross-site scripting (XSS) vulnerabilities. Root cause : Reflected XSS via unvalidated user-supplied parameters in multiple PHP pages. Affected vectors/params : (1) msg, (2) page, (3) viewkey, (4) viewtype...

CVE-2007-4087

CVE-2007-4087 affects AlstraSoft Video Share Enterprise. Affected component: the web application handling category and UID inputs. The root cause is improper input handling leading to information disclosure: sending a single quote (') in the category parameter to view_video.php can reveal the ful...

CVE-2007-4077

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-2018

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-2017

CVE-2007-2017 affects AlstraSoft Video Share Enterprise; vulnerability in siteadmin/useredit.php allows remote attackers to obtain or modify user information due to missing authentication via a direct request. The issue is rated HIGH (CVSSv2 7.5). A patch is available at the vendor’s fix package ...

CVE-2007-2018

Affected software: AlstraSoft Video Share Enterprise. Vulnerable component: msg.php. Root cause: SQL injection via the id parameter. Impact: remote authenticated users can execute arbitrary SQL commands. Attack vector/conditions: network access; low complexity; single authentication required. Sco...

CVE-2006-4443

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

CVE-2006-4443

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

CVE-2006-4443

CVE-2006-4443 is a PHP remote file inclusion vulnerability in AlstraSoft Video Share Enterprise. The flaw exists in the file myajaxphp.php where the attacker can supply a URL via the config[BASE_DIR] parameter to cause arbitrary PHP code execution on the server. The NVD entry reports a base score...