CVE-2009-1735

CVE-2009-1735 is an XSS vulnerability in VidSharePro’s search.php, exploitable via the searchtxt parameter to inject arbitrary script/HTML. Root cause: insufficient input sanitization in the search input handling. According to the CVSS metrics, the impact is partial integrity with no confidential...

CVE-2009-1734

CVE-2009-1734 is a SQL injection vulnerability in VidSharePro, specifically in listing_video.php, exploitable via the catid parameter. The connected documents confirm that remote attackers can execute arbitrary SQL commands through this input, indicating a server-side database query vulnerability...

CVE-2009-1750

CVE-2009-1750 concerns VidSharePro with an Unrestricted file upload vulnerability that lets remote authenticated users execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The description identifies the affected product and the gen...