Show filters
56 Total Results
Displaying 1-10 of 56
Sort by:
Attacker Value
Unknown
CVE-2008-6932
Disclosure Date: August 11, 2009 (last updated October 04, 2023)
Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/.
0
Attacker Value
Unknown
CVE-2008-5751
Disclosure Date: December 30, 2008 (last updated October 04, 2023)
SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action.
0
Attacker Value
Unknown
CVE-2008-5649
Disclosure Date: December 17, 2008 (last updated October 04, 2023)
SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter.
0
Attacker Value
Unknown
CVE-2008-5650
Disclosure Date: December 17, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter.
0
Attacker Value
Unknown
CVE-2008-3954
Disclosure Date: September 11, 2008 (last updated October 04, 2023)
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action.
0
Attacker Value
Unknown
CVE-2008-3386
Disclosure Date: July 30, 2008 (last updated October 04, 2023)
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.
0
Attacker Value
Unknown
CVE-2008-3240
Disclosure Date: July 21, 2008 (last updated October 04, 2023)
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action.
0
Attacker Value
Unknown
CVE-2008-2902
Disclosure Date: June 30, 2008 (last updated October 04, 2023)
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.
0
Attacker Value
Unknown
CVE-2008-2857
Disclosure Date: June 25, 2008 (last updated October 04, 2023)
AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.
0
Attacker Value
Unknown
CVE-2008-0440
Disclosure Date: January 23, 2008 (last updated October 04, 2023)
AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts.
0
