Alstrasoft : Security Vulnerabilities, CVEs, Published In 2007 (Sql injection)
SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action.
Max CVSS
7.5
EPSS Score
9.12%
Published
2007-11-23
Updated
2018-10-15
Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.
Max CVSS
6.8
EPSS Score
0.72%
Published
2007-07-30
Updated
2008-11-15
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php.
Max CVSS
6.8
EPSS Score
0.14%
Published
2007-07-30
Updated
2009-04-14
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to merchants/index.php and possibly (2) the rowid parameter to merchants/temp.php.
Max CVSS
7.5
EPSS Score
0.15%
Published
2007-07-30
Updated
2008-11-15
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php.
Max CVSS
10.0
EPSS Score
0.41%
Published
2007-05-22
Updated
2017-10-11
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Max CVSS
6.5
EPSS Score
0.30%
Published
2007-04-12
Updated
2017-07-29
6 vulnerabilities found