CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Alstrasoft : Security Vulnerabilities Published In 2008

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2008-5751 89 1 Exec Code Sql 2008-12-30 2009-01-29
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action.
2 CVE-2008-5650 89 1 Exec Code Sql 2008-12-17 2009-08-12
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter.
3 CVE-2008-5649 89 1 Exec Code Sql 2008-12-17 2009-08-12
10.0
 None Remote Low Not required Complete Complete Complete
SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter.
4 CVE-2008-3954 89 1 Exec Code Sql 2008-09-10 2009-01-29
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action.
5 CVE-2008-3386 89 1 Exec Code Sql 2008-07-30 2009-08-19
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.
6 CVE-2008-3240 89 1 Exec Code Sql 2008-07-21 2009-08-19
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action.
7 CVE-2008-2902 89 1 Exec Code Sql 2008-06-30 2009-04-08
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.
8 CVE-2008-2857 255 1 +Info 2008-06-25 2008-09-05
5.0
 None Remote Low Not required Partial None None
AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.
9 CVE-2008-0440 255 1 2008-01-23 2008-09-05
5.0
 None Remote Low Not required Partial None None
AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts.
10 CVE-2008-0429 89 2 Exec Code Sql 2008-01-23 2009-08-19
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action.
Total number of vulnerabilities : 10   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.