Alstrasoft Archives - CVE Vulnerability

CVE-2008-6932

Sun, 26 Feb 2023 09:11:47 +0000

Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/.

The post CVE-2008-6932 appeared first on CVE Vulnerability.

CVE-2008-5751

Sun, 26 Feb 2023 09:11:09 +0000

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action.

The post CVE-2008-5751 appeared first on CVE Vulnerability.

CVE-2008-5650

Sun, 26 Feb 2023 09:11:07 +0000

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter.

The post CVE-2008-5650 appeared first on CVE Vulnerability.

CVE-2008-5649

Sun, 26 Feb 2023 09:11:07 +0000

SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter.

The post CVE-2008-5649 appeared first on CVE Vulnerability.

CVE-2008-3954

Sun, 26 Feb 2023 09:10:17 +0000

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action.

The post CVE-2008-3954 appeared first on CVE Vulnerability.

CVE-2008-3386

Sun, 26 Feb 2023 09:09:59 +0000

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.

The post CVE-2008-3386 appeared first on CVE Vulnerability.

CVE-2008-3240

Sun, 26 Feb 2023 09:09:55 +0000

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action.

The post CVE-2008-3240 appeared first on CVE Vulnerability.

CVE-2008-2902

Sun, 26 Feb 2023 09:09:45 +0000

SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.

The post CVE-2008-2902 appeared first on CVE Vulnerability.

CVE-2008-2857

Sun, 26 Feb 2023 09:09:44 +0000

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

The post CVE-2008-2857 appeared first on CVE Vulnerability.

CVE-2008-0440

Sun, 26 Feb 2023 09:08:33 +0000

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts.

The post CVE-2008-0440 appeared first on CVE Vulnerability.