video_share_enterprise Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/video_share_enterprise/ Sun, 26 Feb 2023 09:09:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png video_share_enterprise Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/video_share_enterprise/ 32 32 CVE-2008-3386 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3386/ Sun, 26 Feb 2023 09:09:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3386/ SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.

The post CVE-2008-3386 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.

The post CVE-2008-3386 appeared first on CVE Vulnerability.

]]> CVE-2007-4086 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4086/ Sun, 26 Feb 2023 09:07:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4086/ Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.

The post CVE-2007-4086 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.

The post CVE-2007-4086 appeared first on CVE Vulnerability.

]]> CVE-2007-4087 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4087/ Sun, 26 Feb 2023 09:07:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4087/ AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ‘ (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.

The post CVE-2007-4087 appeared first on CVE Vulnerability.

]]> AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ‘ (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.

The post CVE-2007-4087 appeared first on CVE Vulnerability.

]]> CVE-2007-4077 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4077/ Sun, 26 Feb 2023 09:07:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4077/ Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page, (3) viewkey, or (4) viewtype parameter to (a) view_video.php; the (5) next parameter to (b) signup.php; the (6) search_id parameter to (c) search_result.php; the (7) category or (8) page […]

The post CVE-2007-4077 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page, (3) viewkey, or (4) viewtype parameter to (a) view_video.php; the (5) next parameter to (b) signup.php; the (6) search_id parameter to (c) search_result.php; the (7) category or (8) page parameter to (d) video.php; the (9) receiver parameter to (e) compose.php; the (10) catgy parameter to (f) groups.php; the (11) channelname parameter to (g) siteadmin/channels.php; or the (12) uname parameter to (h) siteadmin/muser.php.

The post CVE-2007-4077 appeared first on CVE Vulnerability.

]]> CVE-2007-2018 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2018/ Sun, 26 Feb 2023 09:06:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2018/ SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

The post CVE-2007-2018 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

The post CVE-2007-2018 appeared first on CVE Vulnerability.

]]> CVE-2007-2017 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2017/ Sun, 26 Feb 2023 09:06:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2017/ siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request.

The post CVE-2007-2017 appeared first on CVE Vulnerability.

]]> siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request.

The post CVE-2007-2017 appeared first on CVE Vulnerability.

]]>