How to Fix Alstrasoft Vulnerabilities & Exploits (Page 1 of 3)

CVE-2008-6932 UNKNOWN

Component: sendit

Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a fi...

📅 2009-08-11

CVSS 7.5 Dossier →

CVE-2008-5751 UNKNOWN

Component: web_email_script_enterprise

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via...

📅 2008-12-30

CVSS 7.5 Dossier →

CVE-2008-5650 UNKNOWN

Component: webhost_directory

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the ...

📅 2008-12-17

CVSS 7.5 Dossier →

CVE-2008-5649 UNKNOWN

Component: article_manager_pro

SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the...

📅 2008-12-17

CVSS 10.0 Dossier →

CVE-2008-3954 UNKNOWN

Component: forum_pay_per_post_exchange

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the c...

📅 2008-09-11

CVSS 7.5 Dossier →

CVE-2008-3386 UNKNOWN

Component: video_share_enterprise

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the U...

📅 2008-07-30

CVSS 7.5 Dossier →

CVE-2008-3240 UNKNOWN

Component: affiliate_network_pro

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm par...

📅 2008-07-21

CVSS 7.5 Dossier →

CVE-2008-2902 UNKNOWN

Component: askme_pro

SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the i...

📅 2008-06-30

CVSS 7.5 Dossier →

CVE-2008-2857 UNKNOWN

Component: askme

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive i...

📅 2008-06-25

CVSS 5.0 Dossier →

CVE-2008-0440 UNKNOWN

Component: forum_pay_per_post_exchange

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts....

📅 2008-01-23

CVSS 5.0 Dossier →

CVE-2008-0429 UNKNOWN

Component: forum_pay_per_post_exchange

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via t...

📅 2008-01-23

CVSS 7.5 Dossier →

CVE-2007-6106 UNKNOWN

Component: e-friends

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the se...

📅 2007-11-23

CVSS 7.5 Dossier →

CVE-2007-5223 UNKNOWN

Component: affiliate_network_pro

Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impa...

📅 2007-10-05

CVSS 6.8 Dossier →

CVE-2007-4087 UNKNOWN

Component: video_share_enterprise

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the categor...

📅 2007-07-30

CVSS 4.3 Dossier →

CVE-2007-4086 UNKNOWN

Component: video_share_enterprise

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid p...

📅 2007-07-30

CVSS 6.8 Dossier →

CVE-2007-4085 UNKNOWN

Component: askme_pro

Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter t...

📅 2007-07-30

CVSS 6.8 Dossier →

CVE-2007-4084 UNKNOWN

Component: affiliate_network_pro

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid ...

📅 2007-07-30

CVSS 7.5 Dossier →

CVE-2007-4083 UNKNOWN

Component: askme_pro

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the ...

📅 2007-07-30

CVSS 4.3 Dossier →

CVE-2007-4082 UNKNOWN

Component: article_manager_pro

Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script o...

📅 2007-07-30

CVSS 4.3 Dossier →

CVE-2007-4081 UNKNOWN

Component: affiliate_network_pro

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML ...

📅 2007-07-30

CVSS 4.3 Dossier →

CVE-2007-4080 UNKNOWN

Component: e-friends

Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_id...

📅 2007-07-30

CVSS 6.4 Dossier →

CVE-2007-4079 UNKNOWN

Component: sms_text_messaging_enterprise

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script ...

📅 2007-07-30

CVSS 4.3 Dossier →

CVE-2007-4078 UNKNOWN

Component: text_ads_enterprise

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML vi...

📅 2007-07-30

CVSS 4.3 Dossier →

CVE-2007-4077 UNKNOWN

Component: video_share_enterprise

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML...

📅 2007-07-30

CVSS 4.3 Dossier →

alstrasoft Vulnerability Advisory Catalog