medium6.5
CVE-2007-2018
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id para…
Impact
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | Video Share Enterprise | through 4.1 through 4.2 through 4.3 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html
- http://secunia.com/advisories/24836
- http://www.securityfocus.com/bid/23409
- http://www.vupen.com/english/advisories/2007/1331
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33546
- http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html
- http://secunia.com/advisories/24836
- http://www.securityfocus.com/bid/23409
- http://www.vupen.com/english/advisories/2007/1331
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33546