Browse CVEs

HIGH 7.5 CVE-2008-6932 Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a f… Sendit No fix yet Fix from $1,9502009-08-11 HIGH 7.5 CVE-2008-5751 SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands vi… Web Email Script Enterprise No fix yet Fix from $1,9502008-12-30 HIGH 10.0 CVE-2008-5649 SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via th… Article Manager Pro No fix yet Fix from $1,9502008-12-17 HIGH 7.5 CVE-2008-5650 SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the… Webhost Directory No fix yet Fix from $1,9502008-12-17 HIGH 7.5 CVE-2008-3954 SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the … Forum Pay Per Post Exchange No fix yet Fix from $1,9502008-09-11 HIGH 7.5 CVE-2008-3386 SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the … Video Share Enterprise No fix yet Fix from $1,9502008-07-30 HIGH 7.5 CVE-2008-3240 SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm pa… Affiliate Network Pro No fix yet Fix from $1,9502008-07-21 MEDIUM 5.0 CVE-2008-0440 AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts. Forum Pay Per Post Exchange No fix yet Fix from $1,6002008-01-23 HIGH 7.5 CVE-2008-0429 SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via … Forum Pay Per Post Exchange No fix yet Fix from $1,9502008-01-23 MEDIUM 6.8 CVE-2007-5223 Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified imp… Affiliate Network Pro Mitigation only Fix from $1,6002007-10-05 HIGH 7.5 CVE-2007-4084 Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid… Affiliate Network Pro No fix yet Fix from $1,9502007-07-30 MEDIUM 6.8 CVE-2007-4085 Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter … Askme Pro No fix yet Fix from $1,6002007-07-30 MEDIUM 6.8 CVE-2007-4086 Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid … Video Share Enterprise No fix yet Fix from $1,6002007-07-30 MEDIUM 6.4 CVE-2007-4080 Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_i… E Friends No fix yet Fix from $1,6002007-07-30 HIGH 10.0 CVE-2007-2775 AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote a… Live Support No fix yet Fix from $1,9502007-05-21 HIGH 7.5 CVE-2006-6818 AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config. Webhost Directory Mitigation only Fix from $1,9502006-12-29 MEDIUM 6.4 CVE-2006-6819 AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to down… Webhost Directory Mitigation only Fix from $1,6002006-12-29 MEDIUM 5.0 CVE-2006-6817 AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an err… Webhost Directory Mitigation only Fix from $1,6002006-12-29 HIGH 7.5 CVE-2006-4913EPSS 10% Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files a… E Friends No fix yet Fix from $1,9502006-09-21 HIGH 7.5 CVE-2006-4591 Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attac… Template Seller No fix yet Fix from $1,9502006-09-06 HIGH 7.5 CVE-2006-4443 PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code v… Video Share Enterprise No fix yet Fix from $1,9502006-08-29 HIGH 7.5 CVE-2006-2616 SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote att… Webhost Directory Mitigation only Fix from $1,9502006-05-26 MEDIUM 5.0 CVE-2006-2617 (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invali… Webhost Directory Mitigation only Fix from $1,6002006-05-26 HIGH 7.5 CVE-2006-2565 SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the author_id par… Article Manager Pro Mitigation only Fix from $1,9502006-05-24 MEDIUM 5.0 CVE-2006-2566 Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in … Article Manager Pro Mitigation only Fix from $1,6002006-05-24 MEDIUM 6.4 CVE-2005-4651 SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule paramet… Epay Mitigation only Fix from $1,6002005-12-31 MEDIUM 5.1 CVE-2005-4530 Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary we… Epay Mitigation only Fix from $1,6002005-12-28 HIGH 7.5 CVE-2005-3793 Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary … Affiliate Network Pro Mitigation only Fix from $1,9502005-11-24 HIGH 7.5 CVE-2005-3796 Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary … Affiliate Network Pro Mitigation only Fix from $1,9502005-11-24 HIGH 7.5 CVE-2005-3797 PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP… Template Seller No fix yet Fix from $1,9502005-11-24