Login Request a demo
Unscored severity · published Apr 12, 2007
CVE-2007-2018
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter
–
CVSS
0.9%
EPSS
No
On KEV
Description
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VS
Video Share Enterprise · Alstrasoft
through 4.1; through 4.2; through 4.3 · source: NVD
Affected product
VS
Video Share Enterprise
Alstrasoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2018
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2018
pridels0.blogspot.com
http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html
Vendor Advisory
http://secunia.com/advisories/24836
www.securityfocus.com
http://www.securityfocus.com/bid/23409
www.vupen.com
http://www.vupen.com/english/advisories/2007/1331
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33546
More from Video Share Enterprise
–
CVE-2008-3386
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different…
–
CVE-2007-4077
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page,…
–
CVE-2007-4086
Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or…
–
CVE-2007-4087
AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to…
–
CVE-2007-2017
siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request