Login Request a demo
AL
Vendor
Alstrasoft
15 products with CVEs on record
56
CVEs
0
On KEV
0
New 30D
Products
AN
Affiliate Network Pro
Alstrasoft
–
8 CVEs0 on KEV0 new
VS
Video Share Enterprise
Alstrasoft
–
7 CVEs0 on KEV0 new
WD
Webhost Directory
Alstrasoft
–
7 CVEs0 on KEV0 new
EF
E-friends
Alstrasoft
–
6 CVEs0 on KEV0 new
TS
Template Seller
Alstrasoft
–
6 CVEs0 on KEV0 new
AM
Article Manager Pro
Alstrasoft
–
5 CVEs0 on KEV0 new
EP
Epay
Alstrasoft
–
5 CVEs0 on KEV0 new
AP
Askme Pro
Alstrasoft
–
3 CVEs0 on KEV0 new
FP
Forum Pay Per Post Exchange
Alstrasoft
–
3 CVEs0 on KEV0 new
AS
Askme
Alstrasoft
–
1 CVEs0 on KEV0 new
LS
Live Support
Alstrasoft
–
1 CVEs0 on KEV0 new
SE
Sendit
Alstrasoft
–
1 CVEs0 on KEV0 new
ST
Sms Text Messaging Enterprise
Alstrasoft
–
1 CVEs0 on KEV0 new
TA
Text Ads Enterprise
Alstrasoft
–
1 CVEs0 on KEV0 new
WE
Web Email Script Enterprise
Alstrasoft
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2008-6932
SE
Sendit
Alstrasoft
–
5%
Aug 11Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable…
CVE-2008-5751
WE
Web Email Script Enterprise
Alstrasoft
–
1%
Dec 30SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
CVE-2008-5650
WD
Webhost Directory
Alstrasoft
–
1%
Dec 17SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter
CVE-2008-5649
AM
Article Manager Pro
Alstrasoft
–
2%
Dec 17SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter
CVE-2008-3954
FP
Forum Pay Per Post Exchange
Alstrasoft
–
1%
Sep 11SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat…
CVE-2008-3386
VS
Video Share Enterprise
Alstrasoft
–
1%
Jul 30SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different…
CVE-2008-3240
AN
Affiliate Network Pro
Alstrasoft
–
2%
Jul 21SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action
CVE-2008-2902
AP
Askme Pro
Alstrasoft
–
1%
Jun 30SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter
CVE-2008-2857
AS
Askme
Alstrasoft
–
2%
Jun 25AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information
CVE-2008-0440
FP
Forum Pay Per Post Exchange
Alstrasoft
–
2%
Jan 23AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts
CVE-2008-0429
FP
Forum Pay Per Post Exchange
Alstrasoft
–
1%
Jan 23SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a…
CVE-2007-6106
EF
E-friends
Alstrasoft
–
1%
Nov 23SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent…
CVE-2007-5223
AN
Affiliate Network Pro
Alstrasoft
–
1%
Oct 5Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect…
CVE-2007-4077
VS
Video Share Enterprise
Alstrasoft
–
2%
Jul 30Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page,…
CVE-2007-4087
VS
Video Share Enterprise
Alstrasoft
–
1%
Jul 30AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to…
CVE-2007-4086
VS
Video Share Enterprise
Alstrasoft
–
1%
Jul 30Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or…
CVE-2007-4085
AP
Askme Pro
Alstrasoft
–
1%
Jul 30Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the…
CVE-2007-4084
AN
Affiliate Network Pro
Alstrasoft
–
1%
Jul 30Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an…
CVE-2007-4083
AP
Askme Pro
Alstrasoft
–
1%
Jul 30Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to…
CVE-2007-4082
AM
Article Manager Pro
Alstrasoft
–
1%
Jul 30Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid…
CVE-2007-4081
AN
Affiliate Network Pro
Alstrasoft
–
3%
Jul 30Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a)…
CVE-2007-4080
EF
E-friends
Alstrasoft
–
1%
Jul 30Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_id parameter in a people_card…
CVE-2007-4079
ST
Sms Text Messaging Enterprise
Alstrasoft
–
3%
Jul 30Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or…
CVE-2007-4078
TA
Text Ads Enterprise
Alstrasoft
–
2%
Jul 30Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) r parameter to (a)…
CVE-2007-2824
EF
E-friends
Alstrasoft
–
2%
May 22SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal…
CVE-2007-2775
LS
Live Support
Alstrasoft
–
5%
May 21AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain…
CVE-2007-2776
TS
Template Seller
Alstrasoft
–
9%
May 21AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to…
CVE-2007-2777
TS
Template Seller
Alstrasoft
–
6%
May 21Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an…
CVE-2007-2018
VS
Video Share Enterprise
Alstrasoft
–
1%
Apr 12SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter
CVE-2007-2017
VS
Video Share Enterprise
Alstrasoft
–
2%
Apr 12siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request
CVE-2006-6819
WD
Webhost Directory
Alstrasoft
–
2%
Dec 29AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a…
CVE-2006-6818
WD
Webhost Directory
Alstrasoft
–
2%
Dec 29AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config
CVE-2006-6817
WD
Webhost Directory
Alstrasoft
–
1%
Dec 29AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an error message, a different…
CVE-2006-4913
EF
E-friends
Alstrasoft
–
10%
Sep 21Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary…
CVE-2006-4591
TS
Template Seller
Alstrasoft
–
3%
Sep 6Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP…
CVE-2006-4443
VS
Video Share Enterprise
Alstrasoft
–
3%
Aug 29PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2006-2617
WD
Webhost Directory
Alstrasoft
–
2%
May 26(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field…
CVE-2006-2618
WD
Webhost Directory
Alstrasoft
–
1%
May 26Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web…
CVE-2006-2616
WD
Webhost Directory
Alstrasoft
–
1%
May 26SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary…
CVE-2006-2565
AM
Article Manager Pro
Alstrasoft
–
1%
May 24SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the author_id parameter in profile.php and (2)…
CVE-2006-2567
AM
Article Manager Pro
Alstrasoft
–
1%
May 24Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting…
CVE-2006-2566
AM
Article Manager Pro
Alstrasoft
–
1%
May 24Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in the action parameter in a…
CVE-2006-2564
EF
E-friends
Alstrasoft
–
1%
May 24Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog, (2)…
CVE-2006-0222
TS
Template Seller
Alstrasoft
–
2%
Jan 16Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to inject arbitrary web script or HTML via the tempid parameter
CVE-2005-4651
EP
Epay
Alstrasoft
–
1%
Dec 31SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter
CVE-2005-4530
EP
Epay
Alstrasoft
–
2%
Dec 28Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple…
CVE-2005-3796
AN
Affiliate Network Pro
Alstrasoft
–
2%
Nov 24Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number…
CVE-2005-3795
AN
Affiliate Network Pro
Alstrasoft
–
1%
Nov 24Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via (1) the Err parameter…
CVE-2005-3794
AN
Affiliate Network Pro
Alstrasoft
–
1%
Nov 24AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as (1) togateway.php and (2) other unspecified…
CVE-2005-3793
AN
Affiliate Network Pro
Alstrasoft
–
1%
Nov 24Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1)…
CVE-2005-3798
TS
Template Seller
Alstrasoft
–
1%
Nov 24SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field
CVE-2005-3797
TS
Template Seller
Alstrasoft
–
4%
Nov 24PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the config[basepath]…
CVE-2005-3062
EF
E-friends
Alstrasoft
–
2%
Sep 27PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter
CVE-2005-3026
EP
Epay
Alstrasoft
–
4%
Sep 21Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a
CVE-2005-0981
EP
Epay
Alstrasoft
–
2%
May 2Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send…
CVE-2005-0980
EP
Epay
Alstrasoft
–
3%
May 2PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference…