CVE-2007-4086

Description

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.

References

http://osvdb.org/37878

http://osvdb.org/37877

http://osvdb.org/37876

http://osvdb.org/37875

http://osvdb.org/37874

http://osvdb.org/37873

http://osvdb.org/37872

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS