Vulnerabilities > CVE-2007-4087 - Unspecified vulnerability in Alstrasoft Video Share Enterprise

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
alstrasoft
NVD
Published: 2007-07-30
Updated: 2024-11-21

Summary

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.

Vulnerable Configurations

Part Description Count
Application
Alstrasoft
1

References