Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-07-30	CVE-2007-4082	Cross-Site Scripting vulnerability in Article Manager Pro Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter. network alstrasoft	4.3
2006-05-24	CVE-2006-2567	Cross-Site Scripting vulnerability in Alstrasoft Article Manager PRO 1.6 Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets (CSS) property of a STYLE attribute of an element. network alstrasoft	4.3
2006-05-24	CVE-2006-2566	Information Disclosure vulnerability in Alstrasoft Article Manager PRO 1.6 Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in the action parameter in a request to mrarticles.php or (2) a login QUERY_STRING to admin.php without any additional parameters, which reveal the path in various error messages. network low complexity alstrasoft	5.0