Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2005-12-31	CVE-2005-4651	SQL-Injection vulnerability in Alstrasoft Epay 2.0 SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter. network low complexity alstrasoft	6.4
2005-12-28	CVE-2005-4530	HTML Injection vulnerability in Alstrasoft Epay 3.0 Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm, (2) card.htm, (3) bank.htm, (4) subscriptions.htm, (5) send.htm, (6) request.htm, (7) forgot.htm, (8) escrow.htm, (9) donations.htm, and (10) products.htm. network high complexity alstrasoft	5.1
2005-09-21	CVE-2005-3026	Directory Traversal vulnerability in EPay Pro Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. network low complexity alstrasoft	5.0
2005-05-02	CVE-2005-0981	Cross-Site Scripting vulnerability in Alstrasoft Epay 2.0 Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter. network alstrasoft	4.3