CVE-2007-4087

State: Published
Severity: Not scored
Published: Jul 30, 2007
Updated: Aug 7, 2024
Reserved: Jul 30, 2007

Description

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

46950vdb-entry
46949vdb-entry
46948vdb-entry
46952vdb-entry
46951vdb-entry
http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html
46947vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.