VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 12, 2007· Updated Jun 16, 2026

CVE-2007-2018

CVE-2007-2018

Description

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

Affected products

2
  • Alstrasoft/Video Share Enterprise2 versions
    cpe:2.3:a:alstrasoft:video_share_enterprise:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:alstrasoft:video_share_enterprise:*:*:*:*:*:*:*:*range: <=4.1
    • (no CPE)

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.