VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 30, 2007· Updated Jun 16, 2026

CVE-2007-4077

CVE-2007-4077

Description

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page, (3) viewkey, or (4) viewtype parameter to (a) view_video.php; the (5) next parameter to (b) signup.php; the (6) search_id parameter to (c) search_result.php; the (7) category or (8) page parameter to (d) video.php; the (9) receiver parameter to (e) compose.php; the (10) catgy parameter to (f) groups.php; the (11) channelname parameter to (g) siteadmin/channels.php; or the (12) uname parameter to (h) siteadmin/muser.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Alstrasoft/Video Share Enterprise2 versions
    cpe:2.3:a:alstrasoft:video_share_enterprise:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:alstrasoft:video_share_enterprise:*:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.