Alstrasoft

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

Alstrasoft records in CISA KEV

No Alstrasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate Network Pro 8 records LOW Video Share Enterprise 7 records LOW Webhost Directory 7 records LOW E-friends 6 records MEDIUM Template Seller 6 records MEDIUM Article Manager Pro 5 records MEDIUM Epay 5 records LOW Askme Pro 3 records LOW

Records

5 records in Epay · all components

TI-2005-00920 CVE-2005-0980 · GHSA-qpmf-8vwm-rgrx

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows…

LOW 38

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contain…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02675 Published 2005-04-05 No fix listed

TI-2005-04381 CVE-2005-4651 · GHSA-6x59-f29p-7vf6

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote…

LOW 31

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01058 Published 2006-01-14 No fix listed

TI-2005-02858 CVE-2005-3026 · GHSA-7p8m-54qp-xvw9

Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier…

LOW 29

Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03628 Published 2005-09-21 No fix listed

TI-2005-04273 CVE-2005-4530 · GHSA-r5f7-f8rm-h8x4

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02155 Published 2005-12-28 No fix listed

TI-2005-00921 CVE-2005-0981 · GHSA-w6h7-mcf3-p246

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01754 Published 2005-04-05 No fix listed

Open these records in search →

Critical	4
High	24
Medium	28
Low	0
No CVSS	0