Vulnerabilities

TI-2009-01665 CVE-2009-1750 · GHSA-885r-4x2c-crw3

Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users…

LOW 32

Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02722 Published 2009-05-21 No fix listed

TI-2009-01650 CVE-2009-1735 · GHSA-8mgh-wpwx-c2hm

Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01692 Published 2009-05-20 No fix listed CWE-79

TI-2009-01649 CVE-2009-1734 · GHSA-rf9h-34qf-2cvw

SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers…

LOW 35

SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL commands via the catid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01133 Published 2009-05-20 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users…

Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote…

SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers…