{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-07-22T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2008-11-15T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "37877", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37877"}, {"name": "37873", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37873"}, {"name": "37874", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37874"}, {"name": "37875", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37875"}, {"tags": ["x_refsource_MISC"], "url": "http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html"}, {"name": "37876", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37876"}, {"name": "37878", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37878"}, {"name": "37872", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37872"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4086", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "37877", "refsource": "OSVDB", "url": "http://osvdb.org/37877"}, {"name": "37873", "refsource": "OSVDB", "url": "http://osvdb.org/37873"}, {"name": "37874", "refsource": "OSVDB", "url": "http://osvdb.org/37874"}, {"name": "37875", "refsource": "OSVDB", "url": "http://osvdb.org/37875"}, {"name": "http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html", "refsource": "MISC", "url": "http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html"}, {"name": "37876", "refsource": "OSVDB", "url": "http://osvdb.org/37876"}, {"name": "37878", "refsource": "OSVDB", "url": "http://osvdb.org/37878"}, {"name": "37872", "refsource": "OSVDB", "url": "http://osvdb.org/37872"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4086", "datePublished": "2007-07-30T17:00:00", "dateReserved": "2007-07-30T00:00:00", "dateUpdated": "2008-11-15T10:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:alstrasoft:video_share_enterprise:*:*:*:*:*:*:*:*", "matchCriteriaId": "B07976EA-E4BC-4990-B45E-21D0FCFC1964", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en AlstraSoft Video Share Enterprise permiten a atacantes remotos ejecutar comandos SQL de su elecci\u00f3n mediante (1) el par\u00e1metro gid de gmembers.php, o (2) el par\u00e1metro UID de (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, o (f) uplaylist.php."}], "id": "CVE-2007-4086", "lastModified": "2008-11-15T06:55:17.920", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-07-30T17:30:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37872"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37873"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37874"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37875"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37876"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37877"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/37878"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}