CVE-2007-4087

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category…

published July 30, 2007

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01399 · 72.1th percentile
Published
2007-07-30T17:00Z
EPSS history
Timeline
  • 30 JUL 17:00Z
    AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category…
    cvelistv5