CVE-2007-2018 in Video Share Enterprise

Summary

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 04/12/2007
• Disclosure: 04/12/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-36160
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 6.3
• EPSS: 0.00507
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2018
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2018
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2018/