CVE-2007-2018

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 6.5/10AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Apr 12, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-20197.5PHP remote file inclusion vulnerability in init.gallery.php in phpGalleryScript 1.0 allows remote attackers to execute arbitrary PHP code viCVE-2007-20209.8Unspecified vulnerability in administration.php in xodagallery allows remote attackers to execute arbitrary code via the cmd parameter. NOTECVE-2007-20217.5Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code viaCVE-2007-20226.8Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensCVE-2007-20237.2USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authenticatiCVE-2007-20246.8Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbiCVE-2007-20257.5Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload aCVE-2007-20267.8The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a craftedCVE-2007-20274.4Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local usersCVE-2007-20285.0Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of CVE-2007-20297.8File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF fiCVE-2007-20304.9lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA