CVE-2007-4086: Alstrasoft Video Share Enterprise

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.

Affected products

• Alstrasoft Video Share Enterprise: any version

Published 2007-07-30. Last modified 2026-06-16.