CVE Tools
Track your stack

Alstrasoft

55 CVEs tracked since 2005. Since Apr 2005, none of them reached CISA KEV.

Alstrasoft CVEs per month

Apr 2005 to Dec 2008. Point at a month, or focus the strip and use the arrow keys.
Alstrasoft CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0420
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-08null or fewer
2005-0920
2005-10null or fewer
2005-1160
2005-1210
2006-0120
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-0570
2006-06null or fewer
2006-07null or fewer
2006-0810
2006-0920
2006-10null or fewer
2006-11null or fewer
2006-1230
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-0420
2007-0540
2007-06null or fewer
2007-07110
2007-08null or fewer
2007-09null or fewer
2007-1010
2007-1110
2007-12null or fewer
2008-0120
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-0620
2008-0720
2008-08null or fewer
2008-0910
2008-10null or fewer
2008-11null or fewer
2008-1230

Products

The products that kept showing up in Alstrasoft's monthly top three, with their CVEs summed over those months.

  1. Affiliate Network Pro84 months
  2. Video Share Enterprise74 months
  3. Webhost Directory73 months
  4. Template Seller64 months
  5. E-friends55 months
  6. Epay54 months
  7. Article Manager Pro42 months
  8. Askme Pro32 months
  9. Forum Pay Per Post Exchange32 months
  10. Askme11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Alstrasoft.

  1. CVE-2008-6932Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing...7.5
  2. CVE-2008-5751SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action.7.5
  3. CVE-2008-5649SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter.10.0
  4. CVE-2008-5650SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter.7.5
  5. CVE-2008-3954SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action.7.5
  6. CVE-2008-3386SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-...7.5
  7. CVE-2008-3240SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action.7.5
  8. CVE-2008-2902SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to for...7.5
  9. CVE-2008-2857AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.5.0
  10. CVE-2008-0440AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts.5.0
  11. CVE-2008-0429SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action.7.5
  12. CVE-2007-6106SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action.7.5
  13. CVE-2007-5223Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or ot...6.8
  14. CVE-2007-4084Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to mercha...7.5
  15. CVE-2007-4086Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parame...6.8

The record

Peak rank
#5 in Jul 2007
Busiest month shown
Jul 2007, 11 CVEs
Months with a KEV entry
0 since Apr 2005
Monthly snapshots
19 since 2005
Alstrasoft's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store