Description
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
References
- ADV-2007-1331 vdb-entry
- 23409 vdb-entry
- http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html
- 24836 third-party-advisory
- alstrasoft-vse-msg-sql-injection(33546) vdb-entry