PatchTheCVEalstrasoft vulnerabilities
Recent CVEs affecting alstrasoft products. 5 tracked.
alstrasoft has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-08-11. Highest priority: CVE-2008-5649 (score 60/100).
- CVE-2008-6932 HIGH 7.5 MITIGATE Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to
- CVE-2008-5751 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attacke
- CVE-2008-5650 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to
- CVE-2008-5649 HIGH 10.0 DOWNGRADE SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers t
- CVE-2008-3954 HIGH 7.5 MITIGATE SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to
FAQ
How do I fix alstrasoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is alstrasoft being exploited right now?
None of the tracked alstrasoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which alstrasoft CVE should I patch first?
CVE-2008-5649 currently ranks highest (60/100): SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers t.