CVE:CVE-2007-4086
CNNVD:CNNVD-200707-525
AlstraSoft Video Share 企业版中存在多个SQL注入漏洞。远程攻击者可以借助(1)对gmembers.php的gid参数,或(2)对(a)uvideos.php,(b)ugroups.php,(c)uprofile.php,(d)ufavour.php,(e)ufriends.php,或(f)uplaylist.php的 the Uid参数，执行任意SQL指令。
solution:Upgrade alstrasoft video_share_enterprise to a higher version than *