CVE		CVE-2007-2018
Статус		Candidate
Описание		SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Важность		Medium
CVSS score		4,2
CVSS vector		(AV:R/AC:L/Au:R/C:P/I:P/A:P/B:N)
Phase		Assigned (12.04.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2018
References		BID : 23409
		FRSIRT : ADV-2007-1331
		MISC : http://pridels.blogspot.com/2007/03/alstrasoft-vid...
		SECUNIA : 24836
		XF : alstrasoft-vse-msg-sql-injection(33546)
SecurityVulns:		Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )