SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Video_share_enterprise | Alstrasoft | * | 4.1 (including) |
| Video_share_enterprise | Alstrasoft | * | 4.2 (including) |
| Video_share_enterprise | Alstrasoft | * | 4.3 (including) |