Secunia

Some vulnerabilities have been reported in VidShare Pro, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks or compromise a vulnerable system.

1) Input passed to the "searchtxt" parameter in search.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) Input passed to the "catid" parameter in listing_video.php is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

3) The application does not properly check file extensions of uploaded image files, which can be exploited to upload and execute arbitrary PHP code.

Solution
Filter malicious characters or character sequences in a proxy. Disable the file upload functionality.

Provided and/or discovered by
1,2) Snakespc
3) Cyb3r-1sT

Changelog
Further details available in Customer Area

Original Advisory
1,2) http://milw0rm.com/exploits/8737
3) http://milw0rm.com/exploits/8730

Deep Links
Links available in Customer Area