CVE-2007-4080

The CVE-2007-4080 entry documents a cross-site scripting (XSS) vulnerability in the AlstraSoft E-Friends application, specifically in index.php. The issue is triggered via the p_id parameter in the people_card action, enabling remote attackers to inject arbitrary web script or HTML. Affected comp...