E-friends@4.0 Security Vulnerabilities and Issues — E-friends@4.0 CVE List

Lucene search

AlstrasoftE-friends4.0

3 matches found

CVE•added 2005/09/27 7:3 p.m.•41 views

CVE-2005-3062

PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter.

7.5CVSS8AI score0.00888EPSS

CVE•added 2006/05/24 8:2 p.m.•38 views

CVE-2006-2564

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog, (2) posting a listing, (3) posting an event, (4) adding comments, or (5) sending a message.

4.3CVSS5.7AI score0.00527EPSS

CVE•added 2007/07/30 5:30 p.m.•34 views

CVE-2007-4080

Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_id parameter in a people_card action. NOTE: this might overlap CVE-2006-2564.

6.4CVSS5.7AI score0.00527EPSS