Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AlstrasoftE-friends

3 matches found

CVE
CVE•added 2007/11/23 8:46 p.m.•48 views

CVE-2007-6106

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action.

7.5CVSS8.4AI score0.02337EPSS
CVE
CVE•added 2005/09/27 7:3 p.m.•41 views

CVE-2005-3062

PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter.

7.5CVSS8AI score0.00888EPSS
CVE
CVE•added 2006/09/21 12:7 a.m.•32 views

CVE-2006-4913

Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. (dot dot) sequence and trailing null (%00) byte in the lang parameter, as demonstrated by injecting PHP co...

7.5CVSS7.9AI score0.06339EPSS