Alstrasoft » E-friends : Security Vulnerabilities, CVEs, (Sql injection)
SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action.
Max CVSS
7.5
EPSS Score
9.12%
Published
2007-11-23
Updated
2018-10-15
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php.
Max CVSS
10.0
EPSS Score
0.41%
Published
2007-05-22
Updated
2017-10-11
2 vulnerabilities found