CVE-2006-2564

概要

参考情報

• secunia.com/advisories/20229 · Vendor Advisory
• securityreason.com/securityalert/954
• securityfocus.com/archive/1/434846/100/0/threaded
• securityfocus.com/bid/18079
• vupen.com/english/advisories/2006/1944
• exchange.xforce.ibmcloud.com/vulnerabilities/26650

e-friends のその他の脆弱性

• CVE-2007-6106高 7.5SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands …
• CVE-2007-4080中 6.4Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML vi…
• CVE-2007-2824緊急 10.0SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands…
• CVE-2006-4913高 7.5Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary loca…
• CVE-2005-3062高 7.5PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via t…