CVE-2007-4080

概要

参考情報

• lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html · Exploit
• osvdb.org/37266

e-friends のその他の脆弱性

• CVE-2007-6106高 7.5SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands …
• CVE-2007-2824緊急 10.0SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands…
• CVE-2006-4913高 7.5Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary loca…
• CVE-2006-2564中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web scri…
• CVE-2005-3062高 7.5PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via t…