Every CVE whose affected-product data names Alstrasoft E-friends, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (6)
CVE-2007-2824 — CVSS 10.0 (critical): SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL…
CVE-2005-3062 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via…
CVE-2006-4913 — CVSS 7.5 (high): Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary…
CVE-2007-6106 — CVSS 7.5 (high): SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands…
CVE-2007-4080 — CVSS 6.4 (medium): Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML…
CVE-2006-2564 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web…