• info
• discussion
• exploit
• solution
• references

AlstraSoft E-Friends Remote File Include Vulnerability

AlstraSoft E-Friends is affected by a remote file include vulnerability.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

AlstraSoft E-Friends 4.0 is reported to be affected. Other versions may be vulnerable as well.