• info
• discussion
• exploit
• solution
• references

AlstraSoft E-Friends Pack Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof of concept is available:

• /data/vulnerabilities/exploits/e-friends_poc.txt