High

DATE	CVE	VULNERABILITY TITLE	RISK
2007-11-23	CVE-2007-6106	SQL Injection vulnerability in Alstrasoft E-Friends SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action. network low complexity alstrasoft CWE-89	7.5
2006-09-21	CVE-2006-4913	Local File Include vulnerability in Alstrasoft E-Friends 4.85 Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. network low complexity alstrasoft	7.5
2005-09-27	CVE-2005-3062	Remote File Include vulnerability in Alstrasoft E-Friends 4.0 PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter. network low complexity alstrasoft	7.5