CVE-2005-3062

Description

PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter.

Affected products

• alstrasoft / e-friends4.0 – 4.0

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/16941/
• MISChttp://securityreason.com/securityalert/22
• MAILING_LISThttp://marc.info/?l=bugtraq&m=112758134227112&w=2
• MISChttp://www.securityfocus.com/bid/14932