CVE-2007-2824: Alstrasoft E-Friends

High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php.

Affected products

• Alstrasoft E-Friends: up to and including 4.21

Published 2007-05-22. Last modified 2026-06-16.