Tell A Friend Script

tell_a_friend_script

Vendor: Stadtaus • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2005-0679

1Stadtaus

1Tell A Friend Script

Apr 16, 2026

May 2, 2005

N/A· v4

N/A· v3

7.5 HIGH· v2

PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. NOTE: it was later reported that 2.4 is also affected.Show less