There are scripts available that can be added to a web page that will allow the web site to import the address book contacts from the visitor's computer. Here is a link to once such application called Getmycontacts:
http://www.getmycontacts.com/
It could be possible that a web site would have an "Invite my friends" button on a member's page. The person may click on it expecting to be asked for the friend's e-mail address but the site just imports all the addresses and sends invitations. This happened to my wife a while ago when she joined a book exchange club.