Affiliate Network Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:alstrasoft:affiliate_network_pro:7.2:*:*:*:*:*:*:*
part: a version: 7.2 update: *
| Vendor | Alstrasoft (a4963e9f-6c7e-59f9-91ba-7bec89015e6d) |
|---|---|
| Product | Affiliate Network Pro (41e512f9-944b-586a-8068-777ceb3b92bc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-3796 |
vulnerable | 2026-06-03 14:27:11.353278 |
Details available
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.310Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3795 |
vulnerable | 2026-06-03 14:27:11.352950 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via (1) the Err parameter in admin/index.php and the (2) firstname and (3) lastname parameters in index.php.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.365Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3794 |
vulnerable | 2026-06-03 14:27:11.352607 |
Details available
AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as (1) togateway.php and (2) other unspecified scripts.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3793 |
vulnerable | 2026-06-03 14:27:11.352212 |
Details available
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1) username or (2) password to admin/admin_validate_login, or the (3) login, (4) password, and (5) flag parameters to login_validate.php.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.213Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.