CVE-2005-3910

The CVE-2005-3910 entry affects Post Affiliate Pro (merchants/index.php) in version 2.0.4 and earlier. When magic_quotes_gpc is disabled, remote attackers can trigger a local file inclusion via the md parameter, likely due to a directory traversal vulnerability. Documented impact is arbitrary loc...

CVE-2005-3909

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the sortorder parameter...

Post Affiliate Pro 2.0.4 - index.php SQL Injection

Post Affiliate Pro 2.0.4 - index.php SQL Injection source: https://www.securityfocus.com/bid/15633/info Post Affiliate Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Post Affiliate Pro 2.0.4 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15633/info Post Affiliate Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...