Sql injection

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...