CVE-2008-3240

CVE-2008-3240 is a SQL injection vulnerability in the AlstraSoft Affiliate Network Pro, specifically in the directory action implemented by index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the pgm parameter. Root cause: improper input handling...