3 matches found
Sql injection
SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL commands via the umprofstatus parameter...
Sql injection
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...
CVE-2005-3909
CVE-2005-3909 describes an SQL injection vulnerability in the merchants/index.php file of Post Affiliate Pro 2.0.4 and earlier . The vulnerability allows remote attackers to inject arbitrary SQL via the sortorder parameter, potentially impacting confidentiality, integrity, and availability. The c...