Sql injection

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL commands via the umprofstatus parameter...

CVE-2008-5630: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL commands via the umprofstatus parameter...

Sql injection

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...

CVE-2007-4081: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in a merchants/index.php, including the 1 id or 2 msg parameter in a programedit action; the 3 pgmid parameter in an uploadProducts actio...

CVE-2005-3909

CVE-2005-3909 describes an SQL injection vulnerability in the merchants/index.php file of Post Affiliate Pro 2.0.4 and earlier . The vulnerability allows remote attackers to inject arbitrary SQL via the sortorder parameter, potentially impacting confidentiality, integrity, and availability. The c...

CVE-2005-3910: Undefined Security Weakness

merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magicquotesgpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability...

CVE-2005-3909: Undefined Security Weakness

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the sortorder parameter...