Sql injection

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...

CVE-2007-4081: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in a merchants/index.php, including the 1 id or 2 msg parameter in a programedit action; the 3 pgmid parameter in an uploadProducts actio...