CVE-2008-3240

CVE-2008-3240 is a SQL injection vulnerability in the AlstraSoft Affiliate Network Pro, specifically in the directory action implemented by index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the pgm parameter. Root cause: improper input handling...

CVE-2005-3793

The CVE-2005-3793 entry describes SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2. The affected component is the admin login and login_validate.php endpoints, where the (1) username, (2) password, (3) login, (4) password, and (5) flag parameters can be manipulated to bypass ...

CVE-2005-3795

CVE-2005-3795 affects AlstraSoft Affiliate Network Pro 7.2 and involves multiple cross-site scripting (XSS) vulnerabilities. The affected parameters are (1) Err in admin/index.php and (2) firstname and (3) lastname in index.php. These allow remote attackers to inject arbitrary web script or HTML....

CVE-2005-3796

CVE-2005-3796 affects AlstraSoft Affiliate Network Pro 7.2. A vulnerability in admin_options_manage.php allows direct static code injection via the number parameter, enabling arbitrary PHP code execution. Root cause: inadequate input handling/validation in the affected PHP file. Impact per public...

CVE-2007-4084

The CVE-2007-4084 entry concerns multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro, allowing remote attackers to execute arbitrary SQL commands via user-supplied input in (1) the pgmid parameter of an uploadProducts action (merchants/index.php) and (2) the rowid parameter...

CVE-2007-5223

CVE-2007-5223 relates to multiple unspecified vulnerabilities in the AlstraSoft Affiliate Network Pro. The root cause involves input validation defects that can allow an attacker to influence file handling actions, potentially leading to local file inclusion. Affected components include (1) admin...

CVE-2005-3794

CVE-2005-3794 concerns AlstraSoft Affiliate Network Pro 7.2, where remote attackers can disclose sensitive information by issuing direct requests to scripts such as togateway.php (and other unspecified scripts). The linked sources consistently describe information disclosure without detailing spe...

CVE-2007-4081

This entry (CVE-2007-4081) concerns multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro. The affected components are the PHP actions in merchants/index.php (notably parameters: id, msg in programedit; pgmid in uploadProducts; d, m, y in daily; err in ProgramRep...