Login Request a demo
Unscored severity · published Nov 24, 2005
CVE-2005-3793
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1)…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1) username or (2) password to admin/admin_validate_login, or the (3) login, (4) password, and (5) flag parameters to login_validate.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Affiliate Network Pro · Alstrasoft
7.2 · source: NVD
Affected product
AN
Affiliate Network Pro
Alstrasoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3793
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3793
marc.info
http://marc.info/?l=bugtraq&m=113209435819541&w=2
myblog.it-security23.net
http://myblog.it-security23.net/?postid=5
Vendor Advisory
http://secunia.com/advisories/17605/
www.osvdb.org
http://www.osvdb.org/20889
www.osvdb.org
http://www.osvdb.org/20893
www.vupen.com
http://www.vupen.com/english/advisories/2005/2455
More from Affiliate Network Pro
–
CVE-2008-3240
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action
–
CVE-2007-5223
Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect…
–
CVE-2007-4081
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a)…
–
CVE-2007-4084
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an…
–
CVE-2005-3794
AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as (1) togateway.php and (2) other unspecified…