CVEvulnerability

CVE-2005-3793

7.5 HIGH Published 2005-11-24 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-11-24
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1) username or (2) password to admin/admin_validate_login, or the (3) login, (4) password, and (5) flag parameters to login_validate.php.

Affected configurations

• alstrasoft affiliate network pro 7.2

References

http://marc.info/?l=bugtraq&m=113209435819541&w=2 marc.info
http://myblog.it-security23.net/?postid=5 myblog.it-security23.net
http://secunia.com/advisories/17605/ Vendor Advisory
http://www.osvdb.org/20889 www.osvdb.org
http://www.osvdb.org/20893 www.osvdb.org
http://www.vupen.com/english/advisories/2005/2455 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23073 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=113209435819541&w=2 marc.info
http://myblog.it-security23.net/?postid=5 myblog.it-security23.net
http://secunia.com/advisories/17605/ Vendor Advisory
http://www.osvdb.org/20889 www.osvdb.org
http://www.osvdb.org/20893 www.osvdb.org
http://www.vupen.com/english/advisories/2005/2455 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23073 exchange.xforce.ibmcloud.com