CVEvulnerability
CVE-2007-5223
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving (1) admin/backupstart.php, (2) a .sql filename under admin/admin/dump/, (3) a .sql filename in the fl parameter to admin/downloadbackup.php, and (4) a .. (dot dot) in the fl parameter to admin/downloadbackup.php.
Affected configurations
• alstrasoft affiliate network pro 8.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/42342 osvdb.org
- http://osvdb.org/42343 osvdb.org
- http://osvdb.org/42344 osvdb.org
- http://securityreason.com/securityalert/3191 securityreason.com
- http://www.securityfocus.com/archive/1/481206/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25882 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3344 www.vupen.com
- http://osvdb.org/42342 osvdb.org
- http://osvdb.org/42343 osvdb.org
- http://osvdb.org/42344 osvdb.org
- http://securityreason.com/securityalert/3191 securityreason.com
- http://www.securityfocus.com/archive/1/481206/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25882 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3344 www.vupen.com