CVE-2006-4895 IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| idevspot nixieaffiliate | <= 1.9 | No fix listed |
References
- 22063 third-party-advisory
- 1616 third-party-advisory
- 20060916 NixieAffiliate all version bypass admin and xss mailing-list
- 20086 exploit vdb-entry