CVE-2007-4084 Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to merchants...
HighCVSS 7.5
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to merchants/index.php and possibly (2) the rowid parameter to merchants/temp.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alstrasoft affiliate network pro | = 8.0 | No fix listed |
References
- lostmon.blogspot.com exploit
- 37869 vdb-entry
- 37870 vdb-entry
- 25026 exploit vdb-entry