Security Advisory

CVE-2005-3796

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-24 11:00:00

Last updated 2024-08-07 23:24:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.

← Browse all CVEs View on cve.org ↗