CVE-2005-3796

Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code…

published November 24, 2005

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01548 · 74.8th percentile
Published
2005-11-24T11:00Z
EPSS history
Timeline
  • 24 NOV 11:00Z
    Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code…
    cvelistv5