Multiple SQL Injection Vulnerabilities in AlstraSoft Affiliate Network Pro 7.2

Multiple SQL Injection Vulnerabilities in AlstraSoft Affiliate Network Pro 7.2

CVE-2005-3793 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1) username or (2) password to admin/admin_validate_login, or the (3) login, (4) password, and (5) flag parameters to login_validate.php.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.