Multiple SQL Injection Vulnerabilities in AlstraSoft Affiliate Network Pro 7.2
CVE-2005-3793 · HIGH Severity
AV:N/AC:L/AU:N/C:P/I:P/A:P
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1) username or (2) password to admin/admin_validate_login, or the (3) login, (4) password, and (5) flag parameters to login_validate.php.
Learn more about our Cis Benchmark Audit For Microsoft Sql Server.