Post Affiliate Pro

post_affiliate_pro

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Post Affiliate Pro

post_affiliate_pro

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-3910 1Post Affiliate Pro 1Post Affiliate Pro Apr 16, 2026 Nov 30, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerabil...Show more merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability.Show less
CVE-2005-3909 1Post Affiliate Pro 1Post Affiliate Pro Apr 16, 2026 Nov 30, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the sortorder parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2005-3910

1Post Affiliate Pro

Apr 16, 2026

Nov 30, 2005

N/A· v4

N/A· v3

5.0 MEDIUM· v2

merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerabil...Show more

CVE-2005-3909

1Post Affiliate Pro

Apr 16, 2026

Nov 30, 2005

N/A· v4

N/A· v3

7.5 HIGH· v2

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the sortorder parameter.