Unrated severityNVD Advisory· Published Nov 24, 2005· Updated Apr 16, 2026
CVE-2005-3796
CVE-2005-3796
Description
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
Affected products
1- cpe:2.3:a:alstrasoft:affiliate_network_pro:7.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7News mentions
0No linked articles in our index yet.