VYPR

Affiliate Me

by Powerstonegh

CVEs (1)

  • CVE-2023-53917MedDec 17, 2025
    risk 0.42cvss 6.5epss 0.00

    Affiliate Me version 5.0.1 contains a SQL injection vulnerability in the admin.php endpoint that allows authenticated administrators to manipulate database queries. Attackers can exploit the 'id' parameter with crafted union-based queries to extract sensitive user information…