Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 05/10/2007 Updated: 15/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote malicious users to include local files and have other unspecified impact, related to incorrect input validation or other defects involving (1) admin/backupstart.php, (2) a .sql filename under admin/admin/dump/, (3) a .sql filename in the fl parameter to admin/downloadbackup.php, and (4) a .. (dot dot) in the fl parameter to admin/downloadbackup.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
alstrasoft affiliate network pro 8.0

CWE-264 http://www.securityfocus.com/bid/25882 http://securityreason.com/securityalert/3191 http://osvdb.org/42344 http://osvdb.org/42342 http://osvdb.org/42343 http://www.vupen.com/english/advisories/2007/3344 http://www.securityfocus.com/archive/1/481206/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-5223

Vulnerability Summary

References

Vulmon Search

About

Products

Connect