← Database

CVE-2005-3909

HIGH CVSS: 7.5 Published: 2005-11-30 Modified: 2026-06-16

Description

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the sortorder parameter.

Affected Platforms

Post Affiliate Pro Post Affiliate Pro

Weakness Type

NVD-CWE-Other

References