← Database

CVE-2005-4037

HIGH CVSS: 7.5 Published: 2005-12-06 Modified: 2026-06-16

Description

SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Affected Platforms

Web4Future Affiliate Manager Professional

Weakness Type

NVD-CWE-Other

References