Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a) merchants/index.php, including the (1) id or (2) msg parameter in a programedit action; the (3) pgmid parameter in an uploadProducts action; the (4) d, (5) m, or (6) y parameter in a daily action; the (7) err parameter in a ProgramReport action; the (8) i, (9) txtto, (10) txtfrom, or (11) programs parameter in a LinkReport action; or the (12) msg parameter in an add_money action; and one vector in (b) merchants/temp.php using (13) the rowid parameter. NOTE: vector 7 might overlap CVE-2005-3795.1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AlstraSoft Affiliate Network Pro 多个输入验证漏洞
Vulnerability Description
AlstraSoft Affiliate Network Pro中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(a)merchants/index.php,包括(1)id或(2)一个programedit操作的msg参数;(3)一个uploadProducts操作中的pgmid参数中的向量;(4)d,(5)m,或(6)一个daily操作中的y参数;(7)一个ProgramReport操作中的err参数;(8)i,(9)txtto,(10)txtfrom,或(11)一个LinkReport参数中的progr
CVSS Information
N/A
Vulnerability Type
N/A