CVE-2005-3910 | BDVDB-2026-13673 Detail

Description#

merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://pridels0.blogspot.com/2005/11/post-affiliate-pro-20x-vuln.html

Exploit#

No public exploit known

History#

Version 12005-11-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.