CVE-2005-3796

Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.

• http://marc.info/?l=bugtraq&m=113209435819541&w=2
• http://myblog.it-security23.net/?postid=5
• http://secunia.com/advisories/17605/Vendor Advisory
• http://securityreason.com/securityalert/184
• http://www.osvdb.org/20890
• http://www.vupen.com/english/advisories/2005/2455
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23076
• http://marc.info/?l=bugtraq&m=113209435819541&w=2
• http://myblog.it-security23.net/?postid=5
• http://secunia.com/advisories/17605/Vendor Advisory
• http://securityreason.com/securityalert/184
• http://www.osvdb.org/20890
• http://www.vupen.com/english/advisories/2005/2455
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23076

Published

Nov 24, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3790Multiple cross-site scripting (XSS) vulnerabilities in act_n…
• CVE-2005-3791HTTP response splitting vulnerability in phpAdsNew and phpPg…
• CVE-2005-3792Multiple SQL injection vulnerabilities in the Search module …
• CVE-2005-3793Multiple SQL injection vulnerabilities in AlstraSoft Affilia…
• CVE-2005-3794AlstraSoft Affiliate Network Pro 7.2 allows remote attackers…
• CVE-2005-3795Multiple cross-site scripting (XSS) vulnerabilities in Alstr…
• CVE-2005-3797PHP remote file inclusion vulnerability in payment_paypal.ph…
• CVE-2005-3798SQL injection vulnerability in admin/index.php in AlstraSoft…
• CVE-2005-3799phpBB 2.0.18 allows remote attackers to obtain sensitive inf…
• CVE-2005-3800Macromedia Contribute Publishing Server (CPS) before 1.11 us…
• CVE-2005-3801CounterPane PasswordSafe 1.x and 2.x allows local users to t…
• CVE-2005-3802Belkin F5D7232-4 and F5D7230-4 wireless routers with firmwar…