CVE-2007-5223

no score yetEPSS 1.4%

alstrasoft affiliate network pro: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving (1) admin/backupstart.php, (2) a .sql filename under admin/admin/dump/, (3) a .sql filename in the fl parameter to admin/downloadbackup.php, and (4) a .. (dot dot) in the fl parameter to admin/downloadbackup.php.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2007-10-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

alstrasoft:affiliate_network_pro

References

http://osvdb.org/42342
http://osvdb.org/42343
http://osvdb.org/42344
http://securityreason.com/securityalert/3191
http://www.securityfocus.com/archive/1/481206/100/0/threaded

Check your stack JSON