CVE-2005-3796
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate...
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
Exploit likelihood
What each source reports
NVD Score used
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
CVE-2005-3796- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
CVE-2005-3796- Updated
- 2026-11-02
EUVDEUVD-2005-3791 No score
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
EUVD-2005-3791- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwrq-r3hj-6cw4 No score
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate...
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
GHSA-fwrq-r3hj-6cw4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3796 is a high vulnerability (CVSS 7.5) in Alstrasoft Affiliate Network Pro, published November 24, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
References
myblog.it-security23.net?postid=5
securityreason.com/securityalert/184
osvdb.org/20890
vupen.com/english/advisories/2005/2455
marc.info?l=bugtraq&m=113209435819541&w=2
secunia.com/advisories/17605
exchange.xforce.ibmcloud.com/vulnerabilities/23076
nvd.nist.gov/vuln/detail/CVE-2005-3796
github.com/advisories/GHSA-fwrq-r3hj-6cw4