CVE-2005-3796
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate...
CVE-2005-3796 is a high vulnerability (CVSS 7.5) in Alstrasoft Affiliate Network Pro, published November 24, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.55%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
CVE-2005-3796- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
CVE-2005-3796- Updated
- 2026-11-02
EUVDEUVD-2005-3791No score
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
EUVD-2005-3791- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwrq-r3hj-6cw4No score
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate...
Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this does not cross privilege boundaries and is not a vulnerability.
- Record
GHSA-fwrq-r3hj-6cw4- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
myblog.it-security23.net?postid=5
securityreason.com/securityalert/184
osvdb.org/20890
vupen.com/english/advisories/2005/2455
marc.info?l=bugtraq&m=113209435819541&w=2
secunia.com/advisories/17605
exchange.xforce.ibmcloud.com/vulnerabilities/23076
nvd.nist.gov/vuln/detail/CVE-2005-3796
github.com/advisories/GHSA-fwrq-r3hj-6cw4