CVE-2005-4037

Web4Future Affiliate Manager PRO <4.1 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by r0t · textwebappsphp

https://www.exploit-db.com/exploits/26729

View Code ZIP pw:eip

References (6)

[Third Party Advisory] http://pridels0.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/23415

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/15717

[Third Party Advisory, VDB Entry] http://www.osvdb.org/21457

[Third Party Advisory] http://secunia.com/advisories/17883

[Third Party Advisory] http://www.vupen.com/english/advisories/2005/2745

Scores

EPSS 0.0068

EPSS Percentile 71.2%

Classification

Status draft

Timeline

Published Dec 06, 2005

Tracked Since Feb 18, 2026