Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-4081. PoCs published by Lostmon.
AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in AlstraSoft Affiliate Network Pro, including XSS and SQL injection. It includes a sample XSS payload but lacks executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a) merchants/index.php, including the (1) id or (2) msg parameter in a programedit action; the (3) pgmid parameter in an uploadProducts action; the (4) d, (5) m, or (6) y parameter in a daily action; the (7) err parameter in a ProgramReport action; the (8) i, (9) txtto, (10) txtfrom, or (11) programs parameter in a LinkReport action; or the (12) msg parameter in an add_money action; and one vector in (b) merchants/temp.php using (13) the rowid parameter. NOTE: vector 7 might overlap CVE-2005-3795.1.
Exploits (2)
The provided text describes multiple input-validation vulnerabilities in AlstraSoft Affiliate Network Pro, including XSS and SQL injection. It includes a sample XSS payload but lacks executable exploit code.
The exploit demonstrates multiple XSS vulnerabilities in AlstraSoft Affiliate Network Pro by injecting script tags into various URL parameters. It does not include executable code but provides clear examples of malicious input.