Description
AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as (1) togateway.php and (2) other unspecified scripts.
References
- http://myblog.it-security23.net/?postid=5
- affiliate-network-information-disclosure(23078) vdb-entry
- ADV-2005-2455 vdb-entry
- 20051115 Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS mailing-list
- 17605 third-party-advisory