Unscored CVE-2006-4895 EUVD-2006-4882GHSA-p3c8-wx4r-4g79

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.

Published Sep 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.

References

22063 third-party-advisory
20060916 NixieAffiliate all version bypass admin and xss mailing-list
20086 vdb-entry
1616 third-party-advisory