CVE:CVE-2005-3909
CNNVD:CNNVD-200511-507
Post Affiliate Pro是一款功能强大的联合管理系统。
Post Affiliate Pro 2.0.4及更早版本的merchants/index.php存在SQL注入漏洞，可让远程攻击者通过sortorder参数执行任意SQL命令。
solution:Upgrade post_affiliate_pro post_affiliate_pro to a higher version than 2.0.4,and avoid the version (,2.0.4]