CVE-2023-53917

MEDIUM 6.5CVE-2023-53917 · Published 17/12/2025 · updated 17/06/2026

In short

CVE-2023-53917 is a MEDIUM (CVSS 6.5) vulnerability affecting affiliate me (powerstonegh).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
affiliate me powerstonegh	`= 5.0.1`	No fix yet

Description

Affiliate Me version 5.0.1 contains a SQL injection vulnerability in the admin.php endpoint that allows authenticated administrators to manipulate database queries. Attackers can exploit the 'id' parameter with crafted union-based queries to extract sensitive user information including usernames and password hashes.

References

exploit-db.com/exploits/51468 · Exploit
powerstonegh.com · Product
vulncheck.com/advisories/affiliate-me-sql-injection-vulnerability-via-admin-panel · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free