| Package | Affected versions | Patched versions |
|---|---|---|
| affiliate me | = 5.0.1 |
Affiliate Me version 5.0.1 contains a SQL injection vulnerability in the admin.php endpoint that allows authenticated administrators to manipulate database queries. Attackers can exploit the 'id' parameter with crafted union-based queries to extract sensitive user information including usernames and password hashes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free