CVE-2008-3240: Alstrasoft Affiliate Network Pro

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action.

Affected products

• Alstrasoft Affiliate Network Pro: any version

Published 2008-07-21. Last modified 2026-06-16.