CVE-2008-4602: Qualityunit Post Affiliate Pro

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.

Affected products

• Qualityunit Post Affiliate Pro: version 2.0 only

Published 2008-10-18. Last modified 2026-06-16.