CVE-2023-53917: Powerstonegh Affiliate Me

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Affiliate Me version 5.0.1 contains a SQL injection vulnerability in the admin.php endpoint that allows authenticated administrators to manipulate database queries. Attackers can exploit the 'id' parameter with crafted union-based queries to extract sensitive user information including usernames and password hashes.

Affected products

• Powerstonegh Affiliate Me: version 5.0.1 only

Published 2025-12-17. Last modified 2026-06-17.