Description
SQL injection and cross-site scripting (XSS) vulnerabilities exist in Affiliate Market version 0.1 BETA. Multiple parameters lack proper input validation.
Impact
SQL injection allows attackers to extract and manipulate the affiliate database, potentially accessing financial data and user credentials. XSS enables session hijacking.
Solution
Apply parameterized queries and output encoding. This is BETA software and should not be used in production.