CVE-2005-3796

CVE-2005-3796 describes a direct static code injection vulnerability in admin_options_manage.php of AlstraSoft Affiliate Network Pro 7.2, allowing attackers to execute arbitrary PHP code via the "number" parameter. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), this vulnerability is considered high severity, indicating it can be exploited remotely with low complexity and potentially lead to full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. The original report is unclear on whether administrator privileges are required for exploitation, which would significantly impact its practical severity.