CVE-2005-4037
SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Date published : 2005-12-06
http://www.securityfocus.com/bid/15717
http://pridels0.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html