CVE-2021-41696

An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...

CVE-2021-41696

The CVE-2021-41696 entry concerns Premiumdatingscript 4.2.7.7, where an authentication bypass/account takeover arises from a weak password reset mechanism in requests\user.php. This vulnerability enables bypassing authentication without user interaction,典ically allowing unauthorized access and po...

CVE-2021-41695

An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...

CVE-2021-41695

CVE-2021-41695 affects Premiumdatingscript 4.2.7.7, with the vulnerability occurring via the ip parameter in connect.php. The issue is an SQL injection caused by unsafely handling external input, potentially allowing an attacker to execute arbitrary SQL commands and access sensitive data. The con...

CVE-2021-41694

CVE-2021-41694 affects Premiumdatingscript 4.2.7.7, with an Incorrect Access Control condition exposed through the password change procedure in requests\user.php. The vulnerability enables improper access control to the password change flow, as described in multiple sources (Red Hat, CNVD/CNNVD, ...

CVE-2021-41694

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...

PT-2021-23381

Name of the Vulnerable Software and Affected Versions Premiumdatingscript version 4.2.7.7 Description A reflected Cross Site Scripting XSS issue exists via the aerror description parameter in the assets/sources/instagram.php script. This allows for potential malicious script execution...

CVE-2021-41694: Use of Insufficiently Random Values

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...

PT-2021-23380

Name of the Vulnerable Software and Affected Versions Premiumdatingscript version 4.2.7.7 Description An authentication bypass issue exists due to a weak password reset mechanism in requestsuser.php, potentially allowing account takeover. Recommendations For Premiumdatingscript version 4.2.7.7,...

PT-2021-23379

Name of the Vulnerable Software and Affected Versions Premiumdatingscript version 4.2.7.7 Description An SQL Injection issue exists via the ip parameter in connect.php. Recommendations For Premiumdatingscript version 4.2.7.7, consider restricting access to the connect.php file or validating the i...

CVE-2021-41697: Improper Neutralization of Input During Web Page Generation

A reflected Cross Site Scripting XSS vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerrordescription parameter in assets/sources/instagram.php script...

CVE-2021-41695: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...

PT-2021-23378 · Unknown · Premiumdatingscript

Name of the Vulnerable Software and Affected Versions: Premiumdatingscript version 4.2.7.7 Description: An issue exists due to incorrect access control in the password change procedure. This issue is specifically found in the requestsuser.php file. Recommendations: For Premiumdatingscript version...

CVE-2021-41696: Weak Password Requirements

An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...