EUVD-2006-3280

Malware in sbrugna...

EUVD-2006-3281

Malware in sbrugna...

EUVD-2006-3279

Malware in sbrugna...

Dating Agent PRO Cross Site Scripting

======================================================================================== | Title : Dating Agent PRO Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 2 | High : 1...

CVE-2006-3283

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the 1 pid parameter in picture.php, 2 mid parameter in mem.php, and the 3 sex and 4 relationship parameters in search.php...

CVE-2006-3282

requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...

CVE-2006-3284

Cross-site scripting XSS vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in 1 webmaster/index.php and 2 search.php...

CVE-2006-3284

CVE-2006-3284 describes an XSS vulnerability in Dating Agent PRO 4.7.1. Affected component: login parameter in webmaster/index.php and search.php, enabling injection of arbitrary web script/HTML. The NVD entry records CVSSv2 base score 2.6 (LOW) with network attack, high complexity, no authentica...

CVE-2006-3283

CVE-2006-3283 describes an SQL injection vulnerability in Dating Agent PRO 4.7.1. The flaw allows remote attackers to inject arbitrary SQL via specific parameters: pid (picture.php), mid (mem.php), and sex/relationship (search.php). This can lead to unauthorized database access or manipulation as...

CVE-2006-3282

requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...

CVE-2006-3283

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the 1 pid parameter in picture.php, 2 mid parameter in mem.php, and the 3 sex and 4 relationship parameters in search.php...

CVE-2006-3284

Cross-site scripting XSS vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in 1 webmaster/index.php and 2 search.php...

Dating Agent PRO 4.7.1 Vulnerability

Dating Agent PRO 4.7.1 http://www.datetopia.com/datingagent/ -------------------------------------- ------------- PHPinfo page /requirements.php ------------- SQL injection ------------- http://target.xx/picture.php?pid=1SQL http://target.xx/mem.php?mid=1SQL...