Best Dating Script - Arbitrary File Upload

======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site : http://www.bestdatingscript.com...

Best Dating Script Shell Upload

======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site : http://www.bestdatingscript.com...

CVE-2009-2790

SQL injection vulnerability in catproducts.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4...

CVE-2009-2790

SQL injection vulnerability in catproducts.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4...

Sql injection

SQL injection vulnerability in catproducts.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4...

CVE-2009-2790

CVE-2009-2790 is a SQL injection vulnerability in SoftBiz Dating Script, specifically in cat_products.php where the cid parameter can be exploited to execute arbitrary SQL commands. The entry notes possible overlap with CVE-2006-3271 and provides a high-severity risk (CVSS v2 base score 7.5). The...

CVE-2009-2790

SQL injection vulnerability in catproducts.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4...

CVE-2009-2790: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in catproducts.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4...

Softbiz Dating Script 1.0 - cat_products.php SQL Injection

Softbiz Dating Script 1.0 - catproducts.php SQL Injection source: https://www.securityfocus.com/bid/35896/info Softbiz Dating Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Softbiz Dating Script 1.0 - 'cat_products.php' SQL Injection

source: https://www.securityfocus.com/bid/35896/info Softbiz Dating Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

Softbiz Dating Script SQL Injection

/ SOFTBIZ Dating Script cid Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection catproducts.php GET : cid : HOST/PATH/catproducts.php?cid=SQL INJ SQL INJ : -1+union+select+1,2,3,4,5--...

Authentication flaw

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5785

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5785

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5785

CVE-2008-5785 affects V3 Chat - Profiles/Dating Script 3.0.2. The vulnerability is a SQL injection in the login mechanism, exploitable via the username and password fields, allowing remote execution of arbitrary SQL commands. The available sources confirm the affected product and the injection ve...

CVE-2008-5784

CVE-2008-5784 affects V3 Chat – Profiles/Dating Script 3.0.2. The root cause is an authentication bypass: setting the admin cookie to 1 grants remote attackers administrative access. Impact is described as remote authentication bypass with full admin privileges (per the sources). There is no expl...

CVE-2008-5784

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5785: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5784: Reliance on Cookies without Validation and Integrity Checking

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...