Design/Logic Flaw

The iLove - Free Dating & Chat App aka com.jestadigital.android.ilove application 1.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5648

CVE-2014-5648 affects the Android app “Chat, Flirt & Dating Heart JAUMO” (com.jaumo) at version 2.7.5. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, which enables a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via...

CVE-2014-5593

The affected software is the Christian Dating Cafe Android app (package com.christiancafe.mobile.android), version 1.0.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-5592

CVE-2014-5592 affects the Android app Free Dating Heart COL (com.choiceoflove.dating) version 2.6.1. The root cause is the app failing to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-5649

The CVE-2014-5649 entry concerns the iLove - Free Dating & Chat App (com.jestadigital.android.ilove) for Android, version 1.3.3, where the app does not verify X.509 certificates from SSL servers. This behaves as a certificate validation flaw that can let man-in-the-middle attackers spoof servers ...

SkaDate Lite 2.0 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/env python SkaDate Lite 2.0 Remote Code Execution Exploit Vendor: Skalfa LLC Product web page: http://lite.skadate.com | http://www.skalfa.com Affected version: 2.0 build 7651 Platform version: 1.7.0 build 7906 Summary: SkaDate Lite is a new platform...

SkaDate Lite 2.0 - Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabilities

SkaDate Lite 2.0 Multiple XSRF And Persistent XSS V...

ta3arof [dating] Script Arabic Version - Upload Shell Vulnerability

No description provided by source...

W2B Dating Club - 'browse.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28737/info W2B Dating Club is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

InstantSoftwares Dating Site Login SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27080/info InstantSoftwares Dating Site is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...

PG Dating Pro 1.0 CMS - Multiple Vulnerabilities

No description provided by source...

Dating Gold 3.0.5 header.php int_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute an arbitrary...

Den Dating 9.01 - (searchmatch.php) SQL Injection Vulnerability

No description provided by source. Scripts Den Dating Demo V9.01searchmatch.php SQL Injection Vulnerability Author: nuclear site: http://www.scriptsden.com SQL vuln: http://localhost/path/searchmatch.php?page=2&sortby=username&sortorder=asc&txtgender=M&txtlookgender=F' union select...

osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability

No description provided by source. ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

iScripts CyberMatch 1.0 - Blind SQL Injection Vulnerability

No description provided by source. iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScripts CyberMatch Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

SoftBiz Dating Script 1.0 news_desc.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow a...

V3 Chat - Profiles/Dating Script 3.0.2 - Insecure Cookie Handling Vuln

No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = admin=1; path=/; milw0rm.com 2008-11-08...

skadate dating (rfi/lfi/xss) Multiple Vulnerabilities

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

SkaDate Online 5.0/6.0 - Remote File Disclosure Vulnerability

No description provided by source. SkaDate Online Dating Software Remote File Disclosure Vulnerability Author : SnIpEr-SA.CoM tested verson : 5.0 & 6.0 Homepage : http://www.skadate.com Price: 795.00 Exp : http://www.site.com/member/featuredlist.php?viewmode=../../../../file%00...

Dating Gold 3.0.5 secure.admin.php int_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute an arbitrary...