CVE-2009-4739

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...

CVE-2009-4739

CVE-2009-4739 affects SkaDate Dating (PHP). The vulnerability is a PHP remote file inclusion in index.php, exploitable via the language_id parameter to execute arbitrary PHP code from an attacker-supplied URL. The issue can also be leveraged for arbitrary local file inclusion through directory tr...

CVE-2009-4739

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...

CVE-2009-4739: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...

CVE-2010-1096

Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the 1 txtgender and 2 txtlookgender parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

Sql injection

Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the 1 txtgender and 2 txtlookgender parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2010-1096

Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the 1 txtgender and 2 txtlookgender parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2010-1096

CVE-2010-1096 concerns SQL injection in ScriptsFeed Dating Software. The vulnerability is in searchmatch.php where the parameters txtgender and txtlookgender can be exploited by remote attackers to execute arbitrary SQL commands. Multiple databases (NVD, Red Hat advisory, CVE list) reference this...

CVE-2010-1096: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the 1 txtgender and 2 txtlookgender parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

Wazzum Dating Software remote shell upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== Wazzum Dating Software remote shell upload Vulnerability ========================================================...

Wazzum Dating Software Shell Upload

======================================================================================== | Title Wazzum Dating Software Mullti Vulnerability | Author El-Kahina | email please forgive me | | Web Site www.h4kz.com | Script http://hotfile.com/dl/32756801/c6b4b5e/Wazzum.zip.html | Tested on Lunix...

osDate Remote File Inclusion

======================================================================================== o osDate Remote File Inclusion Vulnerabilities Software : osDate dating and matchmaking script version 2.1.9 mostly affected Vendor : http://www.tufat.com/ Download : http://www.tufat.com/sfreedatingsystem.ht...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/auth.php and 2 fileuploader.php...

CVE-2009-4700

Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. dot dot in the layout parameter...

CVE-2009-4699

Multiple cross-site scripting XSS vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/auth.php and 2 fileuploader.php...

Directory traversal

Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. dot dot in the layout parameter...

CVE-2009-4699

CVE-2009-4699 affects SkaDate Dating and describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via PATH_INFO to (1) admin/auth.php and (2) file_uploader.php. The provided documents confirm the affected product and vulnerab...

CVE-2009-4700

The CVE-2009-4700 entry concerns SkaDate Dating. Affected component: index.php handling the layout parameter. Root cause: directory traversal via a .. sequence in layout, enabling remote attackers to read arbitrary files. The NVD/NVD-derived records confirm this behavior and report a medium base ...

CVE-2009-4699

Multiple cross-site scripting XSS vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/auth.php and 2 fileuploader.php...

CVE-2009-4700

Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. dot dot in the layout parameter...