CVE-2006-3271

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the 1 country and 2 sortby parameters in a searchresults.php; 3 browse parameter in b featuredphotos.php; 4 cid parameter in c products.php, d index.php, and e newsdesc.php...

CVE-2006-3271

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the 1 country and 2 sortby parameters in a searchresults.php; 3 browse parameter in b featuredphotos.php; 4 cid parameter in c products.php, d index.php, and e newsdesc.php...

CVE-2006-3284

Cross-site scripting XSS vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in 1 webmaster/index.php and 2 search.php...

CVE-2006-3283

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the 1 pid parameter in picture.php, 2 mid parameter in mem.php, and the 3 sex and 4 relationship parameters in search.php...

CVE-2006-3283

CVE-2006-3283 describes an SQL injection vulnerability in Dating Agent PRO 4.7.1. The flaw allows remote attackers to inject arbitrary SQL via specific parameters: pid (picture.php), mid (mem.php), and sex/relationship (search.php). This can lead to unauthorized database access or manipulation as...

CVE-2006-3282

requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...

CVE-2006-3271

The data indicates CVE-2006-3271 affects Softbiz Dating Script 1.0, with multiple SQL injection vulnerabilities in PHP files (search_results.php via country and sort_by; featured_photos.php via browse; products.php, index.php, news_desc.php via cid). The root cause is unsafely interpolated user i...

CVE-2006-3284

Cross-site scripting XSS vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in 1 webmaster/index.php and 2 search.php...

CVE-2006-3271

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the 1 country and 2 sortby parameters in a searchresults.php; 3 browse parameter in b featuredphotos.php; 4 cid parameter in c products.php, d index.php, and e newsdesc.php...

CVE-2006-3284

CVE-2006-3284 describes an XSS vulnerability in Dating Agent PRO 4.7.1. Affected component: login parameter in webmaster/index.php and search.php, enabling injection of arbitrary web script/HTML. The NVD entry records CVSSv2 base score 2.6 (LOW) with network attack, high complexity, no authentica...

softbizDating.txt

Softbiz Dating 1.0 http://www.softbizscripts.com ----------------------------- ------------- SQL injection ------------- http://target.xx/searchresults.php?country=1SQL http://target.xx/searchresults.php?pg=2&sortby=1SQL http://target.xx/featuredphotos.php?browse=1SQL...

aeDating41.txt

Product of AEwebworks Dating Software http://www.aewebworks.com/ --------------------------- Cross Site Scripting XSS --------------------------- http://target.xx:80/index.php?Sex="alert/Elipsis+Security+Test/&Mode=last ^"G4" Template work^ --- POST /joinform.php HTTP/1.1 Content-Type:...

Dating Agent PRO 4.7.1 Vulnerability

Dating Agent PRO 4.7.1 http://www.datetopia.com/datingagent/ -------------------------------------- ------------- PHPinfo page /requirements.php ------------- SQL injection ------------- http://target.xx/picture.php?pid=1SQL http://target.xx/mem.php?mid=1SQL...

aeDating 4.1 XSS

Product of AEwebworks Dating Software http://www.aewebworks.com/ --------------------------- Cross Site Scripting XSS --------------------------- http://target.xx:80/index.php?Sex="scriptalert/Elipsis+Security+Test//script&Mode=last ^"G4" Template work^ --- POST /joinform.php HTTP/1.1 Content-Typ...

Softbiz Dating 1.0 SQL injection

Softbiz Dating 1.0 http://www.softbizscripts.com ----------------------------- ------------- SQL injection ------------- http://target.xx/searchresults.php?country=1SQL http://target.xx/searchresults.php?pg=2&sortby=1SQL http://target.xx/featuredphotos.php?browse=1SQL...

Custom Dating Biz 1.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18626/info Custom Dating Biz is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the...

SoftBizScripts Dating Script 1.0 - products.php SQL Injection

SoftBizScripts Dating Script 1.0 - products.php SQL Injection source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A...

SoftBizScripts Dating Script 1.0 - index.php SQL Injection

SoftBizScripts Dating Script 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A...

Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities

Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18607/info Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in t...

SoftBizScripts Dating Script 1.0 - featured_photos.php SQL Injection

SoftBizScripts Dating Script 1.0 - featuredphotos.php SQL Injection source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. ...