AJ Dating 1.0 (view_profile.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= AJ Dating 1.0 viewprofile.php Remote SQL Injection Exploit ============================================================= AJDating 1.0 viewprofile.php Remote BLIND SQL Injection...

CVE-2006-7059

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities &0000039 in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...

CVE-2006-7061

Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting XSS attacks...

CVE-2006-7060

cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message...

CVE-2006-7061

Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting XSS attacks...

CVE-2006-7061

CVE-2006-7061 affects Scriptsez.net E-Dating System. The vulnerability stems from storing data files with predictable names under the web document root and insufficient access control, enabling remote attackers to read private messages and potentially leverage them for XSS. The connected document...

CVE-2006-7059

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities &0000039 in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...

CVE-2006-7059

CVE-2006-7059 affects Scriptsez.net E-Dating System. The issue is multiple cross-site scripting (XSS) vulnerabilities that let remote attackers inject arbitrary script/HTML via encoded entities (&#0000039) in IMG tags to (1) messages, (2) profile fields, or (3) the id parameter in a dologin opera...

CVE-2006-7060

The CVE-2006-7060 entry concerns the Scriptsez.net E-Dating System, specifically the file/component cindex.php. Affected behavior is a remote disclosure where an invalid id parameter in a dologin action causes an error message that reveals the full filesystem path, leading to potential informatio...

CVE-2006-7060

cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message...

CVE-2006-7059: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities ' in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...

CVE-2006-7061: Undefined Security Weakness

Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting XSS attacks...

CVE-2006-7060: Undefined Security Weakness

cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message...

CVE-2006-6022

The CVE-2006-6022 entry documents a Cross-site Scripting (XSS) flaw in BestWebApp Dating Site, specifically in login_form.asp where an attacker can inject arbitrary script via the msg parameter. The vulnerability’s described impact is partial confidentiality/integrity/availability, with network a...

CVE-2006-6021

CVE-2006-6021 describes a SQL injection in the login component of BestWebApp Dating Site, exploitable via the username and passwd parameters, allowing remote arbitrary SQL commands. The CVE entry indicates a network attack vector with no authentication, and partial impacts to confidentiality, int...

CVE-2006-6022

Cross-site scripting XSS vulnerability in loginform.asp in BestWebApp Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-6021: Undefined Security Weakness

SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...

CVE-2006-6022: Undefined Security Weakness

Cross-site scripting XSS vulnerability in loginform.asp in BestWebApp Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

datingbypass.txt

vendor site:http://www.hotwebapp.com/ product:Dating Site bug:injection sql & xss risk:high log in with : username = ' or '1' = '1 passwd = ' or '1' = '1 xss get : /loginform.asp?msg=xss here laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

Dating Site [ login bypass & xss]

vendor site:http://www.hotwebapp.com/ product:Dating Site bug:injection sql & xss risk:high log in with : username = ' or '1' = '1 passwd = ' or '1' = '1 xss get : /loginform.asp?msg=xss here laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...