An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...
9.8CVSS7.4AI score0.01213EPSS
SaveExploits1References2
ATTACKERKB•added 2021/12/09 4:15 p.m.•3 views
CVE-2021-41696
An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...