27 matches found
CVE-2021-41694
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...
EUVD-2021-28706
Malicious code in bioql PyPI...
EUVD-2021-28709
Malicious code in bioql PyPI...
EUVD-2021-28708
Malicious code in bioql PyPI...
CVE-2021-41696
An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...
CVE-2021-41695
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...
CVE-2021-41697
A reflected Cross Site Scripting XSS vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerrordescription parameter in assets/sources/instagram.php script...
CVE-2021-41697
A reflected Cross Site Scripting XSS vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerrordescription parameter in assets/sources/instagram.php script...
CVE-2021-41695
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...
CVE-2021-41696
An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...
CVE-2021-41694
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...
CVE-2021-41696
An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...
CVE-2021-41695
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...
CVE-2021-41697
A reflected Cross Site Scripting XSS vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerrordescription parameter in assets/sources/instagram.php script...
Authentication flaw
An authentication bypass account takeover vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php...
Sql injection
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php...
Cross site scripting
A reflected Cross Site Scripting XSS vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerrordescription parameter in assets/sources/instagram.php script...
Improper access control
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...
CVE-2021-41697
A reflected Cross Site Scripting XSS vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerrordescription parameter in assets/sources/instagram.php script...
CVE-2021-41697
A reflected Cross Site Scripting (XSS) vulnerability exists in Belloo/Premiumdatingscript around version 4.2.7.7, exploitable via the aerror_description parameter in assets/sources/instagram.php. Sources in CNVD/CNNVD/Red Hat/CVE listings describe a client-side JavaScript execution risk due to in...