35 matches found
EUVD-2008-4356
Malware in sbrugna...
EUVD-2005-4053
Malware in sbrugna...
EUVD-2017-7388
Malware in sbrugna...
EUVD-2017-7387
Malware in sbrugna...
CVE-2017-15971
Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15972...
Sql injection
SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15971...
CVE-2017-15971
CVE-2017-15971 (Same Sex Dating Software Pro) and related CVE-2017-15972 affect SoftDatepro/SameDate Pro dating software. Concrete details from connected sources show SQL Injection vulnerabilities caused by unsafely handling user-controlled input in viewprofile.php (profid), viewmessage.php (send...
PT-2017-14325
Name of the Vulnerable Software and Affected Versions Same Sex Dating Software Pro version 1.0 Description The issue allows SQL Injection via the profid parameter in the "viewprofile.php" endpoint, the sender id parameter in the "viewmessage.php" endpoint, or the Email field in the "/admin"...
PT-2017-14326
Name of the Vulnerable Software and Affected Versions SoftDatepro Dating Social Network version 1.3 Description The issue allows SQL Injection via the profid parameter in the "viewprofile.php" endpoint, the sender id parameter in the "viewmessage.php" endpoint, or the Email field in the "/admin"...
CVE-2017-15972: Improper Neutralization of Special Elements used in an SQL Command
SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15971...
CVE-2017-15971: Improper Neutralization of Special Elements used in an SQL Command
Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15972...
CVE-2009-2772: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to 1 quicksearch.php and 2 viewprofile.php...
CVE-2008-6914
Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in...
CVE-2008-6914: Undefined Security Weakness
Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in...
CVE-2008-4375
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter...
Sql injection
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter...
CVE-2008-4375
CVE-2008-4375 describes an SQL injection in the Aula Availscript Classmate Script’s vulnerable file viewprofile.php , exploitable via the p parameter . The root cause is that user-supplied input reaches an SQL query without proper sanitization, enabling remote attackers to execute arbitrary SQL c...
CVE-2008-4375: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter...
CVE-2008-4352: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...
