CVE-2007-6057

CVE-2007-6057 affects the datecomm Social Networking Script (also known as the Myspace Clone Script). The vulnerability is a PHP remote file inclusion in the script’s index.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pg parameter. This is confirmed across mul...

CVE-2007-5992

The CVE-2007-5992 case concerns SQL injection in the datecomm Social Networking Script (aka Myspace Clone Script). Affected code path is index.php via the seid parameter in a viewcat action on the forums page, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is descr...