Premiumdatingscript Security Vulnerabilities and Issues — Premiumdatingscript CVE List

Lucene search

GlobaldatingsoftwarePremiumdatingscript

4 matches found

CVE•added 2021/12/09 4:15 p.m.•26 views

CVE-2021-41696

An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.

6.5CVSS6.6AI score0.00178EPSS

CVE•added 2021/12/09 4:15 p.m.•26 views

CVE-2021-41697

A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2021/12/09 4:15 p.m.•25 views

CVE-2021-41694

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.

9.8CVSS9.5AI score0.00353EPSS

CVE•added 2021/12/09 4:15 p.m.•22 views

CVE-2021-41695

An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .

9.8CVSS9.8AI score0.00264EPSS