CVE-2009-2178

CVE-2009-2178 is a documented cross-site scripting (XSS) vulnerability in phpDatingClub 3.7. The affected component is the application’s PHP file website.php , with exploitation possible via the page parameter to inject arbitrary web script or HTML. The vulnerability is reported in the NVD entry ...

CVE-2009-2179

CVE-2009-2179 corresponds to a SQL injection vulnerability in phpDatingClub 3.7, specifically in search.php where an attacker can manipulate the sform[day] parameter to execute arbitrary SQL commands. Multiple connected sources (NVD, OpenVAS) describe the issue and, in some entries, an additional...

CVE-2008-3179

The CVE-2008-3179 entry concerns Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7. It describes a directory traversal vulnerability in website.php that allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the page parameter. Root cause: impro...