CVE-2017-17648

Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.
References
Link Resource
https://www.exploit-db.com/exploits/43278 Exploit Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:entrepreneur_dating_script_project:entrepreneur_dating_script:2.0.1:*:*:*:*:*:*:*

Information

Published : 2017-12-13 08:29

Updated : 2017-12-26 07:31


NVD link : CVE-2017-17648

Mitre link : CVE-2017-17648


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

entrepreneur_dating_script_project

  • entrepreneur_dating_script