CVE-2006-3283 SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex....
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datetopia dating agent pro | = 4.7.1 | No fix listed |
References
- 1164 third-party-advisory
- 20060622 Dating Agent PRO 4.7.1 Vulnerability mailing-list
- datingagent-multiple-scripts-sql-injection(27342) vdb-entry