CVE-2017-15971 Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972.
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softdatepro same date pro | = 1.0 | No fix listed |
References
- packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
- 43088 exploit issue-tracking third-party-advisory vdb-entry