CVE-2017-15972 SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-159...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softdatepro dating software | = 1.3 | No fix listed |
References
- packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
- 43087 exploit issue-tracking third-party-advisory vdb-entry