aewebworks vulnerabilities

Products

• aedating 5

Latest aewebworks CVEs

Newest publication first

1. CVE-2006-4870 Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/d...

   Published 2006-09-19

   High·CVSS 7.5 EPSS 10.1%

   Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.

2. CVE-2006-3279 Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.p...

   Published 2006-06-28

   Medium·CVSS 4.3 EPSS 1.3%

   Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email parameter in forgot.php.

3. CVE-2005-2985 SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.

   Published 2005-09-19

   High·CVSS 7.5 EPSS 1.2%

   SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.

4. CVE-2005-1084 SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.

   Published 2005-04-12

   High·CVSS 7.5 EPSS 1.1%

   SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.

5. CVE-2005-1083 index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.

   Published 2005-04-12

   Medium·CVSS 5.0 EPSS 1.1%

   index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.