CVEvulnerability
CVE-2006-3283
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-06-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php.
Affected configurations
• datetopia dating agent pro 4.7.1
References
- http://securityreason.com/securityalert/1164 securityreason.com
- http://www.securityfocus.com/archive/1/438160/100/100/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27342 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/1164 securityreason.com
- http://www.securityfocus.com/archive/1/438160/100/100/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27342 exchange.xforce.ibmcloud.com