Vendors / Globaldatingsoftware Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Globaldatingsoftware records in CISA KEV No Globaldatingsoftware vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01253 · Published 2021-12-09 · No fix listed CWE-89
Priority MEDIUM 45
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01319 · Published 2021-12-09 · No fix listed CWE-330
Priority LOW 31
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00936 · Published 2021-12-09 · No fix listed CWE-521
Priority LOW 28
A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00725 · Published 2021-12-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 0 2 0 0
THREATIST.IORead the docs