TI-2017-11702 CVE-2017-15972 · GHSA-7m8x-j69q-xjpfSoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid…Priority MEDIUM 47SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02858 · Published 2017-10-29 · No fix listed CWE-89