Vulnerabilities

TI-2006-04697 CVE-2006-4870 · GHSA-652x-ph42-53x3

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier…

MEDIUM 45

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.10077 Published 2006-09-19 No fix listed

TI-2006-03178 CVE-2006-3279 · GHSA-7xvm-5jmx-6f7w

Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email pa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01342 Published 2006-06-28 No fix listed

TI-2005-02817 CVE-2005-2985 · GHSA-5hf2-99pm-7fmj

SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and…

LOW 35

SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01162 Published 2005-09-19 No fix listed

TI-2005-01022 CVE-2005-1084 · GHSA-xfhp-xrp6-pr99

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01124 Published 2005-04-12 No fix listed

TI-2005-01021 CVE-2005-1083 · GHSA-w97v-hmhc-9vcq

index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.

LOW 25

index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01053 Published 2005-04-12 No fix listed

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier…

Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to…

SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and…

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to…

index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.