Vulnerabilities

TI-2021-18383 CVE-2021-41697 · GHSA-r26h-3pgg-jf32

A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript…

LOW 28

A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00725 Published 2021-12-09 No fix listed CWE-79

TI-2021-18382 CVE-2021-41696 · GHSA-xphm-wf5f-fcxm

An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript…

LOW 31

An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00936 Published 2021-12-09 No fix listed CWE-521

TI-2021-18381 CVE-2021-41695 · GHSA-56mj-58m7-xhxx

An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter…

MEDIUM 45

An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01253 Published 2021-12-09 No fix listed CWE-89

TI-2021-18380 CVE-2021-41694 · GHSA-ggp6-pc6f-gh53

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the…

MEDIUM 45

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01319 Published 2021-12-09 No fix listed CWE-330

Vulnerabilities

Filters

A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript…

An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript…

An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter…

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the…