RSS   Vulnerabilities for 'Premiumdatingscript'   RSS

2021-12-09
 
CVE-2021-41694

CWE-640
 

 
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.

 
 
CVE-2021-41695

CWE-89
 

 
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .

 
 
CVE-2021-41696

CWE-521
 

 
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.

 
 
CVE-2021-41697

CWE-79
 

 
A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.

 


Copyright 2024, cxsecurity.com

 

Back to Top