Unscored CVE-2006-3283 EUVD-2006-3280GHSA-jp32-p94w-4mwg

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter i…

Published Jun 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php.

References

datingagent-multiple-scripts-sql-injection(27342) vdb-entry
1164 third-party-advisory
20060622 Dating Agent PRO 4.7.1 Vulnerability mailing-list