Summary
phpDatingClub is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
phpDatingClub 3.7 is vulnerable
other versions may also be
affected.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-2178, CVE-2009-2179 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- AIOCP 'cp_html2xhtmlbasic.php' Remote File Inclusion Vulnerability
- ActivDesk Multiple Cross Site Scripting and SQL Injection Vulnerabilities
- Awstats Configuration File Remote Arbitrary Command Execution Vulnerability
- Admbook PHP Code Injection Flaw
- Ajax File and Image Manager 'data.php' PHP Code Injection Vulnerability