vendor:
Dating Agent PRO
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-site Scripting and SQL-injection
79, 89
CWE
Product Name: Dating Agent PRO
Affected Version From: 4.7.2001
Affected Version To: 4.7.2001
Patch Exists: NO
Related CWE: N/A
CPE: a:dating_agent:dating_agent_pro
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Dating Agent Multiple Input Validation Vulnerabilities
Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
Mitigation:
Input validation should be performed to ensure that untrusted data is not used to execute unintended commands or queries. It is also recommended to use prepared statements to prevent SQL injection.
