Vulnerability in Datetopia Dating Agent Pro

CVE-2006-3283

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php.

EPSS: 0.012 (65.0th percentile) — read the EPSS interpretation.

Affected products

Datetopia Dating_agent_pro — versions 4.7.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)