Globaldatingsoftware Premiumdatingscript
4 CVEs affecting Globaldatingsoftware Premiumdatingscript. Latest disclosed: 2021-12-09. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41695 | Critical | 9.8 | 2021-12-09 | An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. . |
CVE-2021-41694 | Critical | 9.8 | 2021-12-09 | An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php. |
CVE-2021-41696 | Medium | 6.5 | 2021-12-09 | An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php. |
CVE-2021-41697 | Medium | 6.1 | 2021-12-09 | A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php… |