Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2009-4739

Disclosure Date: March 26, 2010 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the language_id parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.
0
0
Attacker Value
Unknown

CVE-2009-4699

Disclosure Date: March 15, 2010 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/auth.php and (2) file_uploader.php.
0
0
Attacker Value
Unknown

CVE-2009-4700

Disclosure Date: March 15, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. (dot dot) in the layout parameter.
0
0
Attacker Value
Unknown

CVE-2007-5299

Disclosure Date: October 09, 2007 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode parameter to (1) featured_list.php and (2) online_list.php in member/.
0
0