nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-15971 CVE-2017-15971
CRITICAL
Same Sex Dating Software Pro 1.0 - SQL Injection
Record summary
CVE-2017-15971 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSame Sex Dating Software Pro 1.0 - SQL InjectionExploitDB exploitby Ihsan SencanNot analyzed1 file
References
3packetstormsecurity.com
https://packetstormsecurity.com/files/144441/Same-Sex-Dating-Software-Pro-1.0-SQL-Injection.html 43088exploit
https://www.exploit-db.com/exploits/43088