CVE-2005-4034

HIGH 7.5CVE-2005-4034 · Published 06/12/2005 · updated 16/06/2026

In short

CVE-2005-4034 is a HIGH (CVSS 7.5) vulnerability affecting edating professional (web4future).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
edating professional web4future	`= 5`	No fix yet

Description

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php.

References

pridels0.blogspot.com/2005/12/web4future-edating-professional-v5-sql.html
secunia.com/advisories/17879 · Vendor Advisory
osvdb.org/21418 · Exploit
osvdb.org/21419 · Exploit
osvdb.org/21420 · Exploit
osvdb.org/21421 · Exploit
securityfocus.com/bid/15715 · Exploit
vupen.com/english/advisories/2005/2734

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free