CVE-2021-41695

概要

参考情報

• chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script · Exploit

premiumdatingscript のその他の脆弱性

• CVE-2021-41697中 6.1A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/so…
• CVE-2021-41696中 6.5An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in re…
• CVE-2021-41694緊急 9.8An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.