CVE-2021-41697

概要

参考情報

• chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script · Exploit

premiumdatingscript のその他の脆弱性

• CVE-2021-41696中 6.5An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in re…
• CVE-2021-41695緊急 9.8An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .
• CVE-2021-41694緊急 9.8An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.