Vulnerability Details CVE-2009-4699
Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/auth.php and (2) file_uploader.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.028
EPSS Ranking 85.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://osvdb.org/56544
- http://osvdb.org/56545
- http://secunia.com/advisories/35997
- http://www.exploit-db.com/exploits/9260
- http://www.securityfocus.com/bid/35813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52004
- http://osvdb.org/56544
- http://osvdb.org/56545
- http://secunia.com/advisories/35997
- http://www.exploit-db.com/exploits/9260
- http://www.securityfocus.com/bid/35813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52004
Products affected by CVE-2009-4699
-
cpe:2.3:a:skadate:skadate_online_dating_software:*
-
cpe:2.3:a:skadate:skadate_online_dating_software:5.0
-
cpe:2.3:a:skadate:skadate_online_dating_software:6.0
-
cpe:2.3:a:skadate:skadate_online_dating_software:6.482