Scriptsez.net » E-dating System : Security Vulnerabilities, CVEs, Published In 2007 CVSS score >= 5
Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting (XSS) attacks.
Max CVSS
9.3
EPSS Score
0.82%
Published
2007-02-24
Updated
2008-09-05
cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message.
Max CVSS
5.0
EPSS Score
0.44%
Published
2007-02-24
Updated
2008-09-05
2 vulnerabilities found