CVE-2017-15971

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Same Sex Dating Software Pro version 1.0 is vulnerable to SQL Injection via the profid parameter in viewprofile.php, the sender_id parameter in viewmessage.php, and the Email field in the admin section.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing user data confidentiality.

Recommendation

It is recommended to update the software to the latest version and implement input validation to prevent SQL Injection attacks.

Original NVD description (English source)

Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972.