CVE-2017-15972

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SoftDatepro Dating Social Network version 1.3 is vulnerable to SQL Injection via the profid parameter in viewprofile.php, the sender_id parameter in viewmessage.php, and the Email field in the admin panel.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening user data confidentiality and system integrity.

Recommendation

It is recommended to update the software to the latest version and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971.