CVE-2017-17648

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Entrepreneur Dating Script version 2.0.1 has an SQL Injection vulnerability via the marital, gender, country, or profileid parameter in the search_result.php file.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing user data confidentiality.

Recommendation

It is recommended to update the script to the latest version and to validate and sanitize input data to prevent SQL Injection attacks.

Original NVD description (English source)

Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.