globaldatingsoftware records
4 published records for vendor globaldatingsoftware.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-330 Use of Insufficiently Random Values1
- CWE-521 Weak Password Requirements1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2021-41694No exploit | An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.globaldatingsoftware · premiumdatingscript · CWE-330 | Critical9.8 | — | 1.3% | Dec 9, 2021 |
39Monitor | CVE-2021-41695No exploit | An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php.globaldatingsoftware · premiumdatingscript · CWE-89 | Critical9.8 | — | 1.3% | Dec 9, 2021 |
26Monitor | CVE-2021-41696No exploit | An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in reglobaldatingsoftware · premiumdatingscript · CWE-521 | Medium6.5 | — | 0.9% | Dec 9, 2021 |
24Monitor | CVE-2021-41697No exploit | A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/soglobaldatingsoftware · premiumdatingscript · CWE-79 | Medium6.1 | — | 0.7% | Dec 9, 2021 |
- CVE-2021-4169439Monitor
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
CriticalCVSS 9.8No exploitEPSS 1%globaldatingsoftware · premiumdatingscriptDec 9, 2021
- CVE-2021-4169539Monitor
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php.
CriticalCVSS 9.8No exploitEPSS 1%globaldatingsoftware · premiumdatingscriptDec 9, 2021
- CVE-2021-4169626Monitor
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in re
MediumCVSS 6.5No exploitEPSS 1%globaldatingsoftware · premiumdatingscriptDec 9, 2021
- CVE-2021-4169724Monitor
A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/so
MediumCVSS 6.1No exploitEPSS 1%globaldatingsoftware · premiumdatingscriptDec 9, 2021