• info
• discussion
• exploit
• solution
• references

Web4Future eDating Professional Multiple SQL Injection Vulnerabilities

No exploit is required.

Example URI have been provided:

http://www.example.com/index.php?afis=browse&s=[SQL]

http://www.example.com/index.php?afis=profil&pg=[SQL]

http://www.example.com/index.php?afis=SelCupidonNoLog&sortb=[SQL]

http://www.example.com/gift.php?A=ViewGifts&cid=[SQL]

http://www.example.com/articles.php?cat=1[SQL]

http://www.example.com/articles.php?A=ViewArticles&cat=1[SQL]

http://www.example.com/fq.php?A=ViewFQ&cid=1[SQL]