Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2686▼ 84 respecto a la semana anterior

Críticas / altas1444▲ 301 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-4870	Modificada	Alta (7.5)	9.9%	—	Aewebworks Aedating	19/9/2006	16/6/2026	Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.
CVE-2006-3279	Modificada	Media (4.3)	1.3%	—	Aewebworks Aedating	28/6/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email parameter in forgot.php.
CVE-2005-2985	Modificada	Alta (7.5)	1.2%	—	Aewebworks Aedating	20/9/2005	16/6/2026	SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.
CVE-2005-1085	Modificada	Media (4.3)	0.95%	—	Aewebworks Aedating^AI	2/5/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML.
CVE-2005-1084	Modificada	Alta (7.5)	1.1%	—	Aewebworks Aedating	2/5/2005	16/6/2026	SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.
CVE-2005-1083	Modificada	Media (5)	1.1%	—	Aewebworks Aedating	2/5/2005	16/6/2026	index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.