CVE-2006-3271

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1) country and (2) sort_by parameters in (a) search_results.php; (3) browse parameter in (b) featured_photos.php; (4) cid parameter in (c) products.php, (d) index.php, and (e) news_desc.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/20802Exploit, Vendor Advisory
http://securityreason.com/securityalert/1163Third Party Advisory
http://www.securityfocus.com/archive/1/438245/100/0/threadedBroken Link
http://www.securityfocus.com/bid/18605Exploit
http://www.vupen.com/english/advisories/2006/2512Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/27383Third Party Advisory
http://secunia.com/advisories/20802Exploit, Vendor Advisory
http://securityreason.com/securityalert/1163Third Party Advisory
http://www.securityfocus.com/archive/1/438245/100/0/threadedBroken Link
http://www.securityfocus.com/bid/18605Exploit
http://www.vupen.com/english/advisories/2006/2512Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/27383Third Party Advisory

Timeline

Published: Jun 28, 2006
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2006