CVE:CVE-2017-17648
CNNVD:CNNVD-201712-496
Entrepreneur Dating Script是一套在线交友网站脚本。
Entrepreneur Dating Script 2.0.1版本中存在SQL注入漏洞。远程攻击者可通过向search_result.php文件发送‘marital’、‘gender’或‘profileid’参数利用该漏洞注入SQL命令。
solution:Upgrade entrepreneur_dating_script_project entrepreneur_dating_script to a higher version than 2.0.1,and avoid the version 2.0.1