CVE-2005-2985

Description

SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.

Affected products

• aewebworks / aedating3.2 – 3.2
• aewebworks / aedating4.0 – 4.0

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/16831/
• MISChttp://www.securityfocus.com/bid/14847
• MAILING_LISThttp://marc.info/?l=bugtraq&m=112681800009262&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/22301