{"api_version":"1","generated_at":"2026-07-23T11:51:14+00:00","cve":"CVE-2006-3283","urls":{"html":"https://cve.report/CVE-2006-3283","api":"https://cve.report/api/cve/CVE-2006-3283.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3283","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3283"},"summary":{"title":"CVE-2006-3283","description":"SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-06-28 22:05:00","updated_at":"2018-10-18 16:46:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://securityreason.com/securityalert/1164","name":"1164","refsource":"SREASON","tags":[],"title":"SecurityReason - Dating Agent PRO 4.7.1 Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/438160/100/100/threaded","name":"20060622 Dating Agent PRO 4.7.1 Vulnerability","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27342","name":"datingagent-multiple-scripts-sql-injection(27342)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3283","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3283","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3283","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"datetopia","cpe5":"dating_agent_pro","cpe6":"4.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3283","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"datetopia","cpe5":"dating_agent_pro","cpe6":"4.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3283","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"datingagent-multiple-scripts-sql-injection(27342)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27342"},{"name":"1164","refsource":"SREASON","url":"http://securityreason.com/securityalert/1164"},{"name":"20060622 Dating Agent PRO 4.7.1 Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/438160/100/100/threaded"}]}},"nvd":{"publishedDate":"2006-06-28 22:05:00","lastModifiedDate":"2018-10-18 16:46:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:datetopia:dating_agent_pro:4.7.1:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3283","Ordinal":"18608","Title":"CVE-2006-3283","CVE":"CVE-2006-3283","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3283","Ordinal":"1","NoteData":"SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3283","Ordinal":"2","NoteData":"2006-06-28","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3283","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}