CVE-2006-3271

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1) country and (2) sort_by parameters in (a) search_results.php; (3) browse parameter in (b) featured_photos.php; (4) cid parameter in (c) products.php, (d) index.php, and (e) news_desc.php.

• http://secunia.com/advisories/20802Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1163Third Party Advisory
• http://www.securityfocus.com/archive/1/438245/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/18605Exploit
• http://www.vupen.com/english/advisories/2006/2512Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27383Third Party Advisory
• http://secunia.com/advisories/20802Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1163Third Party Advisory
• http://www.securityfocus.com/archive/1/438245/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/18605Exploit
• http://www.vupen.com/english/advisories/2006/2512Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27383Third Party Advisory

Published

Jun 28, 2006

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3265Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2006-3266Multiple PHP remote file inclusion vulnerabilities in Bee-hi…
• CVE-2006-3267SQL injection vulnerability in index.php in Infinite Core Te…
• CVE-2006-3268Unspecified vulnerability in the Windows Client API in Novel…
• CVE-2006-3269PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-3270SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.…
• CVE-2006-3272Cross-site request forgery (CSRF) vulnerability in menu.php …
• CVE-2006-3273Cross-site scripting (XSS) vulnerability in menu.php in Some…
• CVE-2006-3274Directory traversal vulnerability in Webmin before 1.280, wh…
• CVE-2006-3275SQL injection vulnerability in profile.php in YaBB SE 1.5.5 …
• CVE-2006-3276Heap-based buffer overflow in RealNetworks Helix DNA Server …
• CVE-2006-3277The SMTP service of MailEnable Standard 1.92 and earlier, Pr…