CVE-2009-4739: Skadate Online Dating Software

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the language_id parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.

Affected products

  • Skadate Skadate Online Dating Software: any version

Published 2010-03-26. Last modified 2026-06-16.