Aewebworks · Aedating Script · CVE-2005-2985
**Name of the Vulnerable Software and Affected Versions**
AEwebworks aeDating Script versions 4.0 and earlier
**Description**
The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the `Country` parameter in the search result.php file.
**Recommendations**
For AEwebworks aeDating Script versions 4.0 and earlier, update to a version later than 4.0 to resolve the issue. As a temporary workaround, consider restricting access to the search result.php file or validating and sanitizing the `Country` parameter to prevent SQL injection attacks.