PT-2017-14927 · Unknown · Multireligion Responsive Matrimonial

Ihsan Sencan · Publicado 2017-12-13 · Atualizado 2017-12-29 · CVE-2017-17631

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Multireligion Responsive Matrimonial version 4.7.2

Description The issue is related to SQL Injection, which can be exploited via the succid parameter in the "success-story.php" endpoint.

Recommendations For Multireligion Responsive Matrimonial version 4.7.2, avoid using the succid parameter in the "success-story.php" endpoint until the issue is resolved. Consider validating and sanitizing user input to prevent SQL Injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-17631

Produtos afetados

Multireligion Responsive Matrimonial

Referências · 4

• 🔥 https://exploit-db.com/exploits/43299 · Exploit
• 🔥 https://packetstormsecurity.com/files/145341/Multireligion-Responsive-Matrimonial-4.7.2-SQL-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-17631 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17631 · Nota de Segurança