Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Matrimony Website Script M-Plus Multiple SQL Injection
Vulnerability Description
Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, and cboCountry across simplesearch_results.php, advsearch_results.php, specialcase_results.php, locational_results.php, and registration2.php to extract sensitive database information or execute arbitrary SQL commands.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
MATRI4WEB Matrimony Website Script M-Plus SQL注入漏洞
Vulnerability Description
MATRI4WEB Matrimony Website Script M-Plus是印度MATRI4WEB公司的一个搭建婚恋交友平台并管理会员资料与匹配功能的网站脚本系统。 MATRI4WEB Matrimony Website Script M-Plus存在SQL注入漏洞，该漏洞源于多个SQL注入，可能导致未经身份验证的攻击者通过txtGender、religion、Fage和cboCountry等各种POST参数注入SQL代码来操纵数据库查询。
CVSS Information
N/A
Vulnerability Type
N/A