vendor:
Matrimonial Script
by:
JaMbA
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Matrimonial Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: 2daybiz/matrimonial_script
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2010
2daybiz matrimonial script SQL injection Vulnerability
A vulnerability exists in 2daybiz matrimonial script which allows an attacker to inject malicious SQL commands into a vulnerable web application. By exploiting this vulnerability, an attacker can gain access to the database and execute arbitrary SQL commands. The vulnerable parameter is the 'id' parameter in the customprofile.php file. An attacker can inject malicious SQL commands into the 'id' parameter and gain access to the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
