vendor:
Hindu Matrimonial Script
by:
İhsan Şencan
7,5
CVSS
HIGH
Admin Login Bypass & SQLi
89
CWE
Product Name: Hindu Matrimonial Script
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: Unknown
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Unknown
2017
Admin Login Bypass & SQLi + Add/Edit
The vulnerability allows an attacker to bypass the admin login page and gain access to the admin panel of the Hindu Matrimonial Script. The attacker can also gain access to the Add/Edit pages of the script by directly entering the URL. The vulnerable script is hosted on http://www.phpmatrimonialscript.in/ and the vulnerable version is unknown.
Mitigation:
Ensure that the admin login page is properly secured and that all user input is properly sanitized and validated.
