Search vulnerabilities

Results 1

Export CSV
CVE-2019-25635

Zeeways Matrimony CMS Lastest SQL Injection via profile_list

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attackers can inject SQL code via the up_cast, s_mother, and s_religion parameters to extract sensitive database information using time-based or error-based techniques.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors