CVE-2017-20067

🗓️ 21 Jun 2022 06:05:40Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 76 Views🌐 WEB

Vulnerability in Hindu Matrimonial Script, critical SQL injection in /admin

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2017-20067	21 Jun 202212:27	–	circl
CNNVD	PHP Marriage Script Hindu Marriage Script SQL Injection Vulnerability	21 Jun 202200:00	–	cnnvd
CNVD	Hindu Matrimonial Script SQL注入漏洞	23 Jun 202200:00	–	cnvd
Cvelist	CVE-2017-20067 Hindu Matrimonial Script sql injection	21 Jun 202206:05	–	cvelist
EUVD	EUVD-2017-11074	7 Oct 202500:30	–	euvd
NVD	CVE-2017-20067	21 Jun 202206:15	–	nvd
Prion	Sql injection	21 Jun 202206:15	–	prion
Positive Technologies	PT-2022-7940	21 Jun 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2017-20067: Improper Neutralization of Special Elements used in an SQL Command	21 Jun 202200:00	–	rapid7
RedhatCVE	CVE-2017-20067	5 Feb 202518:16	–	redhatcve

NVD

Node

hindu_matrimonial_script_project hindu_matrimonial_scriptMatch-

[
  {
    "product": "Hindu Matrimonial Script",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/41044/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
username	request body	/admin/	SQL injection vulnerability in admin login via username/password parameters (input like 'or''=' can bypass authentication).	CWE-89
password	request body	/admin/	SQL injection vulnerability in admin login via username/password parameters (input like 'or''=' can bypass authentication).	CWE-89

17 Jun 2026 01:15Current

8High risk

Vulners AI Score8

CVSS 27.5

CVSS 3.17.3 - 9.8

EPSS0.01159

SSVC

CWE-89