CVE-2017-20067

🗓️ 21 Jun 2022 06:05:40Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 51 Views🌐 WEB

Vulnerability in Hindu Matrimonial Script, critical SQL injection in /admin

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2017-20067	21 Jun 202212:27	–	circl
CNNVD	PHP Matrimonial Script Hindu Matrimonial Script SQL注入漏洞	21 Jun 202200:00	–	cnnvd
CNVD	Hindu Matrimonial Script SQL注入漏洞	23 Jun 202200:00	–	cnvd
Cvelist	CVE-2017-20067 Hindu Matrimonial Script sql injection	21 Jun 202206:05	–	cvelist
EUVD	EUVD-2017-11074	7 Oct 202500:30	–	euvd
NVD	CVE-2017-20067	21 Jun 202206:15	–	nvd
Prion	Sql injection	21 Jun 202206:15	–	prion
RedhatCVE	CVE-2017-20067	5 Feb 202518:16	–	redhatcve
Vulnrichment	CVE-2017-20067 Hindu Matrimonial Script sql injection	21 Jun 202206:05	–	vulnrichment

NVD

Node

hindu_matrimonial_script_project hindu_matrimonial_scriptMatch-

[
  {
    "product": "Hindu Matrimonial Script",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/41044/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
username	request body	/admin/	SQL injection via username/password leading to unauthorized access in Hindu Matrimonial Script.	CWE-89
password	request body	/admin/	SQL injection via username/password leading to unauthorized access in Hindu Matrimonial Script.	CWE-89

21 Nov 2024 03:22Current

8.9High risk

Vulners AI Score8.9

CVSS 27.5

CVSS 3.17.3 - 9.8

EPSS0.00223

SSVC

CWE-89