Lucene search
+L

59 matches found

EUVD
EUVD
•added 2026/03/24 12:30 p.m.•28 views

EUVD-2019-20018

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/03/24 12:30 p.m.•21 views

EUVD-2019-20010

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS5.9AI score0.00333EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/24 12:16 p.m.•26 views

CVE-2019-25635

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS0.00333EPSS
SaveExploits1References3
NVD
NVD
•added 2026/03/24 12:16 p.m.•23 views

CVE-2019-25639

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS0.0034EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/24 11:27 a.m.•18 views

CVE-2019-25639 Matrimony Website Script M-Plus Multiple SQL Injection

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/24 11:27 a.m.•26 views

CVE-2019-25639

Affected software : Matrimony Website Script M-Plus. Vulnerability : multiple SQL injection flaws allow unauthenticated attackers to manipulate queries by injecting SQL through POST parameters (txtGender, religion, Fage, cboCountry) in pages such as simplesearch_results.php, advsearch_results.php...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/24 11:27 a.m.•47 views

CVE-2019-25639 Matrimony Website Script M-Plus Multiple SQL Injection

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS0.0034EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/24 11:27 a.m.•8 views

CVE-2019-25635

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS5.9AI score0.00333EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/24 11:27 a.m.•35 views

CVE-2019-25635

Zeeways Matrimony CMS is affected by SQL injection vulnerabilities in the profile_list endpoint, exploitable by unauthenticated attackers via the up_cast, s_mother, and s_religion parameters to manipulate database queries and exfiltrate data using time-based or error-based techniques. The CVE-201...

8.8CVSS5.9AI score0.00333EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•25 views

MATRI4WEB Marriage Website Script M-Plus SQL Injection Vulnerability

MATRI4WEB Matrimony Website Script M-Plus is a website scripting system developed by the Indian company MATRI4WEB. It is used to create dating platforms and manage member profiles as well as matching functions. The MATRI4WEB Matrimony Website Script M-Plus has a SQL injection vulnerability. This...

8.8CVSS5.8AI score0.0034EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/24 12:00 a.m.•28 views

PT-2026-27373

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•23 views

Zeeways Matrimony CMS SQL Injection Vulnerability

Zeeways Matrimony CMS is a wedding and dating website building system developed by Zeeways Corporation. Zeeways Matrimony CMS has a SQL injection vulnerability. This vulnerability stems from multiple SQL injections at the profilelist endpoint, which may allow unauthenticated attackers to manipula...

8.8CVSS5.9AI score0.00333EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•8 views

CVE-2019-25639: Improper Neutralization of Special Elements used in an SQL Command

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•9 views

CVE-2019-25635: Improper Neutralization of Special Elements used in an SQL Command

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS5.9AI score0.00333EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:42 a.m.•15 views

CVE-2022-26628

Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter...

9.8CVSS8.5AI score0.01275EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-31182

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.01275EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/27 12:19 a.m.•33 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

9.8CVSS5.9AI score0.0074EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/25 2:15 p.m.•19 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

9.8CVSS0.0074EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/07/25 2:15 p.m.•26 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

9.8CVSS5.9AI score0.0074EPSS
SaveExploits1References2
CVE
CVE
•added 2025/07/25 12:00 a.m.•43 views

CVE-2025-45777

A security vulnerability exists in the Chavara Family Welfare Centre Chavara Matrimony Site v2.0 within its OTP mechanism . This flaw allows an attacker to bypass authentication by submitting a crafted request . The vulnerability is classified as Improper Authentication (CWE-287). Currently, ther...

9.8CVSS5.9AI score0.0074EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder