Lucene search
K

54 matches found

EUVD
EUVD
added 2026/03/24 12:30 p.m.5 views

EUVD-2019-20018

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.00044EPSS
Exploits0References4
EUVD
EUVD
added 2026/03/24 12:30 p.m.2 views

EUVD-2019-20010

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS5.9AI score0.00104EPSS
Exploits1References4
NVD
NVD
added 2026/03/24 12:16 p.m.1 views

CVE-2019-25635

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS0.00104EPSS
Exploits1References3
NVD
NVD
added 2026/03/24 12:16 p.m.2 views

CVE-2019-25639

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS0.00044EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/24 11:27 a.m.22 views

CVE-2019-25639 Matrimony Website Script M-Plus Multiple SQL Injection

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS0.00044EPSS
Exploits0References3
CVE
CVE
added 2026/03/24 11:27 a.m.4 views

CVE-2019-25639

Affected software : Matrimony Website Script M-Plus. Vulnerability : multiple SQL injection flaws allow unauthenticated attackers to manipulate queries by injecting SQL through POST parameters (txtGender, religion, Fage, cboCountry) in pages such as simplesearch_results.php, advsearch_results.php...

8.8CVSS6.3AI score0.00044EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 11:27 a.m.3 views

CVE-2019-25639 Matrimony Website Script M-Plus Multiple SQL Injection

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.00044EPSS
Exploits0References3
CVE
CVE
added 2026/03/24 11:27 a.m.6 views

CVE-2019-25635

Zeeways Matrimony CMS is affected by SQL injection vulnerabilities in the profile_list endpoint, exploitable by unauthenticated attackers via the up_cast, s_mother, and s_religion parameters to manipulate database queries and exfiltrate data using time-based or error-based techniques. The CVE-201...

8.8CVSS5.9AI score0.00104EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/24 11:27 a.m.2 views

CVE-2019-25635

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

8.8CVSS5.9AI score0.00104EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.3 views

Zeeways Matrimony CMS SQL注入漏洞

Zeeways Matrimony CMS is a wedding and dating website building system developed by Zeeways Corporation. Zeeways Matrimony CMS has a SQL injection vulnerability. This vulnerability stems from multiple SQL injections at the profilelist endpoint, which may allow unauthenticated attackers to manipula...

8.8CVSS5.9AI score0.00104EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.4 views

MATRI4WEB Matrimony Website Script M-Plus SQL注入漏洞

MATRI4WEB Matrimony Website Script M-Plus is a website scripting system developed by the Indian company MATRI4WEB. It is used to create dating platforms and manage member profiles as well as matching functions. The MATRI4WEB Matrimony Website Script M-Plus has a SQL injection vulnerability. This...

8.8CVSS5.9AI score0.00044EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.1 views

PT-2026-27373

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.00044EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 10:42 a.m.3 views

CVE-2022-26628

Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter...

9.8CVSS8.3AI score0.00303EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-31182

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00303EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/27 12:19 a.m.7 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

9.8CVSS7.3AI score0.00354EPSS
Exploits1References1
NVD
NVD
added 2025/07/25 2:15 p.m.3 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

9.8CVSS0.00354EPSS
Exploits1References2
OSV
OSV
added 2025/07/25 2:15 p.m.2 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

9.8CVSS5.8AI score0.00354EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/07/25 12:0 a.m.1 views

Chavara Matrimony Site 安全漏洞

Chavara Matrimony Site is a Christian marriage platform by Chavara Matrimony India. A security vulnerability exists in Chavara Matrimony Site version 2.0, which stems from a flaw in the OTP mechanism that could lead to authentication bypass...

9.8CVSS6.7AI score0.00354EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/07/25 12:0 a.m.8 views

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

0.00354EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.2 views

PT-2025-30836 · Unknown · Chavara Matrimony Site

Name of the Vulnerable Software and Affected Versions: Chavara Matrimony Site version 2.0 Description: An issue exists in the OTP mechanism that allows attackers to bypass authentication by submitting a crafted request. Recommendations: At the moment, there is no information about a newer version...

9.8CVSS6.3AI score0.00354EPSS
Exploits1References2
Rows per page
Query Builder