CVE-2019-25639: Improper Neutralization of Special Elements used in an SQL Command

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

Matri4Web Matrimony Web Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Matrimony Website Script - Multiple SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.matri4web.com Demo Site: https://www.matrimonydemo.com Version: M-Plus Tested on: Kali Linux CVE: N/A ----- PoC 1:...

Matri4Web Matrimony Website Script - Multiple SQL Injection

Matri4Web Matrimony Website Script - Multiple SQL Injection Exploit Title: Matrimony Website Script - Multiple SQL Injection Date: 22.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.matri4web.com Demo Site: https://www.matrimonydemo.com Version: M-Plus Tested on: Kali Linux...

ZeeMatri v3x Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ================================================ ZeeMatri v3x Arbitrary File Upload Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

ZeeNetworking v1x Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ===================================================== ZeeNetworking v1x Arbitrary File Upload Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...