Popis
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attackers can inject SQL code via the up_cast, s_mother, and s_religion parameters to extract sensitive database information using time-based or error-based techniques.
CVSS 8.2EPSS 0.327%Riziko 0.84
Zobraziť zdroj- Zverejnené
- 2026-03-24 12:16:04
- Dotknuté verzie
- unknown
- Typ
- Core software
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N