| शीर्षक | code-projects.org Matrimonial System 1.0 SQL Injection - CWE-89 |
|---|
| विवरण | A vulnerability was found in code-projects Matrimonial System 1.0. It has been classified as critical. Affected is the function writepartnerprefs of the file partner_preference.php (code located in functions.php). The manipulation of the argument education leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H → 9.8 Critical
RESEARCHERS:
Researcher 1: Karan Parelkar
Email: [email protected]
GitHub: https://github.com/KaranParelkar
LinkedIn: https://www.linkedin.com/in/karan-parelkar-6a370125b/
Researcher 2: Anubhav Verma
Email: [email protected]
GitHub: https://github.com/anubhavv106
LinkedIn: https://www.linkedin.com/in/anubhav-verma-7123a1232/
Researcher 3: Parth Desai
Email: [email protected]
GitHub: https://github.com/ParthD31
LinkedIn: https://www.linkedin.com/in/parth-desai-801951224/ |
|---|
| स्रोत | ⚠️ https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/partner_preference/sqli_education/Readme.md |
|---|
| उपयोगकर्ता | anubhav106 (UID 98769) |
|---|
| सबमिशन | 21/08/2026 11:56 AM (28 दिन पहले) |
|---|
| संयम | 17/09/2026 01:56 PM (27 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 406377 [code-projects Matrimonial System 1.0 /partner_preference.php writepartnerprefs education SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|