CVE-2019-25639 - Vulnerability Analysis

Overview

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities caused by unsanitized POST parameters in various PHP scripts, letting unauthenticated attackers execute arbitrary SQL commands and extract sensitive data.

Severity & Score

Impact

Unauthenticated attackers can execute arbitrary SQL commands, leading to data theft or database compromise.

Mitigation

Update to the latest version of Matrimony Website Script M-Plus with SQL injection fixes.

References

• https://www.exploit-db.com/exploits/46591
• https://www.matri4web.com
• https://www.vulncheck.com/advisories/matrimony-website-script-m-plus-multiple-sql-injection

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner