CVE-2017-17639

概要

参考情報

• packetstormsecurity.com/files/145351/Muslim-Matrimonial-Script-3.02-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43310 · Exploit

muslim matrimonial script のその他の脆弱性

• CVE-2017-17988中 4.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
• CVE-2017-17987高 7.2PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
• CVE-2017-17986中 4.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.
• CVE-2017-17985中 4.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
• CVE-2017-17984中 4.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.