PT-2025-14702 · Unknown · Code-Projects Matrimonial Site

CVE-2025-29369

·

Publicado

2025-04-03

·

Atualizado

2025-04-04

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Code-Projects Matrimonial Site version V1.0
Description The issue concerns SQL Injection. It affects the /view profile.php API endpoint, specifically the id variable. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations For Code-Projects Matrimonial Site version V1.0, consider disabling the id parameter in the /view profile.php endpoint until a patch is available. Restrict access to the /view profile.php endpoint to minimize the risk of exploitation. Avoid using the id variable in the affected endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-29369

Produtos afetados

Code-Projects Matrimonial Site