PT-2025-14702 · Unknown · Code-Projects Matrimonial Site
CVE-2025-29369
·
Publicado
2025-04-03
·
Atualizado
2025-04-04
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Code-Projects Matrimonial Site version V1.0
Description
The issue concerns SQL Injection. It affects the /view profile.php API endpoint, specifically the
id variable. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.Recommendations
For Code-Projects Matrimonial Site version V1.0, consider disabling the
id parameter in the /view profile.php endpoint until a patch is available. Restrict access to the /view profile.php endpoint to minimize the risk of exploitation. Avoid using the id variable in the affected endpoint until the issue is resolved.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Code-Projects Matrimonial Site