muslim matrimonial script vulnerabilities and fixes

Recent CVEs affecting muslim matrimonial script, with upgrade or downgrade steps. 9 tracked.

Also searched as: muslimmatrimonialscript.

muslim matrimonial script has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-30. Highest priority: CVE-2017-17639 (score 65/100).

• CVE-2017-17988 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
• CVE-2017-17987 HIGH 7.2 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
• CVE-2017-17986 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.
• CVE-2017-17985 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
• CVE-2017-17984 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.
• CVE-2017-17983 HIGH 8.8 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
• CVE-2017-17982 MEDIUM 6.8 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
• CVE-2017-17981 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.
• CVE-2017-17639 CRITICAL 9.8 DOWNGRADE Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.

FAQ

How do I fix muslim matrimonial script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is muslim matrimonial script being exploited right now?

None of the tracked muslim matrimonial script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which muslim matrimonial script CVE should I patch first?

CVE-2017-17639 currently ranks highest (65/100): Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter..

RSS feed for muslim matrimonial script · ← Back to latest CVEs