Online Matrimonial Project vulnerabilities
6 known vulnerabilities in Online Matrimonial Project from Projectworlds Pvt.. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Online Matrimonial Project: Improper Neutralization of Special Elements used in an SQL Command
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the view_profile.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Matrimonial Project: Improper Neutralization of Special Elements used in an SQL Command
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to th
- 9.8 Critical severity
Online Matrimonial Project: Improper Neutralization of Special Elements used in an SQL Command
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfilt
- 9.8 Critical severity
Online Matrimonial Project: Improper Neutralization of Special Elements used in an SQL Command
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to
- 9.8 Critical severity
Online Matrimonial Project: Improper Neutralization of Special Elements used in an SQL Command
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Matrimonial Project: Improper Neutralization of Special Elements used in an SQL Command
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partner_preference.php resource does not validate the characters received and they are sent unfiltered to the database.