Description


A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/photo.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References


https://vuldb.com/?id.95419

Permissions RequiredThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/41044/

ExploitThird Party AdvisoryVDB Entry

Weaknesses



CWE-269


CWE-269

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-06-21T06:15:08.213

3 years ago

Last modified

2022-06-28T18:55:52.233

3 years ago