CVE-2020-35151

The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection.
References
Link Resource
https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/ Product Third Party Advisory
https://www.exploit-db.com/exploits/49307 Exploit Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:online_marriage_registration_system_project:online_marriage_registration_system:1.0:*:*:*:*:*:*:*

Information

Published : 2020-12-21 13:15

Updated : 2020-12-22 10:30


NVD link : CVE-2020-35151

Mitre link : CVE-2020-35151


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

online_marriage_registration_system_project

  • online_marriage_registration_system