Muslim Matrimonial Script Project Muslim Matrimonial Script — known CVE vulnerabilities

Every CVE whose affected-product data names Muslim Matrimonial Script Project Muslim Matrimonial Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2017-17639 — CVSS 9.8 (critical): Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
• CVE-2017-17983 — CVSS 8.8 (high): PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
• CVE-2017-17987 — CVSS 7.2 (high): PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
• CVE-2017-17982 — CVSS 6.8 (medium): PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
• CVE-2017-17981 — CVSS 5.4 (medium): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.
• CVE-2017-17988 — CVSS 4.8 (medium): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
• CVE-2017-17984 — CVSS 4.8 (medium): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.
• CVE-2017-17985 — CVSS 4.8 (medium): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
• CVE-2017-17986 — CVSS 4.8 (medium): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.